last executing test programs: 10m10.765278527s ago: executing program 2 (id=7339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "119b435d82ec9dc3847470fe14fb9ae89519b3987f9eb3305a758f7be41d94214b65280409dbe8e6ae54e502ca0de76c4de3613b4b5b12e228283cb20f0750e25c"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x14c}}, 0x20050800) 10m10.756961858s ago: executing program 2 (id=7342): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xffff}}, 0x9) 10m10.696300577s ago: executing program 2 (id=7344): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x700, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0) 10m10.670138794s ago: executing program 2 (id=7347): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/fs/nfs', 0x0, 0x49) mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x2, 0x1) 10m10.609165638s ago: executing program 2 (id=7350): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000000"], 0x48) 10m10.383101595s ago: executing program 3 (id=7363): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) read(r0, 0x0, 0x0) 10m10.301622861s ago: executing program 3 (id=7365): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x609, 0xc8, 0x0, &(0x7f00000000c0)="ddc000000000080000e634ab570075a4a697d64e441c029c7b65cf0a7246e50e41d600025d9a2b0172a00d92b4524b6e882166e05bd53099844aeb61694b26fb32e4afb6d7b6de502e904039f71e37d47835dd540cce3a01cdea291991d8f361b590fece730dee7941d88ee8b854ad01b61b0624a41f08b247dc7c2dda60ef2fd226ef323f25572f87f603a43eb2f4d59d836c8f55e2e03ce02fa703908408e7d8382c83f654f603cff0b28d81743f97d47188ed8f12cae5c1be5d875a79f5edbe963a6de50205b143da00000000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1f) 10m10.162682175s ago: executing program 3 (id=7368): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fa, &(0x7f0000000900)={'ip6tnl0\x00', @broadcast}) 10m9.937406489s ago: executing program 3 (id=7371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x5, 0xa, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x4000004) 10m9.853881723s ago: executing program 3 (id=7372): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020ac050f022200e5818301090224000101000000090400000203010200092100050001ffff00090581", @ANYBLOB="eb"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x107001) 10m4.096199314s ago: executing program 2 (id=7376): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 10m3.971214903s ago: executing program 32 (id=7376): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 10m3.720037961s ago: executing program 3 (id=7380): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 10m3.670198127s ago: executing program 33 (id=7380): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 5m18.660389262s ago: executing program 0 (id=18733): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0xb, 0x1f, 0x8}) 5m18.597582674s ago: executing program 0 (id=18737): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000040) 5m18.420149882s ago: executing program 0 (id=18746): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 5m18.355944453s ago: executing program 0 (id=18748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @empty}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 5m18.314146171s ago: executing program 0 (id=18752): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 5m18.248961243s ago: executing program 0 (id=18756): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000000)=0x78) 5m2.015155448s ago: executing program 34 (id=18756): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000000)=0x78) 2m8.565313971s ago: executing program 6 (id=24251): mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') 2m8.551881492s ago: executing program 6 (id=24254): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_clone(0xb100, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x51}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 2m7.62880747s ago: executing program 6 (id=24280): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) getsockopt$MRT(r2, 0x0, 0xcf, 0x0, 0x0) 2m7.579991618s ago: executing program 6 (id=24278): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) 2m7.528106376s ago: executing program 6 (id=24282): socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0}, &(0x7f0000cab000)=0xc) setuid(r1) setregid(0x0, 0xee00) 1m5.521439422s ago: executing program 4 (id=25719): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000111c0)={@generic={0x25, "686cde3d9973be5f43c8cf54ea0a5d75d9c885109f1f4cb3b066e3674682af419f45e638f858dce7e53b039fabb1d9c6d09ab851de40cf8992c444887a281ea314acdfbd11b730c993a49178031016fe842fa19b6e077a2c797e04d35ccf25a6226784ec46f95108d1dec934dcaf0635d26d4ab148c032916547b48838ca"}, {0x0}, 0x0, 0x41}, 0xa0) 1m5.520105278s ago: executing program 4 (id=25720): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4894}, 0x42) 1m5.397325891s ago: executing program 4 (id=25721): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m5.396540953s ago: executing program 4 (id=25723): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m5.09986973s ago: executing program 4 (id=25724): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000003680)={0x0, 0x0, 0x0}, 0x44090) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) 1m5.031777388s ago: executing program 36 (id=25724): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000003680)={0x0, 0x0, 0x0}, 0x44090) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) 59.187968071s ago: executing program 1 (id=25872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 59.042643057s ago: executing program 1 (id=25873): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 58.836281327s ago: executing program 1 (id=25874): r0 = io_uring_setup(0x935, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x1db}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000000140), 0x1) 58.834868286s ago: executing program 1 (id=25875): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 58.691845828s ago: executing program 1 (id=25877): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 58.358533778s ago: executing program 1 (id=25884): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x6c}}, 0x0) 58.246210708s ago: executing program 37 (id=25884): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x6c}}, 0x0) 2.799589283s ago: executing program 5 (id=27027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0xfffffffffffffede, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "e2599803"}]}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.745250081s ago: executing program 5 (id=27030): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newroute={0x38, 0x18, 0x1ef, 0x70bd2b, 0x0, {0xa, 0x20, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5}, [@RTA_GATEWAY={0x14, 0x5, @loopback}, @RTA_OIF={0x8, 0x4, r2}]}, 0x38}, 0x1, 0x11}, 0x0) 2.745091036s ago: executing program 5 (id=27031): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, &(0x7f0000000180)="8d", 0x1) 1.17263294s ago: executing program 5 (id=27061): r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 1.091892867s ago: executing program 5 (id=27064): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 608.473871ms ago: executing program 7 (id=27070): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x570, 0x0, 0x1}]}) 491.261273ms ago: executing program 8 (id=27073): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200004018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7638300c000000000000e900feff", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 491.071444ms ago: executing program 7 (id=27074): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 427.354153ms ago: executing program 8 (id=27075): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kexec_load(0x7, 0x0, 0x0, 0x150000) 427.100093ms ago: executing program 7 (id=27076): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@host}, 0x1, 0x0, 0x1}) 369.74573ms ago: executing program 7 (id=27077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 369.491859ms ago: executing program 7 (id=27078): syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x353381) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000005b80)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x7, 0x8, 0x36, @mcast2, @loopback, 0x40, 0x0, 0x63ed, 0xfffffffe}}) 320.229669ms ago: executing program 7 (id=27079): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0xcf5) ppoll(&(0x7f0000000080)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x7, 0x80000000, 0x0, 0x1, 0x18, "20e7e910d48f69db0360d93e03efc34fd6e659"}) 320.007424ms ago: executing program 9 (id=27080): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x2}}, 0x6a) splice(r1, 0x0, r0, 0x0, 0x18, 0x7) 226.550503ms ago: executing program 9 (id=27081): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2008008, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}]}) 219.029523ms ago: executing program 9 (id=27082): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 212.264276ms ago: executing program 8 (id=27083): r0 = fsopen(&(0x7f0000000040)='fusectl\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x8b) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f00000020c0)='ro\x00', 0x0, 0x0) 151.159867ms ago: executing program 8 (id=27084): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b770711e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0xa748a1016cff1f1b, 0xdd1, 0x7, 0xb, 0x800, 0x600, 0x0, 0x182, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 150.130388ms ago: executing program 9 (id=27085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01eeffffff0000000000020000000900020073797a32000000000900010073797a30000000000c0006400000000000000002"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 147.085437ms ago: executing program 5 (id=27086): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="7638a56a88000000000000000000", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 140.585543ms ago: executing program 8 (id=27087): r0 = syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) setuid(0xee01) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) 84.594102ms ago: executing program 9 (id=27088): syz_emit_ethernet(0x31, &(0x7f0000000080)={@multicast, @local, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@arp={0x806, @generic={0x10f, 0x18, 0x6, 0x6, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, "d9fc8df4fbdd", @broadcast, "3d711ad34e"}}}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x9, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 84.378675ms ago: executing program 9 (id=27089): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x40000000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="4be88faa027b23c53622533e86dd6012"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 8 (id=27090): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x40, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) 0s ago: executing program 8 (id=27091): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x200) rmdir(&(0x7f0000000180)='./cgroup/../file0\x00') kernel console output (not intermixed with test programs): pvrusb2 device. [ 685.707360][ T2514] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 685.711113][ T2514] pvrusb2: Device being rendered inoperable [ 685.717955][ T2514] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 685.720407][ T2514] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 685.730338][ T2514] pvrusb2: Attached sub-driver cx25840 [ 685.732667][ T2514] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 685.737726][ T2514] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 685.877451][T23870] pvrusb2: Attempted to execute control transfer when device not ok [ 685.885218][ T2322] usb 10-1: USB disconnect, device number 19 [ 686.089660][T23922] ubi16: attaching mtd0 [ 686.097975][T23922] ubi16: scanning is finished [ 686.106029][T23922] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 686.262390][T23943] binder: 23941:23943 ioctl 541b 0 returned -22 [ 686.326771][T23922] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 687.189765][T24039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24640'. [ 687.195127][T24039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24640'. [ 687.205853][T24039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24640'. [ 687.446715][T24079] input: syz0 as /devices/virtual/input/input94 [ 687.641260][T24116] ubi16: attaching mtd0 [ 687.650325][T24113] netlink: 44 bytes leftover after parsing attributes in process `syz.4.24662'. [ 687.657346][T24116] ubi16: scanning is finished [ 687.659239][T24116] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 687.873300][T24116] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 688.111890][T24166] ubi16: attaching mtd0 [ 688.114182][T24166] ubi16: scanning is finished [ 688.115759][T24166] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 688.239871][T24175] (syz.4.24685,24175,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 688.321078][T24166] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 688.543751][ T2322] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 688.717089][ T6013] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 688.725134][ T2322] usb 9-1: Using ep0 maxpacket: 32 [ 688.729909][T24227] gretap0: entered promiscuous mode [ 688.731293][ T2322] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 688.735703][ T2322] usb 9-1: config 0 has no interface number 0 [ 688.746985][ T2322] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 688.752289][ T2322] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.755370][ T2322] usb 9-1: Product: syz [ 688.757023][ T2322] usb 9-1: Manufacturer: syz [ 688.759412][ T2322] usb 9-1: SerialNumber: syz [ 688.765828][ T2322] usb 9-1: config 0 descriptor?? [ 688.772576][ T2322] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 688.776606][ T2322] usb 9-1: selecting invalid altsetting 1 [ 688.777048][T24236] netlink: 24 bytes leftover after parsing attributes in process `syz.5.24697'. [ 688.779335][ T2322] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 688.788905][ T2322] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 688.814772][ T2322] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 688.820458][ T2322] usb 9-1: media controller created [ 688.838142][ T2322] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 688.885615][ T6013] usb 6-1: Using ep0 maxpacket: 8 [ 688.897564][ T6013] usb 6-1: unable to get BOS descriptor or descriptor too short [ 688.900838][ T6013] usb 6-1: no configurations [ 688.902843][ T6013] usb 6-1: can't read configurations, error -22 [ 689.109893][T19301] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 689.271877][T19301] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 689.274662][T19301] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 689.277970][T19301] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 689.281584][T19301] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 689.285838][T19301] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 689.289348][T19301] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 689.294197][T19301] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 689.297149][T19301] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 689.299716][T19301] usb 10-1: Product: syz [ 689.301107][T19301] usb 10-1: Manufacturer: syz [ 689.304720][T24247] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 689.308124][T19301] cdc_wdm 10-1:1.0: skipping garbage [ 689.309825][T19301] cdc_wdm 10-1:1.0: skipping garbage [ 689.312380][T19301] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 689.314319][T19301] cdc_wdm 10-1:1.0: Unknown control protocol [ 689.527908][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 689.530068][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 689.532276][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 689.534658][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 689.536792][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 689.538943][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 689.541120][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 689.543239][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 689.545394][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 689.547525][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 689.549276][ T6033] usb 10-1: USB disconnect, device number 20 [ 689.549509][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 689.988066][ T2322] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 689.994312][ T2322] zl10353_read_register: readreg error (reg=127, ret==-110) [ 690.014710][T24183] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 690.040224][T24257] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 690.052111][T19301] usb 9-1: USB disconnect, device number 25 [ 690.452992][T24344] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 690.455306][T24344] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 690.459217][T24344] vhci_hcd vhci_hcd.0: Device attached [ 690.462801][T24345] vhci_hcd: connection closed [ 690.463040][T15277] vhci_hcd vhci_hcd.7: stop threads [ 690.466697][T15277] vhci_hcd vhci_hcd.7: release socket [ 690.468751][T15277] vhci_hcd vhci_hcd.7: disconnect device [ 690.883924][ T6033] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 691.045598][ T6033] usb 10-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 691.048926][ T6033] usb 10-1: config 0 interface 0 has no altsetting 0 [ 691.052730][ T6033] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 691.055967][ T6033] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 691.058639][ T6033] usb 10-1: Product: syz [ 691.060102][ T6033] usb 10-1: Manufacturer: syz [ 691.061661][ T6033] usb 10-1: SerialNumber: syz [ 691.067481][ T6033] usb 10-1: config 0 descriptor?? [ 691.072683][T24357] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 691.085273][ T6033] usb 10-1: selecting invalid altsetting 0 [ 691.316185][ T1042] usb 10-1: USB disconnect, device number 21 [ 691.695898][ T6033] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 691.856549][ T6033] usb 9-1: Using ep0 maxpacket: 16 [ 691.860480][ T6033] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.865751][ T6033] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.871052][ T6033] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 691.879241][ T6033] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 691.883427][ T6033] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.893917][ T6033] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 691.898071][ T6033] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 691.901826][ T6033] usb 9-1: Manufacturer: syz [ 691.916284][ T6033] usb 9-1: config 0 descriptor?? [ 691.951124][T24466] netlink: 48 bytes leftover after parsing attributes in process `syz.5.24745'. [ 692.069965][ T2322] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 692.125147][ T6025] hid-generic 0000:0000:0000.000F: unknown main item tag 0x7 [ 692.127518][ T6025] hid-generic 0000:0000:0000.000F: ignoring exceeding usage max [ 692.130841][ T6025] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 692.133255][ T6025] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 692.137833][ T6025] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 692.143336][ T6025] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 692.145763][ T6025] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 692.148431][ T6025] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 692.150952][ T6025] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 692.153481][ T6025] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 692.156992][ T6025] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 692.162024][ T6025] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 692.209037][ T6033] rc_core: IR keymap rc-hauppauge not found [ 692.212275][ T6033] Registered IR keymap rc-empty [ 692.215347][ T6033] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 692.231414][ T6033] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 692.254856][ T6033] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 692.262833][ T6033] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input95 [ 692.274928][ T6033] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 692.287854][ T2322] usb 6-1: unable to get BOS descriptor or descriptor too short [ 692.290324][ T2322] usb 6-1: no configurations [ 692.294372][ T6033] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 692.296407][ T2322] usb 6-1: can't read configurations, error -22 [ 692.312136][T24496] fido_id[24496]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 692.315969][ T6033] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 692.337415][ T6033] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 692.359331][ T6033] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 692.380214][ T6033] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 692.401726][ T6033] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 692.422603][ T6033] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 692.443917][ T6033] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 692.465329][ T6033] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 692.499713][ T6033] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 692.502698][ T6033] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 692.515386][ T6033] usb 9-1: USB disconnect, device number 26 [ 692.523445][ T1165] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 693.346590][T24589] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24776'. [ 693.416347][ T6033] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 693.593115][ T6033] usb 9-1: unable to get BOS descriptor or descriptor too short [ 693.596828][ T6033] usb 9-1: no configurations [ 693.600274][ T6033] usb 9-1: can't read configurations, error -22 [ 694.026438][T24628] gfs2: path_lookup on  returned error -2 [ 694.316055][ T6025] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 694.474398][ T6025] usb 12-1: Using ep0 maxpacket: 8 [ 694.478446][ T6025] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 694.482383][ T6025] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.493002][ T6025] pvrusb2: Hardware description: Terratec Grabster AV400 [ 694.496119][ T6025] pvrusb2: ********** [ 694.497825][ T6025] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 694.501984][ T6025] pvrusb2: Important functionality might not be entirely working. [ 694.505208][ T6025] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 694.509970][ T6025] pvrusb2: ********** [ 694.692982][ T5936] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 694.696258][ T5932] Bluetooth: hci4: command 0x1003 tx timeout [ 694.713808][ T2514] pvrusb2: Invalid write control endpoint [ 694.802476][ T2514] pvrusb2: Invalid write control endpoint [ 694.804333][ T2514] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 694.807362][ T2514] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 694.809727][ T2514] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 694.812981][ T2514] pvrusb2: Device being rendered inoperable [ 694.814870][ T2514] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 694.818869][ T2514] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 694.822061][ T2514] pvrusb2: Attached sub-driver cx25840 [ 694.823817][ T2514] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 694.826923][ T2514] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 694.870472][T24681] lo: entered allmulticast mode [ 694.928870][T24631] pvrusb2: Attempted to execute control transfer when device not ok [ 694.936514][ T6035] usb 12-1: USB disconnect, device number 2 [ 695.358826][T24732] netlink: 'syz.4.24811': attribute type 10 has an invalid length. [ 695.370320][T24732] team0: Device wg2 is of different type [ 696.812852][ T5932] Bluetooth: hci4: sending frame failed (-49) [ 696.817541][ T5936] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 697.573578][T25002] netlink: 'syz.4.24893': attribute type 14 has an invalid length. [ 698.166824][T25080] binder: 25078:25080 ioctl c018620c 80000140 returned -1 [ 698.494912][T25123] netlink: 'syz.5.24929': attribute type 3 has an invalid length. [ 698.498380][T25123] netlink: 'syz.5.24929': attribute type 1 has an invalid length. [ 698.501682][T25123] netlink: 224 bytes leftover after parsing attributes in process `syz.5.24929'. [ 698.842950][T25156] GUP no longer grows the stack in syz.1.24941 (25156): 80009000-8000a000 (80005000) [ 698.852074][T25156] CPU: 1 UID: 0 PID: 25156 Comm: syz.1.24941 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.852111][T25156] Tainted: [L]=SOFTLOCKUP [ 698.852119][T25156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 698.852132][T25156] Call Trace: [ 698.852140][T25156] [ 698.852149][T25156] dump_stack_lvl+0x100/0x190 [ 698.852184][T25156] gup_vma_lookup.cold+0x83/0x96 [ 698.852216][T25156] __get_user_pages+0x241/0x32a0 [ 698.852251][T25156] ? down_read_killable+0x35e/0x520 [ 698.852285][T25156] ? __pfx___get_user_pages+0x10/0x10 [ 698.852321][T25156] __gup_longterm_locked+0x87d/0x16f0 [ 698.852349][T25156] ? do_raw_spin_lock+0x128/0x260 [ 698.852377][T25156] ? __pfx___gup_longterm_locked+0x10/0x10 [ 698.852404][T25156] ? lock_acquire+0x1b9/0x370 [ 698.852443][T25156] gup_fast_fallback+0x16dc/0x2790 [ 698.852490][T25156] ? __pfx_gup_fast_fallback+0x10/0x10 [ 698.852520][T25156] ? __lock_acquire+0x49f/0x1a40 [ 698.852547][T25156] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 698.852573][T25156] get_user_pages_fast+0xa7/0xf0 [ 698.852598][T25156] ? __pfx_get_user_pages_fast+0x10/0x10 [ 698.852625][T25156] ? iov_iter_advance+0xac/0x6d0 [ 698.852656][T25156] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 698.852688][T25156] ? pipe_lock+0x69/0x80 [ 698.852718][T25156] ? __resched_curr+0x42e/0x500 [ 698.852736][T25156] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 698.852764][T25156] ? __pfx___mutex_lock+0x10/0x10 [ 698.852786][T25156] ? iovec_from_user+0xda/0x140 [ 698.852819][T25156] iov_iter_get_pages2+0xa3/0x100 [ 698.852845][T25156] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 698.852871][T25156] ? wait_for_space+0x2ca/0x3b0 [ 698.852906][T25156] __do_sys_vmsplice+0x7dd/0x13c0 [ 698.852938][T25156] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 698.852959][T25156] ? futex_private_hash_put+0x115/0x1c0 [ 698.853047][T25156] ? __do_fast_syscall_32+0xe7/0x970 [ 698.853069][T25156] __do_fast_syscall_32+0xe7/0x970 [ 698.853094][T25156] do_fast_syscall_32+0x32/0x70 [ 698.853115][T25156] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 698.853138][T25156] RIP: 0023:0xf701efec [ 698.853160][T25156] Code: Unable to access opcode bytes at 0xf701efc2. [ 698.853170][T25156] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 000000000000013c [ 698.853188][T25156] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 698.853201][T25156] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 698.853212][T25156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 698.853224][T25156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.853236][T25156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 698.853262][T25156] [ 699.605005][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 699.615552][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 699.618755][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 699.621698][ T5932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 699.624451][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 699.845227][T25226] wg2 speed is unknown, defaulting to 1000 [ 699.924130][ T6033] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 700.016311][T25226] lo speed is unknown, defaulting to 1000 [ 700.086202][ T6033] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.091435][ T6033] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 700.097175][ T6033] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 700.104657][ T6033] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 700.109517][ T6033] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.113085][ T6033] usb 10-1: Product: syz [ 700.114949][ T6033] usb 10-1: Manufacturer: syz [ 700.119698][ T6033] usb 10-1: SerialNumber: syz [ 700.129924][ T6033] usb 10-1: config 0 descriptor?? [ 700.130556][T25286] netlink: 16 bytes leftover after parsing attributes in process `syz.7.24976'. [ 700.133112][T25249] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 700.162687][T25295] tipc: Started in network mode [ 700.164274][T25295] tipc: Node identity ac14140f, cluster identity 4711 [ 700.171224][T25295] tipc: New replicast peer: 172.30.0.8 [ 700.173088][T25295] tipc: Enabled bearer , priority 10 [ 700.179065][T25295] netlink: 12 bytes leftover after parsing attributes in process `syz.7.24979'. [ 700.182549][T25295] tipc: Disabling bearer [ 700.202178][ T6033] rc_core: IR keymap rc-streamzap not found [ 700.209579][ T6033] Registered IR keymap rc-empty [ 700.217546][ T6033] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 700.236064][ T6033] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input96 [ 700.373755][ T6035] usb 10-1: USB disconnect, device number 22 [ 700.565517][ T29] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 700.571321][T25226] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.573639][T25226] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.576379][T25226] bridge_slave_0: entered allmulticast mode [ 700.579408][T25226] bridge_slave_0: entered promiscuous mode [ 700.582706][T25226] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.585036][T25226] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.588394][T25226] bridge_slave_1: entered allmulticast mode [ 700.591959][T25226] bridge_slave_1: entered promiscuous mode [ 700.621646][T25226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.630582][T25226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.655616][T25226] team0: Port device team_slave_0 added [ 700.660084][T25226] team0: Port device team_slave_1 added [ 700.683382][T25226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.686154][T25226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.696210][T25226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.706514][T25226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.710067][T25226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.720185][T25226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.749174][ T29] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 700.751766][ T29] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 700.754786][ T29] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 700.758411][ T29] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.761139][T25226] hsr_slave_0: entered promiscuous mode [ 700.762024][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 700.764848][T25226] hsr_slave_1: entered promiscuous mode [ 700.767316][ T29] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 700.770096][T25226] debugfs: 'hsr0' already exists in 'hsr' [ 700.775081][ T29] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 700.775113][T25226] Cannot create hsr debugfs directory [ 700.778616][ T29] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 700.785278][ T29] usb 9-1: Product: syz [ 700.787270][ T29] usb 9-1: Manufacturer: syz [ 700.794990][T25312] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 700.801602][ T29] cdc_wdm 9-1:1.0: skipping garbage [ 700.803608][ T29] cdc_wdm 9-1:1.0: skipping garbage [ 700.809261][ T29] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 700.812742][ T29] cdc_wdm 9-1:1.0: Unknown control protocol [ 700.894213][T25226] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.998593][T25226] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.018878][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 701.021759][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 701.024545][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 701.027225][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 701.029682][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 701.031734][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 701.033801][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 701.035948][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 701.038048][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 701.040059][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 701.042872][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 701.045552][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 701.048443][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 701.051125][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 701.053878][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 701.056572][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 701.059084][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 701.063160][ T6033] usb 9-1: USB disconnect, device number 29 [ 701.083849][T25226] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.139082][T25226] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.274207][ T5936] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 701.285009][ T5936] Bluetooth: hci1: Injecting HCI hardware error event [ 701.291685][ T5932] Bluetooth: hci1: hardware error 0x00 [ 701.521990][T25226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 701.528351][T25226] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 701.532316][T25226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 701.538222][ T40] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 701.540381][T25226] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 701.544711][T25226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 701.551659][T25226] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 701.555438][T25226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 701.561894][T25226] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 701.588608][T25226] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.591727][T25226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.594967][T25226] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.597966][T25226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.623398][ T109] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.636142][ T109] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.690652][T25226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.716461][T25226] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.725759][ T109] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.728802][ T109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.738165][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.741267][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.784167][ T5936] Bluetooth: hci0: command tx timeout [ 702.014994][T25226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.044359][T25226] veth0_vlan: entered promiscuous mode [ 702.053011][T25226] veth1_vlan: entered promiscuous mode [ 702.079084][T25226] veth0_macvtap: entered promiscuous mode [ 702.086232][T25226] veth1_macvtap: entered promiscuous mode [ 702.099087][T25226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.108725][T25226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.118544][T15277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.122368][T15277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.129435][T15277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.137495][T15277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.453545][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.456297][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.483948][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.489647][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.498141][T25679] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 702.816930][T25702] overlayfs: upper fs does not support tmpfile. [ 703.481038][T25722] netlink: 48 bytes leftover after parsing attributes in process `syz.1.25007'. [ 703.581501][ T5932] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 704.017153][ T5932] Bluetooth: hci0: command tx timeout [ 704.345680][T25764] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25020'. [ 704.349884][T25764] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25020'. [ 704.560517][T25781] [U] [ 704.561812][T25781] [U] [ 704.562975][T25781] [U] [ 704.564141][T25781] [U] [ 704.565324][T25781] [U] [ 704.566500][T25781] [U] [ 704.567691][T25781] [U] [ 704.568897][T25781] [U] [ 704.572889][T25781] [U] [ 704.574127][T25781] [U] [ 704.575338][T25781] [U] [ 704.576518][T25781] [U] [ 704.577734][T25781] [U] [ 704.578937][T25781] [U] [ 704.580151][T25781] [U] [ 704.581410][T25781] [U] [ 704.582783][T25781] [U] [ 704.584004][T25781] [U] [ 704.585175][T25781] [U] [ 704.586322][T25781] [U] [ 704.587535][T25781] [U] [ 704.588687][T25781] [U] [ 704.589880][T25781] [U] [ 704.591056][T25781] [U] [ 704.600604][T25781] [U] [ 704.601868][T25781] [U] [ 704.603047][T25781] [U] [ 704.604196][T25781] [U] [ 704.605393][T25781] [U] [ 704.606558][T25781] [U] [ 704.607715][T25781] [U] [ 704.608884][T25781] [U] [ 704.610083][T25781] [U] [ 704.614503][T25781] [U] [ 704.615428][T25781] [U] [ 704.616332][T25781] [U] [ 704.617260][T25781] [U] [ 704.618148][T25781] [U] [ 704.619104][T25781] [U] [ 704.620006][T25781] [U] [ 704.620913][T25781] [U] [ 704.625366][T25781] [U] [ 704.626262][T25781] [U] [ 704.627154][T25781] [U] [ 704.628062][T25781] [U] [ 704.628977][T25781] [U] [ 704.629857][T25781] [U] [ 704.630742][T25781] [U] [ 704.631673][T25781] [U] [ 704.632744][T25781] [U] [ 704.633689][T25781] [U] [ 704.634649][T25781] [U] [ 704.635673][T25781] [U] [ 704.636087][T25788] trusted_key: encrypted_key: keyword 'upeate' not recognized [ 704.636763][T25781] [U] [ 704.636796][T25781] [U] [ 704.636814][T25781] [U] [ 704.636833][T25781] [U] [ 704.636969][T25781] [U] [ 704.636989][T25781] [U] [ 704.637008][T25781] [U] [ 704.637027][T25781] [U] [ 704.637046][T25781] [U] [ 704.637066][T25781] [U] [ 704.637085][T25781] [U] [ 704.637102][T25781] [U] [ 704.637122][T25781] [U] [ 704.637138][T25781] [U] [ 704.637154][T25781] [U] [ 704.637169][T25781] [U] [ 704.637184][T25781] [U] [ 704.637200][T25781] [U] [ 704.637215][T25781] [U] [ 704.637230][T25781] [U] [ 704.637257][T25781] [U] [ 704.637272][T25781] [U] [ 704.637289][T25781] [U] [ 704.637309][T25781] [U] [ 704.637326][T25781] [U] [ 704.637346][T25781] [U] [ 704.637364][T25781] [U] [ 704.637385][T25781] [U] [ 704.637407][T25781] [U] [ 704.637427][T25781] [U] [ 704.637446][T25781] [U] [ 704.637463][T25781] [U] [ 704.637481][T25781] [U] [ 704.637498][T25781] [U] [ 704.637514][T25781] [U] [ 704.637533][T25781] [U] [ 704.637553][T25781] [U] [ 704.637569][T25781] [U] [ 704.679373][T25781] [U] [ 704.680295][T25781] [U] [ 704.681167][T25781] [U] [ 704.682082][T25781] [U] [ 704.682961][T25781] [U] [ 704.683980][T25781] [U] [ 704.690197][T25781] [U] [ 704.691210][T25781] [U] [ 704.692176][T25781] [U] [ 704.693046][T25781] [U] [ 704.694101][T25781] [U] [ 704.695296][T25781] [U] [ 704.696495][T25781] [U] [ 704.697571][T25781] [U] [ 704.705652][T25781] [U] [ 704.706718][T25781] [U] [ 704.707783][T25781] [U] [ 704.708663][T25781] [U] [ 704.709604][T25781] [U] [ 704.710537][T25781] [U] [ 704.711283][T25794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25036'. [ 704.711717][T25781] [U] [ 704.711748][T25781] [U] [ 704.712083][T25781] [U] [ 704.717197][T25790] netlink: 48 bytes leftover after parsing attributes in process `syz.7.25029'. [ 704.718204][T25781] [U] [ 704.718232][T25781] [U] [ 704.718263][T25781] [U] [ 704.724923][T25781] [U] [ 704.726000][T25781] [U] [ 704.727437][T25781] [U] [ 704.728639][T25781] [U] [ 704.731274][T25781] [U] [ 704.732226][T25781] [U] [ 704.733087][T25781] [U] [ 704.733953][T25781] [U] [ 704.734825][T25781] [U] [ 704.735712][T25781] [U] [ 704.736594][T25781] [U] [ 704.777135][T25780] [U] [ 705.817176][T25847] netlink: 200 bytes leftover after parsing attributes in process `syz.7.25048'. [ 706.122055][ T71] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 706.239545][ T5932] Bluetooth: hci0: command tx timeout [ 706.282435][ T71] usb 9-1: Using ep0 maxpacket: 8 [ 706.286624][ T71] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 706.290687][ T71] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.299144][ T71] pvrusb2: Hardware description: Terratec Grabster AV400 [ 706.301560][ T71] pvrusb2: ********** [ 706.302871][ T71] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 706.306362][ T71] pvrusb2: Important functionality might not be entirely working. [ 706.308863][ T71] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 706.312689][ T71] pvrusb2: ********** [ 706.518045][ T2514] pvrusb2: Invalid write control endpoint [ 706.554353][ T2514] pvrusb2: Invalid write control endpoint [ 706.560352][ T2514] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 706.560522][ T6013] kernel read not supported for file /dsp1 (pid: 6013 comm: kworker/3:3) [ 706.563382][ T2514] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 706.569183][ T2514] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 706.573496][ T2514] pvrusb2: Device being rendered inoperable [ 706.579191][ T2514] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 706.586997][ T2514] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 706.595093][ T2514] pvrusb2: Attached sub-driver cx25840 [ 706.601717][ T2514] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 706.610904][ T2514] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 706.737318][T25854] pvrusb2: Attempted to execute control transfer when device not ok [ 706.741296][ T6035] usb 9-1: USB disconnect, device number 30 [ 706.890615][T25949] Bluetooth: MGMT ver 1.23 [ 706.996768][T25959] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.277472][T25994] wg2 speed is unknown, defaulting to 1000 [ 707.397092][T25994] lo speed is unknown, defaulting to 1000 [ 707.956240][T26071] can0: slcan on ttyS3. [ 708.055775][T26071] can0 (unregistered): slcan off ttyS3. [ 708.177162][T26091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.25120'. [ 708.218630][T26091] bridge_slave_0 (unregistering): left allmulticast mode [ 708.221669][T26091] bridge_slave_0 (unregistering): left promiscuous mode [ 708.224626][T26091] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.452629][ T5932] Bluetooth: hci0: command tx timeout [ 709.289261][T26179] bond1: entered promiscuous mode [ 709.424374][ T40] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 709.584399][ T40] usb 10-1: Using ep0 maxpacket: 8 [ 709.588568][ T40] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.592984][ T40] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 709.598955][ T40] usb 10-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 709.602828][ T40] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.606351][ T40] usb 10-1: Product: syz [ 709.608133][ T40] usb 10-1: Manufacturer: syz [ 709.610142][ T40] usb 10-1: SerialNumber: syz [ 709.864473][T26251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25155'. [ 709.867908][T26251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25155'. [ 709.873284][T26251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25155'. [ 709.876110][T26251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25155'. [ 709.955784][T26260] 9pnet_virtio: no channels available for device syz [ 710.183032][ T40] usb 10-1: USB disconnect, device number 23 [ 710.308545][T26285] input: syz1 as /devices/virtual/input/input99 [ 710.540973][T26318] net_ratelimit: 44 callbacks suppressed [ 710.540990][T26318] openvswitch: netlink: IPv4 tunnel dst address is zero [ 710.547710][T26318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.163220][T26379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25194'. [ 711.340778][T26403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25204'. [ 711.603973][ T34] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 711.797776][ T34] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 711.802134][ T34] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 711.806484][ T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 711.811771][ T34] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 711.817645][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 711.821957][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 711.829248][ T34] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 711.832119][ T34] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 711.834630][ T34] usb 6-1: Product: syz [ 711.835941][ T34] usb 6-1: Manufacturer: syz [ 711.852702][T26401] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 711.855849][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 711.857798][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 711.860382][ T34] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 711.862269][ T34] cdc_wdm 6-1:1.0: Unknown control protocol [ 712.076707][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 712.079399][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 712.082161][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 712.084933][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 712.087832][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 712.090602][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 712.094079][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 712.096362][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 712.098496][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 712.100628][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 712.103234][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 712.106022][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 712.108956][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 712.111608][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 712.115413][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 712.115773][T26467] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25223'. [ 712.118491][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 712.126056][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 712.128843][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 712.131736][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 712.134460][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 712.136605][T26467] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25223'. [ 712.469544][ T1356] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 712.640604][ T1356] usb 12-1: Using ep0 maxpacket: 8 [ 712.646048][ T1356] usb 12-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 712.662229][ T1356] usb 12-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 712.666503][ T1356] usb 12-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 712.670501][ T40] usb 6-1: USB disconnect, device number 41 [ 712.671650][ T1356] usb 12-1: config 0 interface 0 has no altsetting 0 [ 712.671689][ T1356] usb 12-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 712.679383][ T1356] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.684271][ T1356] usb 12-1: config 0 descriptor?? [ 712.908278][ T1356] usbhid 12-1:0.0: can't add hid device: -71 [ 712.911644][ T1356] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 712.917289][ T1356] usb 12-1: USB disconnect, device number 3 [ 713.967073][T26566] program syz.1.25248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 713.970116][T26566] ata1.00: invalid service action 31 [ 714.488362][T26592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25257'. [ 714.495931][T26592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25257'. [ 714.824152][T26615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25264'. [ 714.827682][T26615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.840550][T26615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.250477][T26666] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 715.639558][T26792] overlayfs: upper fs does not support tmpfile. [ 715.868971][T26819] tipc: Started in network mode [ 715.870710][T26819] tipc: Node identity ac14140f, cluster identity 4711 [ 715.873050][T26819] tipc: New replicast peer: 255.255.255.255 [ 715.877559][T26819] tipc: Enabled bearer , priority 10 [ 716.215816][T26844] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 716.369724][T26855] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.474723][T26855] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.546664][T26855] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.609789][T26855] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.759881][T15278] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.771997][T15278] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.809513][T15277] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.815211][T15277] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 716.947097][ T34] tipc: Node number set to 2886997007 [ 717.090344][T26911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25322'. [ 717.434745][T26921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25326'. [ 717.923450][T26955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25337'. [ 719.413371][ T34] kernel write not supported for file bpf-map (pid: 34 comm: kworker/3:0) [ 719.864560][ T2322] kernel read not supported for file /adsp1 (pid: 2322 comm: kworker/2:2) [ 720.020955][T27286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25406'. [ 720.025075][T27286] bridge_slave_0: default FDB implementation only supports local addresses [ 720.072408][T27291] netlink: 'syz.1.25408': attribute type 7 has an invalid length. [ 720.623173][T25658] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 720.794760][T25658] usb 10-1: Using ep0 maxpacket: 8 [ 720.799972][T25658] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 720.803963][T25658] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.819382][T25658] pvrusb2: Hardware description: Terratec Grabster AV400 [ 720.822969][T25658] pvrusb2: ********** [ 720.824813][T25658] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 720.829825][T25658] pvrusb2: Important functionality might not be entirely working. [ 720.833166][T25658] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 720.837865][T25658] pvrusb2: ********** [ 721.032329][ T2514] pvrusb2: Invalid write control endpoint [ 721.095438][ T2514] pvrusb2: Invalid write control endpoint [ 721.097922][ T2514] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 721.101787][ T2514] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 721.107854][ T2514] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 721.111971][ T2514] pvrusb2: Device being rendered inoperable [ 721.117981][ T2514] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 721.121154][ T2514] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 721.131068][ T2514] pvrusb2: Attached sub-driver cx25840 [ 721.133555][ T2514] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 721.137796][ T2514] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 721.174814][T27509] program syz.4.25433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 721.248795][T27367] pvrusb2: Attempted to execute control transfer when device not ok [ 721.258021][ T1042] usb 10-1: USB disconnect, device number 24 [ 721.794203][T27555] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 721.798757][T27555] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 722.195030][T27628] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 722.262619][T27631] program syz.4.25473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 722.319743][T27642] netlink: 'syz.5.25476': attribute type 9 has an invalid length. [ 722.970655][T27691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25490'. [ 723.715201][T27732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25503'. [ 723.732438][T27732] bond0 (unregistering): Released all slaves [ 724.265830][T27832] kvm: kvm [27831]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008a) = 0x39 [ 725.335734][T27879] dummy0: entered allmulticast mode [ 725.352239][T27882] loop8: detected capacity change from 0 to 7 [ 725.362111][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 725.367574][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.371450][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.380612][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.384498][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.388891][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.392741][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.397876][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.400946][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.404999][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.408031][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.412729][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.416766][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.420572][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.424477][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.433456][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.436636][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.440395][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.443574][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.446310][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 725.450499][T27882] ldm_validate_partition_table(): Disk read failed. [ 725.453229][T27882] Dev loop8: unable to read RDB block 0 [ 725.455512][T27882] loop8: unable to read partition table [ 725.457478][T27882] loop8: partition table beyond EOD, truncated [ 725.461887][T27882] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 725.499759][T27899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25539'. [ 725.502753][T27899] netlink: 'syz.5.25539': attribute type 21 has an invalid length. [ 725.622447][T27907] kvm: kvm [27906]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008a) = 0x39 [ 726.025249][T27943] netlink: 56 bytes leftover after parsing attributes in process `syz.1.25552'. [ 726.128823][T27936] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.261954][T27936] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.392425][T27936] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.425703][T25658] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 726.508989][T27936] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.585857][T25658] usb 6-1: Using ep0 maxpacket: 8 [ 726.589665][T25658] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 726.592826][T25658] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 726.596313][T25658] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 726.600447][T25658] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 726.604423][T25658] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 726.609426][T25658] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 726.613846][T25658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.620108][T15278] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.632561][T15278] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.663630][T15277] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.705110][T15278] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.856081][T25658] usb 6-1: GET_CAPABILITIES returned 0 [ 726.858501][T25658] usbtmc 6-1:16.0: can't read capabilities [ 727.086547][T27958] usb 6-1: usbtmc_ioctl_clear_out_halt returned -32 [ 727.100266][ T6025] usb 6-1: USB disconnect, device number 42 [ 727.213677][T28060] openvswitch: netlink: IP tunnel dst address not specified [ 727.217072][T28060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.761333][ T6025] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 727.942905][ T6025] usb 9-1: Using ep0 maxpacket: 8 [ 727.946577][ T6025] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 727.950463][ T6025] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 727.954832][ T6025] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.959708][ T6025] usb 9-1: config 0 descriptor?? [ 728.161809][T28155] tipc: Resetting bearer [ 728.164575][T28155] tipc: Resetting bearer [ 728.185724][ T6025] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 728.404750][T25658] usb 9-1: USB disconnect, device number 31 [ 728.421832][T28191] netlink: 766 bytes leftover after parsing attributes in process `syz.1.25619'. [ 728.465689][T28198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25621'. [ 729.262372][T28242] block nbd7: server does not support multiple connections per device. [ 729.266117][T28242] block nbd7: shutting down sockets [ 729.890929][T28299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.25654'. [ 729.900349][T28299] netlink: 72 bytes leftover after parsing attributes in process `syz.5.25654'. [ 730.172959][T28327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25664'. [ 730.239219][T28333] fuse: Invalid rootmode [ 730.335161][T28342] wg2 speed is unknown, defaulting to 1000 [ 730.474219][T28342] lo speed is unknown, defaulting to 1000 [ 730.531805][T28365] kvm: apic: phys broadcast and lowest prio [ 730.669156][T28381] sch_fq: defrate 0 ignored. [ 730.828399][ T6013] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 730.992602][ T6013] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 730.996640][ T6013] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.000409][ T6013] usb 9-1: Product: syz [ 731.002168][ T6013] usb 9-1: Manufacturer: syz [ 731.004197][ T6013] usb 9-1: SerialNumber: syz [ 731.144635][T28435] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.288776][ T6013] rtl8150 9-1:1.0: couldn't reset the device [ 731.291537][ T6013] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 731.294300][T28435] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.300791][ T6013] usb 9-1: USB disconnect, device number 32 [ 731.453350][T28435] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.615289][T28435] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.701468][ T42] audit: type=1326 audit(2000001411.594:25314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28467 comm="syz.5.25698" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x0 [ 731.777553][T15278] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.788410][T15278] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.810539][T15278] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.825559][T15278] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.871576][ T40] hid_parser_main: 12 callbacks suppressed [ 731.871597][ T40] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 731.879417][ T40] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 731.889152][ T40] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 731.947887][T28492] fido_id[28492]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 731.967845][ T1165] Bluetooth: hci4: Frame reassembly failed (-90) [ 732.061353][T28518] netlink: 3 bytes leftover after parsing attributes in process `syz.4.25708'. [ 732.185393][T28532] sctp: [Deprecated]: syz.7.25712 (pid 28532) Use of int in max_burst socket option deprecated. [ 732.185393][T28532] Use struct sctp_assoc_value instead [ 733.048942][T28578] netlink: 'syz.5.25726': attribute type 11 has an invalid length. [ 733.053792][T17664] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 733.059001][T17664] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 733.065641][T17664] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 733.069629][T17664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 733.080268][T17664] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 733.142846][T28592] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 733.248134][T28603] netlink: 28 bytes leftover after parsing attributes in process `syz.7.25733'. [ 733.335283][T28575] wg2 speed is unknown, defaulting to 1000 [ 733.433082][T28618] openvswitch: netlink: IP tunnel dst address not specified [ 733.435859][T28618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.457697][T28575] lo speed is unknown, defaulting to 1000 [ 733.943338][T28575] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.945671][T28575] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.948075][T28575] bridge_slave_0: entered allmulticast mode [ 733.952650][T28575] bridge_slave_0: entered promiscuous mode [ 733.957110][T28575] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.960472][T28575] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.963346][T28575] bridge_slave_1: entered allmulticast mode [ 733.966750][T28575] bridge_slave_1: entered promiscuous mode [ 734.006277][T28575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.015858][T28575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.043385][T28575] team0: Port device team_slave_0 added [ 734.047426][T28575] team0: Port device team_slave_1 added [ 734.075667][T28575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.078663][T28575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.086836][T28575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.092045][T28575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.094248][T28575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.098146][ T5932] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 734.102664][T28575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.183761][T28575] hsr_slave_0: entered promiscuous mode [ 734.186084][T28575] hsr_slave_1: entered promiscuous mode [ 734.188612][T28575] debugfs: 'hsr0' already exists in 'hsr' [ 734.190445][T28575] Cannot create hsr debugfs directory [ 734.428864][T28575] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 734.445446][T28575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 734.448620][T28575] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 734.463372][T28575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 734.467719][T28575] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 734.478396][T28575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 734.480671][ T42] audit: type=1326 audit(2000001414.195:25315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28951 comm="syz.7.25764" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 734.489395][T28575] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 734.494607][T28575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 734.496925][ T42] audit: type=1326 audit(2000001414.195:25316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28951 comm="syz.7.25764" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 734.504907][ T42] audit: type=1326 audit(2000001414.195:25317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28951 comm="syz.7.25764" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 734.512806][ T42] audit: type=1326 audit(2000001414.195:25318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28951 comm="syz.7.25764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 734.521004][ T42] audit: type=1326 audit(2000001414.195:25319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28951 comm="syz.7.25764" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 734.528423][ T42] audit: type=1326 audit(2000001414.195:25320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28951 comm="syz.7.25764" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 734.535312][ T42] audit: type=1326 audit(2000001414.205:25321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28951 comm="syz.7.25764" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 734.543836][ T42] audit: type=1326 audit(2000001414.205:25322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28951 comm="syz.7.25764" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 734.553172][ T42] audit: type=1326 audit(2000001414.205:25323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28951 comm="syz.7.25764" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 734.653270][T28575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.677685][T28575] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.691944][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.694390][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.713420][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.715970][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.084959][T28575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.198764][ T6013] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 735.268385][T28575] veth0_vlan: entered promiscuous mode [ 735.275255][T28575] veth1_vlan: entered promiscuous mode [ 735.293332][T28575] veth0_macvtap: entered promiscuous mode [ 735.295415][ T5932] Bluetooth: hci2: command tx timeout [ 735.305051][T28575] veth1_macvtap: entered promiscuous mode [ 735.321415][T28575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.328093][T28575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.341047][T15275] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.344002][T15275] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.347132][T15275] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.350845][T15275] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.398117][ T6013] usb 12-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 735.405702][ T6013] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.408296][ T6013] usb 12-1: Product: syz [ 735.409624][ T6013] usb 12-1: Manufacturer: syz [ 735.411183][ T6013] usb 12-1: SerialNumber: syz [ 735.422228][T29029] netlink: 36 bytes leftover after parsing attributes in process `syz.5.25779'. [ 735.438507][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.441128][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.526586][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.527714][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x3 [ 735.529306][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.534379][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x3 [ 735.537418][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 735.540318][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 735.543775][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 735.546310][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 735.548835][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 735.552024][ T9] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 735.556897][ T9] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.03 Device [syz1] on syz1 [ 735.617220][T29058] erspan0: entered promiscuous mode [ 735.638921][T29052] fido_id[29052]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 735.716113][ T6013] rtl8150 12-1:1.0: couldn't reset the device [ 735.718449][ T6013] rtl8150 12-1:1.0: probe with driver rtl8150 failed with error -5 [ 735.733587][ T6013] usb 12-1: USB disconnect, device number 4 [ 735.889954][T29101] loop5: detected capacity change from 0 to 7 [ 735.896771][T29101] buffer_io_error: 11 callbacks suppressed [ 735.896783][T29101] Buffer I/O error on dev loop5, logical block 0, async page read [ 735.902422][T29101] Buffer I/O error on dev loop5, logical block 0, async page read [ 735.905908][T29101] Buffer I/O error on dev loop5, logical block 0, async page read [ 735.909122][T29101] Buffer I/O error on dev loop5, logical block 0, async page read [ 735.912311][T29101] Buffer I/O error on dev loop5, logical block 0, async page read [ 735.916184][T29101] Buffer I/O error on dev loop5, logical block 0, async page read [ 735.919578][T29101] Buffer I/O error on dev loop5, logical block 0, async page read [ 735.922760][T29101] ldm_validate_partition_table(): Disk read failed. [ 735.925697][T29101] Buffer I/O error on dev loop5, logical block 0, async page read [ 735.928546][T29101] Buffer I/O error on dev loop5, logical block 0, async page read [ 735.931294][T29101] Buffer I/O error on dev loop5, logical block 0, async page read [ 735.934243][T29101] Dev loop5: unable to read RDB block 0 [ 735.936376][T29101] loop5: unable to read partition table [ 735.938187][T29101] loop5: partition table beyond EOD, truncated [ 735.940277][T29101] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 736.888272][T29191] netlink: 'syz.5.25818': attribute type 23 has an invalid length. [ 737.282846][T29224] loop9: detected capacity change from 0 to 255852544 [ 737.342237][T29224] loop9: detected capacity change from 255852544 to 524287871 [ 737.517752][ T5932] Bluetooth: hci2: command tx timeout [ 737.724596][T29253] veth0: entered promiscuous mode [ 737.728115][T29252] veth0: left promiscuous mode [ 738.117236][T29301] binder: 29299:29301 ioctl c0306201 80000000 returned -14 [ 738.422205][T29327] netlink: 14 bytes leftover after parsing attributes in process `syz.8.25865'. [ 738.602991][T29344] netlink: 'syz.1.25868': attribute type 4 has an invalid length. [ 739.740740][ T5932] Bluetooth: hci2: command tx timeout [ 739.804000][T29390] wg2 speed is unknown, defaulting to 1000 [ 739.845864][ T5936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 739.860601][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 739.866093][ T5936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 739.870916][ T5936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 739.874235][ T5936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 739.920482][T29390] lo speed is unknown, defaulting to 1000 [ 740.143026][T29398] wg2 speed is unknown, defaulting to 1000 [ 740.261021][T29398] lo speed is unknown, defaulting to 1000 [ 741.133013][T29398] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.136172][T29398] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.138539][T29398] bridge_slave_0: entered allmulticast mode [ 741.143306][T29398] bridge_slave_0: entered promiscuous mode [ 741.148590][T29398] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.151018][T29398] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.153396][T29398] bridge_slave_1: entered allmulticast mode [ 741.162256][T29398] bridge_slave_1: entered promiscuous mode [ 741.192918][T29599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.25907'. [ 741.244144][T29398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.249881][T29398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.262719][T29624] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 741.342496][T29619] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.345813][T29619] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.418004][T29619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.424419][T29619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.517154][T29619] bond1: left promiscuous mode [ 741.564790][T29398] team0: Port device team_slave_0 added [ 741.579468][T29633] geneve2: entered promiscuous mode [ 741.599295][ T5975] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.603093][ T5975] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 35077 - 0 [ 741.608395][ T5975] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.613294][ T5975] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 35077 - 0 [ 741.619813][T29398] team0: Port device team_slave_1 added [ 741.658205][ T5975] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.661800][ T5975] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 35077 - 0 [ 741.665246][ T5975] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.668644][ T5975] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 35077 - 0 [ 741.687497][T29398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.689861][T29398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.697879][T29398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.704106][T29398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.707844][T29398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.717593][T29398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.763722][T29398] hsr_slave_0: entered promiscuous mode [ 741.767077][T29398] hsr_slave_1: entered promiscuous mode [ 741.770142][T29398] debugfs: 'hsr0' already exists in 'hsr' [ 741.772757][T29398] Cannot create hsr debugfs directory [ 741.944397][T29398] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 741.949656][T29398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 741.952852][T29398] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 741.958312][T29398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 741.961621][T29398] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 741.966208][T29398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 741.969318][T29398] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 741.973926][ T5932] Bluetooth: hci2: command tx timeout [ 741.980239][T29398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 742.041230][T29398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.049175][ T5932] Bluetooth: hci0: command tx timeout [ 742.061657][T29398] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.069383][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.072196][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.081540][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.084564][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.339089][T29398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.555959][T29398] veth0_vlan: entered promiscuous mode [ 742.570320][T29398] veth1_vlan: entered promiscuous mode [ 742.593653][T29398] veth0_macvtap: entered promiscuous mode [ 742.598782][T29398] veth1_macvtap: entered promiscuous mode [ 742.609913][T29398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.619615][T29398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.628937][T14233] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.632627][T14233] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.637412][T14233] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.641130][T14233] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.762959][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.775278][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.803090][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.806272][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.877687][T29838] dvmrp8: entered allmulticast mode [ 743.221546][T29874] input: syz0 as /devices/virtual/input/input102 [ 743.238270][T29878] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 743.241566][T29878] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 743.516484][T29910] vivid-000: disconnect [ 743.524956][T29908] vivid-000: reconnect [ 743.599587][T29920] dummy0: entered allmulticast mode [ 743.605871][T29920] dummy0: left allmulticast mode [ 744.245791][ T42] kauditd_printk_skb: 71 callbacks suppressed [ 744.245812][ T42] audit: type=1326 audit(2000001423.329:25395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29986 comm="syz.8.25969" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe3fec code=0x0 [ 744.282524][ T5932] Bluetooth: hci0: command tx timeout [ 744.581286][T14846] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 744.762963][T14846] usb 10-1: Using ep0 maxpacket: 8 [ 744.769312][T14846] usb 10-1: config 0 has no interfaces? [ 744.786807][T14846] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 744.790537][T14846] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.793879][T14846] usb 10-1: Product: syz [ 744.795822][T14846] usb 10-1: Manufacturer: syz [ 744.797795][T14846] usb 10-1: SerialNumber: syz [ 744.807048][T14846] usb 10-1: config 0 descriptor?? [ 745.032486][T28489] usb 10-1: USB disconnect, device number 25 [ 745.294457][T30027] ALSA: mixer_oss: invalid OSS volume '{~/' [ 745.620220][ T42] audit: type=1326 audit(2000001424.620:25396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30049 comm="syz.7.25987" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 745.638303][ T42] audit: type=1326 audit(2000001424.620:25397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30049 comm="syz.7.25987" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 745.651190][ T42] audit: type=1326 audit(2000001424.620:25398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30049 comm="syz.7.25987" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 745.658526][ T42] audit: type=1326 audit(2000001424.620:25399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30049 comm="syz.7.25987" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 745.665855][ T42] audit: type=1326 audit(2000001424.620:25400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30049 comm="syz.7.25987" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 745.675093][ T42] audit: type=1326 audit(2000001424.620:25401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30049 comm="syz.7.25987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 745.692442][ T42] audit: type=1326 audit(2000001424.620:25402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30049 comm="syz.7.25987" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 745.707405][ T42] audit: type=1326 audit(2000001424.620:25403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30049 comm="syz.7.25987" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 745.730567][ T42] audit: type=1326 audit(2000001424.620:25404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30049 comm="syz.7.25987" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf702f008 code=0x7ffc0000 [ 746.504827][ T5932] Bluetooth: hci0: command tx timeout [ 746.745933][T30161] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 746.748386][T30161] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 746.772332][T30161] vhci_hcd vhci_hcd.0: Device attached [ 746.780962][T30161] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(5) [ 746.783696][T30161] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 746.787198][T30161] vhci_hcd vhci_hcd.0: Device attached [ 746.792613][T30161] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(7) [ 746.795316][T30161] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 746.798906][T30161] vhci_hcd vhci_hcd.0: Device attached [ 746.806524][T30161] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(9) [ 746.809312][T30161] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 746.813604][T30161] vhci_hcd vhci_hcd.0: Device attached [ 746.829423][T30172] vhci_hcd: connection closed [ 746.829607][T30168] vhci_hcd: connection closed [ 746.830356][ T5975] vhci_hcd vhci_hcd.9: stop threads [ 746.831774][T30165] vhci_hcd: connection closed [ 746.834250][ T5975] vhci_hcd vhci_hcd.9: release socket [ 746.836211][T30162] vhci_hcd: connection closed [ 746.854721][ T5975] vhci_hcd vhci_hcd.9: disconnect device [ 746.859923][ T5975] vhci_hcd vhci_hcd.9: stop threads [ 746.862208][ T5975] vhci_hcd vhci_hcd.9: release socket [ 746.865045][ T5975] vhci_hcd vhci_hcd.9: disconnect device [ 746.867513][ T5975] vhci_hcd vhci_hcd.9: stop threads [ 746.870136][ T5975] vhci_hcd vhci_hcd.9: release socket [ 746.872243][ T5975] vhci_hcd vhci_hcd.9: disconnect device [ 746.874489][ T5975] vhci_hcd vhci_hcd.9: stop threads [ 746.876370][ T5975] vhci_hcd vhci_hcd.9: release socket [ 746.879770][ T5975] vhci_hcd vhci_hcd.9: disconnect device [ 747.342808][T30202] : renamed from vlan0 (while UP) [ 748.649325][T30300] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 748.728211][ T5932] Bluetooth: hci0: command tx timeout [ 748.909453][T30323] netlink: 8 bytes leftover after parsing attributes in process `syz.7.26066'. [ 749.038142][T14846] hid_parser_main: 70 callbacks suppressed [ 749.038161][T14846] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 749.048625][T14846] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 749.054219][T14846] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 749.069208][T14846] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 749.072124][T14846] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 749.075973][T14846] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 749.079026][T14846] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 749.085174][T14846] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 749.088212][T14846] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 749.091259][T14846] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 749.098287][T14846] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 749.098287][T14846] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 749.222035][T30349] fido_id[30349]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 749.271246][T30356] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.274719][T30356] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.338867][T30356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.344758][T30356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.440081][T30359] geneve2: entered promiscuous mode [ 749.444475][T14233] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.448466][T14233] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 44514 - 0 [ 749.452687][T14233] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.459916][T14233] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 44514 - 0 [ 749.467366][T14233] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.470751][T14233] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 44514 - 0 [ 749.473600][T14233] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.477471][T14233] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 44514 - 0 [ 750.484721][T30461] netlink: 12 bytes leftover after parsing attributes in process `syz.8.26106'. [ 750.545144][T30472] netlink: 'syz.7.26109': attribute type 4 has an invalid length. [ 751.103862][T30500] Attempt to restore checkpoint with obsolete wellknown handles [ 751.179719][T30508] input: syz0 as /devices/virtual/input/input103 [ 752.154336][T30574] kvm: kvm [30573]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x10fff [ 752.478238][T30602] netlink: 4 bytes leftover after parsing attributes in process `syz.8.26148'. [ 752.586518][T30617] sit0: left promiscuous mode [ 752.631178][T30617] tipc: Resetting bearer [ 752.655004][T30617] tipc: Resetting bearer [ 752.698244][T30617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.703833][T30617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.719076][T30617] ip6gre1: left allmulticast mode [ 752.721180][T30617] geneve2: left promiscuous mode [ 752.722962][T30617] geneve2: left allmulticast mode [ 752.726359][T30617] ipip0: left promiscuous mode [ 752.733491][T30617] veth5: left promiscuous mode [ 752.741270][T30617] gre1: left promiscuous mode [ 752.772163][T30617] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 752.775269][T30617] ipvlan2: left allmulticast mode [ 752.777550][T30617] batadv_slave_1: left allmulticast mode [ 752.786225][T30617] vlan8: left promiscuous mode [ 752.791082][ T6018] lo speed is unknown, defaulting to 1000 [ 752.791155][T25658] syz1: Port: 1 Link DOWN [ 752.798437][ T6018] sz1: Port: 1 Link DOWN [ 752.806274][T30623] geneve4: entered promiscuous mode [ 752.811100][T30632] wg2 speed is unknown, defaulting to 1000 [ 752.811158][ T5975] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.817048][T30632] syz0: Port: 1 Link DOWN [ 752.818896][ T5975] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 47354 - 0 [ 752.823604][ T5975] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.827152][ T5975] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 47354 - 0 [ 752.834371][ T6018] lo speed is unknown, defaulting to 1000 [ 752.836656][T30632] wg2 speed is unknown, defaulting to 1000 [ 752.836723][ T5975] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.845408][ T5975] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 47354 - 0 [ 752.851673][ T5975] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.862841][ T5975] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 47354 - 0 [ 753.861143][T30753] Bluetooth: MGMT ver 1.23 [ 753.984116][T30766] loop6: detected capacity change from 0 to 2640 [ 753.989241][T30766] buffer_io_error: 9 callbacks suppressed [ 753.989256][T30766] Buffer I/O error on dev loop6, logical block 0, async page read [ 753.996330][T30766] Buffer I/O error on dev loop6, logical block 0, async page read [ 754.002897][T30766] Buffer I/O error on dev loop6, logical block 0, async page read [ 754.006157][T30766] Buffer I/O error on dev loop6, logical block 0, async page read [ 754.009179][T30766] Buffer I/O error on dev loop6, logical block 0, async page read [ 754.013553][T30766] Buffer I/O error on dev loop6, logical block 0, async page read [ 754.016218][T30766] Buffer I/O error on dev loop6, logical block 0, async page read [ 754.019052][T30766] Buffer I/O error on dev loop6, logical block 0, async page read [ 754.022114][T30766] ldm_validate_partition_table(): Disk read failed. [ 754.024736][T30766] Buffer I/O error on dev loop6, logical block 0, async page read [ 754.027959][T30766] Buffer I/O error on dev loop6, logical block 0, async page read [ 754.030633][T30766] Dev loop6: unable to read RDB block 0 [ 754.033141][T30766] loop6: unable to read partition table [ 754.040389][T30766] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 754.115766][ T42] kauditd_printk_skb: 484 callbacks suppressed [ 754.115779][ T42] audit: type=1326 audit(2000001432.574:25889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30776 comm="syz.7.26202" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702efec code=0x0 [ 754.125707][T30772] loop6: detected capacity change from 2640 to 524288000 [ 754.292223][T30785] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.294897][T30785] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.384909][T30785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.398096][T30785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.513886][T30789] geneve2: entered promiscuous mode [ 754.523612][T14233] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.527076][T14233] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 51582 - 0 [ 754.530550][T14233] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.534022][T14233] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 51582 - 0 [ 754.543274][T14233] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.546288][T14233] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 51582 - 0 [ 754.549011][T14233] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.553706][T14233] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 51582 - 0 [ 754.658038][T14846] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 754.830627][T14846] usb 10-1: Using ep0 maxpacket: 16 [ 754.835023][T14846] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 754.842293][T14846] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 754.846452][T14846] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.849833][T14846] usb 10-1: Product: syz [ 754.853203][T14846] usb 10-1: Manufacturer: syz [ 754.855334][T14846] usb 10-1: SerialNumber: syz [ 754.859979][T14846] usb 10-1: config 0 descriptor?? [ 754.864871][T14846] hub 10-1:0.0: bad descriptor, ignoring hub [ 754.867467][T14846] hub 10-1:0.0: probe with driver hub failed with error -5 [ 754.874114][T14846] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 755.167812][ T6025] usb 10-1: USB disconnect, device number 26 [ 755.179624][T30887] netlink: 12 bytes leftover after parsing attributes in process `syz.8.26227'. [ 755.184843][T30887] block nbd7: Unsupported socket: should be TCP or UNIX. [ 755.732241][T30944] geneve2: left promiscuous mode [ 755.735243][T14233] netdevsim netdevsim7 eth0: unset [1, 1] type 2 family 0 port 35077 - 0 [ 755.738531][T14233] netdevsim netdevsim7 eth1: unset [1, 1] type 2 family 0 port 35077 - 0 [ 755.747104][T14233] netdevsim netdevsim7 eth2: unset [1, 1] type 2 family 0 port 35077 - 0 [ 755.752396][T14233] netdevsim netdevsim7 eth3: unset [1, 1] type 2 family 0 port 35077 - 0 [ 756.056449][T30977] netlink: 'syz.7.26253': attribute type 1 has an invalid length. [ 756.060581][T30977] netlink: 24 bytes leftover after parsing attributes in process `syz.7.26253'. [ 757.954013][T14846] kernel write not supported for file /uinput (pid: 14846 comm: kworker/3:1) [ 758.062294][T31113] sctp: [Deprecated]: syz.9.26304 (pid 31113) Use of int in max_burst socket option. [ 758.062294][T31113] Use struct sctp_assoc_value instead [ 758.116296][T31120] netlink: 16 bytes leftover after parsing attributes in process `syz.5.26298'. [ 760.098129][T31288] netlink: 4 bytes leftover after parsing attributes in process `syz.8.26352'. [ 760.344766][ T1042] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 760.515575][ T1042] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 760.522730][ T1042] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.525872][ T1042] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.529393][ T1042] usb 10-1: config 0 interface 0 has no altsetting 0 [ 760.532461][ T1042] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.535569][ T1042] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.539221][ T1042] usb 10-1: config 0 interface 0 has no altsetting 0 [ 760.542101][ T1042] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.545121][ T1042] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.548711][ T1042] usb 10-1: config 0 interface 0 has no altsetting 0 [ 760.551817][ T1042] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.554902][ T1042] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.558508][ T1042] usb 10-1: config 0 interface 0 has no altsetting 0 [ 760.561467][ T1042] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.564645][ T1042] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.568152][ T1042] usb 10-1: config 0 interface 0 has no altsetting 0 [ 760.571260][ T1042] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.574351][ T1042] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.578811][ T1042] usb 10-1: config 0 interface 0 has no altsetting 0 [ 760.581839][ T1042] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.584851][ T1042] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.588309][ T1042] usb 10-1: config 0 interface 0 has no altsetting 0 [ 760.591398][ T1042] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 760.594405][ T1042] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 760.597911][ T1042] usb 10-1: config 0 interface 0 has no altsetting 0 [ 760.602046][ T1042] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 760.605298][ T1042] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 760.608001][ T1042] usb 10-1: Product: syz [ 760.609333][ T1042] usb 10-1: Manufacturer: syz [ 760.610905][ T1042] usb 10-1: SerialNumber: syz [ 760.614021][ T1042] usb 10-1: config 0 descriptor?? [ 760.625378][ T1042] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 760.677677][T31376] pimreg: tun_chr_ioctl cmd 1074025678 [ 760.679504][T31376] pimreg: group set to 768 [ 760.909367][T26683] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 761.008067][T31395] overlay: filesystem on ./file0 is read-only [ 761.071837][T26683] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 761.075481][T26683] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 761.079723][T26683] usb 13-1: config 0 interface 0 has no altsetting 0 [ 761.085044][T26683] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 761.089015][T26683] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 761.092615][T26683] usb 13-1: Product: syz [ 761.094383][T26683] usb 13-1: Manufacturer: syz [ 761.096388][T26683] usb 13-1: SerialNumber: syz [ 761.100728][T26683] usb 13-1: config 0 descriptor?? [ 761.105372][T26683] hub 13-1:0.0: bad descriptor, ignoring hub [ 761.107977][T26683] hub 13-1:0.0: probe with driver hub failed with error -5 [ 761.114137][T26683] usb 13-1: selecting invalid altsetting 0 [ 761.753686][T31375] usb 13-1: reset high-speed USB device number 2 using dummy_hcd [ 761.919673][T31375] usb 13-1: device firmware changed [ 761.929280][T28489] usb 13-1: USB disconnect, device number 2 [ 762.095770][T28489] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 762.257116][T28489] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 762.259843][T28489] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 762.262888][T28489] usb 13-1: config 0 interface 0 has no altsetting 0 [ 762.267489][T28489] usb 13-1: string descriptor 0 read error: -22 [ 762.269558][T28489] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 762.272423][T28489] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 762.276655][T28489] usb 13-1: config 0 descriptor?? [ 762.283474][T28489] hub 13-1:0.0: bad descriptor, ignoring hub [ 762.285435][T28489] hub 13-1:0.0: probe with driver hub failed with error -5 [ 762.289179][T28489] usb 13-1: selecting invalid altsetting 0 [ 762.608712][T28489] usb 13-1: USB disconnect, device number 3 [ 762.898276][T31532] netlink: 12 bytes leftover after parsing attributes in process `syz.7.26395'. [ 762.996872][ C1] usb 10-1: yurex_control_callback - control failed: -2 [ 763.000793][ T6025] usb 10-1: USB disconnect, device number 27 [ 763.006703][ T6025] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 764.063070][T31652] serio: Serial port ttynull [ 764.208876][T31672] evm: overlay not supported [ 764.325329][T28489] hid_parser_main: 6 callbacks suppressed [ 764.325346][T28489] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 764.333276][T28489] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 764.409117][T31701] fido_id[31701]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 765.020382][T31784] loop9: detected capacity change from 0 to 7 [ 765.191920][ C1] blk_print_req_error: 12 callbacks suppressed [ 765.191934][ C1] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 765.197209][ C1] buffer_io_error: 11 callbacks suppressed [ 765.197220][ C1] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 766.061219][T31922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.26512'. [ 766.210017][ T2322] kernel read not supported for file /dsp1 (pid: 2322 comm: kworker/2:2) [ 766.251882][T31939] netlink: 28 bytes leftover after parsing attributes in process `syz.7.26517'. [ 766.284573][T31933] nbd7: detected capacity change from 0 to 63 [ 766.314670][T25719] block nbd7: Receive control failed (result -32) [ 766.322391][ T5114] block nbd7: Dead connection, failed to find a fallback [ 766.331495][ T5114] block nbd7: shutting down sockets [ 766.336092][ T5114] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 766.344926][ T5114] Buffer I/O error on dev nbd7, logical block 0, async page read [ 766.348913][ T5114] Buffer I/O error on dev nbd7, logical block 1, async page read [ 766.351962][ T5114] Buffer I/O error on dev nbd7, logical block 2, async page read [ 766.354662][ T5114] Buffer I/O error on dev nbd7, logical block 3, async page read [ 766.362351][ T5114] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 766.365601][ T5114] Buffer I/O error on dev nbd7, logical block 0, async page read [ 766.368561][ T5114] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 766.377747][ T5114] Buffer I/O error on dev nbd7, logical block 1, async page read [ 766.381144][ T5114] Buffer I/O error on dev nbd7, logical block 2, async page read [ 766.384162][ T5114] Buffer I/O error on dev nbd7, logical block 3, async page read [ 766.387577][ T11] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 766.390655][ T11] Buffer I/O error on dev nbd7, logical block 0, async page read [ 766.394328][ T11] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 766.397429][ T11] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 766.400569][ T11] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 766.401412][T31952] netlink: 68 bytes leftover after parsing attributes in process `syz.5.26519'. [ 766.403617][ T11] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 766.410523][ T11] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 766.417364][T12407] ldm_validate_partition_table(): Disk read failed. [ 766.422987][T12407] Dev nbd7: unable to read RDB block 0 [ 766.426548][T12407] nbd7: unable to read partition table [ 766.432990][T12407] ldm_validate_partition_table(): Disk read failed. [ 766.437636][T12407] Dev nbd7: unable to read RDB block 0 [ 766.441199][T12407] nbd7: unable to read partition table [ 766.704307][T14846] kernel write not supported for file /snd/seq (pid: 14846 comm: kworker/3:1) [ 767.172631][T14846] kernel read not supported for file /dsp1 (pid: 14846 comm: kworker/3:1) [ 767.350644][T32034] netlink: 16 bytes leftover after parsing attributes in process `syz.9.26545'. [ 767.360080][T32034] netlink: 4 bytes leftover after parsing attributes in process `syz.9.26545'. [ 767.616717][T32064] overlayfs: upper fs does not support file handles, falling back to index=off. [ 767.620687][T32064] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 768.037565][ T2322] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 768.358192][T14846] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 768.496506][ T34] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 768.517790][T14846] usb 10-1: Using ep0 maxpacket: 8 [ 768.521292][T14846] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 768.524582][T14846] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 768.527982][T14846] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 768.531382][T14846] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 768.535590][T14846] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 768.538566][T14846] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.667574][ T34] usb 13-1: Using ep0 maxpacket: 32 [ 768.671478][ T34] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 768.677027][ T34] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 768.680280][ T34] usb 13-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 768.683023][ T34] usb 13-1: Product: syz [ 768.684440][ T34] usb 13-1: Manufacturer: syz [ 768.686093][ T34] usb 13-1: SerialNumber: syz [ 768.689970][ T34] usb 13-1: config 0 descriptor?? [ 768.692467][T32132] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 768.696191][ T34] hub 13-1:0.0: bad descriptor, ignoring hub [ 768.698361][ T34] hub 13-1:0.0: probe with driver hub failed with error -5 [ 768.766623][T14846] usb 10-1: GET_CAPABILITIES returned 0 [ 768.771811][T14846] usbtmc 10-1:16.0: can't read capabilities [ 768.981257][ T2322] usb 10-1: USB disconnect, device number 28 [ 769.031121][T14846] usb 13-1: USB disconnect, device number 4 [ 769.298309][T28489] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 769.458163][T28489] usb 12-1: Using ep0 maxpacket: 8 [ 769.463802][T28489] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 769.467654][T28489] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.470988][T28489] usb 12-1: Product: syz [ 769.472422][T28489] usb 12-1: Manufacturer: syz [ 769.473925][T28489] usb 12-1: SerialNumber: syz [ 769.477265][T28489] usb 12-1: config 0 descriptor?? [ 769.482984][T28489] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 769.486812][T28489] dvb-usb: bulk message failed: -22 (2/0) [ 769.489130][T28489] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 769.493492][T28489] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 769.497286][T28489] usb 12-1: media controller created [ 769.505597][T28489] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 769.518705][T28489] dvb-usb: bulk message failed: -22 (1/0) [ 769.521600][T28489] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 769.528511][T28489] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb12/12-1/input/input105 [ 769.543681][T28489] dvb-usb: schedule remote query interval to 50 msecs. [ 769.545811][T28489] dvb-usb: bulk message failed: -22 (2/0) [ 769.547748][T28489] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 769.611924][T28489] dvb-usb: bulk message failed: -22 (1/0) [ 769.615622][T28489] dvb-usb: error while querying for an remote control event. [ 769.686622][T28489] dvb-usb: bulk message failed: -22 (1/0) [ 769.689876][T28489] dvb-usb: error while querying for an remote control event. [ 769.701506][T32167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.706290][T32167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.713011][ T6013] usb 12-1: USB disconnect, device number 5 [ 769.732147][ T6013] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 769.896330][ T6025] kernel read not supported for file /dsp1 (pid: 6025 comm: kworker/0:4) [ 770.911855][ T42] audit: type=1326 audit(2000001448.296:25890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32262 comm="syz.8.26599" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe3fec code=0x0 [ 771.702344][ T6013] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 771.739911][T32315] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 771.742903][T32315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 771.783574][T32318] netlink: 4 bytes leftover after parsing attributes in process `syz.9.26615'. [ 771.830173][T32322] netlink: 'syz.8.26617': attribute type 3 has an invalid length. [ 771.834125][T32322] netlink: 72 bytes leftover after parsing attributes in process `syz.8.26617'. [ 771.884108][ T6013] usb 12-1: Using ep0 maxpacket: 32 [ 771.888492][ T6013] usb 12-1: config 0 has an invalid descriptor of length 221, skipping remainder of the config [ 771.896999][ T6013] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 771.904878][ T6013] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 771.909443][ T6013] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 771.913259][ T6013] usb 12-1: Product: syz [ 771.915123][ T6013] usb 12-1: Manufacturer: syz [ 771.917198][ T6013] usb 12-1: SerialNumber: syz [ 771.924454][ T6013] usb 12-1: config 0 descriptor?? [ 772.165376][T28489] usb 12-1: USB disconnect, device number 6 [ 772.202700][T32354] netlink: 8 bytes leftover after parsing attributes in process `syz.9.26622'. [ 772.206778][T32354] netlink: 4 bytes leftover after parsing attributes in process `syz.9.26622'. [ 772.222400][ T5975] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.230656][ T5975] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.237374][ T5975] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.240584][ T5975] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.653332][T32364] nbd8: detected capacity change from 0 to 63 [ 772.664551][ T35] block nbd8: Send control failed (result -32) [ 772.664874][T25719] block nbd8: Receive control failed (result -32) [ 772.666973][ T35] block nbd8: Request send failed, requeueing [ 772.695132][ T35] block nbd8: Dead connection, failed to find a fallback [ 772.704866][ T35] block nbd8: shutting down sockets [ 772.707007][ T35] blk_print_req_error: 132 callbacks suppressed [ 772.707019][ T35] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 772.729757][ T35] buffer_io_error: 139 callbacks suppressed [ 772.729773][ T35] Buffer I/O error on dev nbd8, logical block 1, async page read [ 772.744292][ T35] Buffer I/O error on dev nbd8, logical block 2, async page read [ 772.756630][ T35] Buffer I/O error on dev nbd8, logical block 3, async page read [ 772.763434][ T5172] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.776059][ T5172] Buffer I/O error on dev nbd8, logical block 0, async page read [ 772.787818][ T5172] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 772.791646][ T5172] Buffer I/O error on dev nbd8, logical block 0, async page read [ 772.794840][ T5172] Buffer I/O error on dev nbd8, logical block 1, async page read [ 772.797905][ T5172] Buffer I/O error on dev nbd8, logical block 2, async page read [ 772.801415][ T5172] Buffer I/O error on dev nbd8, logical block 3, async page read [ 772.806248][ T5172] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 772.810052][ T5172] Buffer I/O error on dev nbd8, logical block 0, async page read [ 772.813204][ T5172] Buffer I/O error on dev nbd8, logical block 1, async page read [ 772.816628][ T5172] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 772.821060][ T5172] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 772.825239][ T5172] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 772.829314][ T5172] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 772.833367][ T5172] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 772.837422][T12407] ldm_validate_partition_table(): Disk read failed. [ 772.839678][ T5172] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.851794][T12407] Dev nbd8: unable to read RDB block 0 [ 772.854126][T12407] nbd8: unable to read partition table [ 772.865427][T12407] ldm_validate_partition_table(): Disk read failed. [ 772.869418][T12407] Dev nbd8: unable to read RDB block 0 [ 772.872907][T12407] nbd8: unable to read partition table [ 774.497276][T32434] loop9: detected capacity change from 0 to 7 [ 774.549979][T32425] syz.7.26642 (32425): drop_caches: 2 [ 774.847095][T32465] netlink: 36 bytes leftover after parsing attributes in process `syz.8.26653'. [ 774.989758][T32488] netlink: 'syz.8.26662': attribute type 5 has an invalid length. [ 774.997420][T32488] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.26662'. [ 775.391252][T32547] openvswitch: netlink: IP tunnel TTL not specified. [ 775.393453][T32547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.500178][T32564] loop5: detected capacity change from 0 to 7 [ 775.512243][T32564] Dev loop5: unable to read RDB block 7 [ 775.514245][T32564] loop5: unable to read partition table [ 775.516263][T32564] loop5: partition table beyond EOD, truncated [ 775.519360][T32564] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 776.424443][ T42] audit: type=1326 audit(2000001453.443:25891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.7.26709" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 776.432502][ T42] audit: type=1326 audit(2000001453.443:25892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.7.26709" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 776.439704][ T42] audit: type=1326 audit(2000001453.452:25893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.7.26709" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 776.446514][ T42] audit: type=1326 audit(2000001453.452:25894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.7.26709" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 776.453820][ T42] audit: type=1326 audit(2000001453.452:25895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.7.26709" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf702efec code=0x7ffc0000 [ 776.463245][ T42] audit: type=1326 audit(2000001453.452:25896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.7.26709" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 776.486636][ T42] audit: type=1326 audit(2000001453.452:25897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.7.26709" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 776.494083][ T42] audit: type=1326 audit(2000001453.471:25898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.7.26709" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 776.501557][ T42] audit: type=1326 audit(2000001453.471:25899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.7.26709" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 776.508375][ T42] audit: type=1326 audit(2000001453.471:25900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32650 comm="syz.7.26709" exe="/syz-executor" sig=0 arch=40000003 syscall=325 compat=1 ip=0xf702efec code=0x7ffc0000 [ 776.712693][T32677] Falling back ldisc for ttyS3. [ 776.717674][T32679] netlink: 24 bytes leftover after parsing attributes in process `syz.5.26718'. [ 777.156160][T32727] netlink: 318 bytes leftover after parsing attributes in process `syz.9.26740'. [ 777.254965][T32737] netlink: 4 bytes leftover after parsing attributes in process `syz.7.26743'. [ 777.729246][T25658] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 778.161386][T25658] usb 13-1: unable to get BOS descriptor or descriptor too short [ 778.164912][T25658] usb 13-1: no configurations [ 778.167056][T25658] usb 13-1: can't read configurations, error -22 [ 779.706717][T28489] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 779.770275][T25658] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 779.930717][T25658] usb 13-1: Using ep0 maxpacket: 16 [ 779.935255][T25658] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 779.941800][T25658] usb 13-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 779.945402][T25658] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.948492][T25658] usb 13-1: Product: syz [ 779.950153][T25658] usb 13-1: Manufacturer: syz [ 779.951730][T25658] usb 13-1: SerialNumber: syz [ 779.955078][T25658] usb 13-1: config 0 descriptor?? [ 779.958247][T25658] hub 13-1:0.0: bad descriptor, ignoring hub [ 779.960080][T25658] hub 13-1:0.0: probe with driver hub failed with error -5 [ 779.963446][T25658] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 780.240201][ T6025] usb 13-1: USB disconnect, device number 7 [ 780.935601][T28489] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 782.028554][ T606] netlink: 4 bytes leftover after parsing attributes in process `syz.8.26826'. [ 782.033784][ T606] netlink: 4 bytes leftover after parsing attributes in process `syz.8.26826'. [ 782.132701][T28489] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 784.461510][ T5932] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 784.462041][ T5936] Bluetooth: hci4: command 0x1003 tx timeout [ 787.913177][T28489] kernel read not supported for file /dsp1 (pid: 28489 comm: kworker/2:0) [ 789.007371][ T818] pimreg: tun_chr_ioctl cmd 2147767507 [ 789.173011][ T829] 9p: Bad value for 'rfdno' [ 789.216417][ T831] input: syz1 as /devices/virtual/input/input106 [ 789.564149][T28489] kernel write not supported for file /snd/midiC2D0 (pid: 28489 comm: kworker/2:0) [ 789.807930][ T890] netlink: 168 bytes leftover after parsing attributes in process `syz.7.26900'. [ 789.997069][ T34] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 790.180531][ T34] usb 13-1: too many configurations: 9, using maximum allowed: 8 [ 790.187920][ T34] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.192112][ T34] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 790.196622][ T34] usb 13-1: config 0 interface 0 has no altsetting 0 [ 790.200889][ T34] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.204858][ T34] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 790.209175][ T34] usb 13-1: config 0 interface 0 has no altsetting 0 [ 790.213434][ T34] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.218003][ T34] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 790.222695][ T34] usb 13-1: config 0 interface 0 has no altsetting 0 [ 790.226761][ T34] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.230850][ T34] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 790.235216][ T34] usb 13-1: config 0 interface 0 has no altsetting 0 [ 790.238558][ T34] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.241819][ T34] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 790.245535][ T34] usb 13-1: config 0 interface 0 has no altsetting 0 [ 790.248439][ T34] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.251379][ T34] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 790.255136][ T34] usb 13-1: config 0 interface 0 has no altsetting 0 [ 790.266002][ T34] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.269817][ T34] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 790.274214][ T34] usb 13-1: config 0 interface 0 has no altsetting 0 [ 790.288359][ T34] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 790.291994][ T34] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 790.295673][ T34] usb 13-1: config 0 interface 0 has no altsetting 0 [ 790.299763][ T34] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 790.303379][ T34] usb 13-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 790.306095][ T34] usb 13-1: Product: syz [ 790.307520][ T34] usb 13-1: Manufacturer: syz [ 790.309001][ T34] usb 13-1: SerialNumber: syz [ 790.313107][ T34] usb 13-1: config 0 descriptor?? [ 790.320390][ T34] yurex 13-1:0.0: USB YUREX device now attached to Yurex #0 [ 790.548813][ T34] usb 13-1: USB disconnect, device number 8 [ 790.553314][ T34] yurex 13-1:0.0: USB YUREX #0 now disconnected [ 791.607445][ T1041] netlink: 12 bytes leftover after parsing attributes in process `syz.8.26938'. [ 791.770986][ T1062] nbd0: detected capacity change from 0 to 87 [ 791.780537][ T1062] block nbd0: reconnected socket [ 791.784208][T25719] block nbd0: Receive control failed (result -32) [ 791.809289][T12407] udevd[12407]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 791.976172][ T1083] netlink: 28 bytes leftover after parsing attributes in process `syz.7.26952'. [ 791.979111][ T1083] netlink: 32 bytes leftover after parsing attributes in process `syz.7.26952'. [ 791.981853][ T1083] netlink: 28 bytes leftover after parsing attributes in process `syz.7.26952'. [ 791.984868][ T1083] netlink: 32 bytes leftover after parsing attributes in process `syz.7.26952'. [ 792.029936][ T1088] netlink: 52 bytes leftover after parsing attributes in process `syz.7.26954'. [ 792.126680][ T1106] netlink: 'syz.5.26959': attribute type 10 has an invalid length. [ 793.149810][ T1212] netlink: 'syz.7.26985': attribute type 1 has an invalid length. [ 793.153133][ T1212] netlink: 193500 bytes leftover after parsing attributes in process `syz.7.26985'. [ 793.156573][ T1212] netlink: 'syz.7.26985': attribute type 1 has an invalid length. [ 793.159339][ T1212] netlink: 2016 bytes leftover after parsing attributes in process `syz.7.26985'. [ 793.231216][ T1214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.26987'. [ 793.489543][ T1248] PID 1248 killed due to inadequate hugepage pool [ 793.854457][ T5932] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 793.855170][ T5936] Bluetooth: hci4: command 0x1003 tx timeout [ 794.424690][ T1289] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 794.668850][ T29] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 794.685878][ T42] kauditd_printk_skb: 1831 callbacks suppressed [ 794.685895][ T42] audit: type=1326 audit(2000001470.530:27732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1318 comm="syz.8.27018" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fec code=0x0 [ 794.848676][ T29] usb 14-1: Using ep0 maxpacket: 16 [ 794.859334][ T29] usb 14-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 794.862444][ T29] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.865141][ T29] usb 14-1: Product: syz [ 794.866922][ T29] usb 14-1: Manufacturer: syz [ 794.869006][ T29] usb 14-1: SerialNumber: syz [ 795.094738][ T29] usb 14-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 795.099876][ T29] usb 14-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 795.104146][ T29] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 795.107778][ T29] usb 14-1: media controller created [ 795.116392][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 795.296473][ T1371] wg2 speed is unknown, defaulting to 1000 [ 795.382880][ T29] zl10353_read_register: readreg error (reg=127, ret==-110) [ 795.421136][ T29] dvb_usb_gl861 14-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 795.428219][ T29] usb 14-1: USB disconnect, device number 2 [ 795.479859][ T1371] lo speed is unknown, defaulting to 1000 [ 795.544830][ T6025] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 795.715554][ T6025] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 795.721677][ T6025] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 795.726228][ T6025] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 795.729563][ T6025] usb 10-1: config 0 interface 0 has no altsetting 0 [ 795.733342][ T6025] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 795.736418][ T6025] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 795.740027][ T6025] usb 10-1: config 0 interface 0 has no altsetting 0 [ 795.748764][ T6025] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 795.755619][ T6025] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 795.759086][ T6025] usb 10-1: config 0 interface 0 has no altsetting 0 [ 795.763868][ T6025] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 795.767630][ T6025] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 795.772112][ T6025] usb 10-1: config 0 interface 0 has no altsetting 0 [ 795.775550][ T6025] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 795.779616][ T6025] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 795.783325][ T6025] usb 10-1: config 0 interface 0 has no altsetting 0 [ 795.786391][ T6025] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 795.789832][ T6025] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 795.794008][ T6025] usb 10-1: config 0 interface 0 has no altsetting 0 [ 795.797113][ T6025] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 795.800659][ T6025] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 795.804427][ T6025] usb 10-1: config 0 interface 0 has no altsetting 0 [ 795.807577][ T6025] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 795.811073][ T6025] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 795.814987][ T6025] usb 10-1: config 0 interface 0 has no altsetting 0 [ 795.819245][ T6025] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 795.822688][ T6025] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 795.825509][ T6025] usb 10-1: Product: syz [ 795.827094][ T6025] usb 10-1: Manufacturer: syz [ 795.828902][ T6025] usb 10-1: SerialNumber: syz [ 795.834643][ T6025] usb 10-1: config 0 descriptor?? [ 795.839842][ T6025] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 796.065721][ T29] usb 10-1: USB disconnect, device number 29 [ 796.076701][ T29] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 796.497526][ T1493] __nla_validate_parse: 4 callbacks suppressed [ 796.497539][ T1493] netlink: 4 bytes leftover after parsing attributes in process `syz.9.27048'. [ 797.017580][ T1544] loop7: detected capacity change from 0 to 7 [ 797.042360][ C0] blk_print_req_error: 93 callbacks suppressed [ 797.042379][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 797.051458][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.055174][ C0] buffer_io_error: 139 callbacks suppressed [ 797.055187][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 797.083580][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.087062][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 797.093551][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.097369][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 797.103762][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.107489][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 797.113257][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.117062][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 797.120612][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.124357][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 797.128023][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.131826][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 797.135135][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.138901][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 797.142280][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 797.146327][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 797.149836][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 797.153032][ T1544] ldm_validate_partition_table(): Disk read failed. [ 797.156571][ T1544] Dev loop7: unable to read RDB block 0 [ 797.159590][ T1544] loop7: unable to read partition table [ 797.162198][ T1544] loop7: partition table beyond EOD, truncated [ 797.165048][ T1544] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 797.173609][ T1548] ldm_validate_partition_table(): Disk read failed. [ 797.176195][ T1548] Dev loop7: unable to read RDB block 0 [ 797.180307][ T1548] loop7: unable to read partition table [ 797.182575][ T1548] loop7: partition table beyond EOD, truncated [ 797.308085][ T1042] kernel read not supported for file /dsp (pid: 1042 comm: kworker/1:2) [ 797.344146][ T1560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.346448][ T1560] IPv6: NLM_F_CREATE should be set when creating new route [ 797.348784][ T1560] IPv6: NLM_F_CREATE should be set when creating new route [ 797.358822][ T1560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.567489][ T1588] Failed to get privilege flags for destination (handle=0x2:0x0) [ 797.771512][ T1605] overlay: filesystem on ./bus not supported as upperdir [ 797.897183][ T1625] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 797.899757][ T1625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.100271][ T1641] [ 798.101105][ T1641] ====================================================== [ 798.103273][ T1641] WARNING: possible circular locking dependency detected [ 798.105415][ T1641] syzkaller #0 Tainted: G L [ 798.107534][ T1641] ------------------------------------------------------ [ 798.109721][ T1641] syz.8.27091/1641 is trying to acquire lock: [ 798.111826][ T1641] ffff88801d2c6980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 798.115161][ T1641] [ 798.115161][ T1641] but task is already holding lock: [ 798.117356][ T1641] ffff88801d2c6aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 798.120954][ T1641] [ 798.120954][ T1641] which lock already depends on the new lock. [ 798.120954][ T1641] [ 798.125123][ T1641] [ 798.125123][ T1641] the existing dependency chain (in reverse order) is: [ 798.128221][ T1641] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 798.128221][ T1641] -> #9 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 798.131617][ T1641] lock_acquire+0x1b9/0x370 [ 798.133674][ T1641] down_read+0x99/0x4c0 [ 798.135521][ T1641] kernfs_remove_by_name_ns+0x49/0x120 [ 798.137981][ T1641] remove_files+0x96/0x1c0 [ 798.140041][ T1641] sysfs_remove_group+0x8b/0x1b0 [ 798.142255][ T1641] sysfs_remove_groups+0x60/0xb0 [ 798.144446][ T1641] __kobject_del+0x89/0x220 [ 798.146513][ T1641] kobject_del+0x3f/0x60 [ 798.148500][ T1641] free_desc+0x299/0x330 [ 798.150540][ T1641] irq_free_descs+0x84/0xc0 [ 798.152552][ T1641] irq_domain_free_irqs+0x46a/0x5c0 [ 798.154935][ T1641] mp_unmap_irq+0xf8/0x130 [ 798.156811][ T1641] acpi_unregister_gsi_ioapic+0x40/0x60 [ 798.158794][ T1641] acpi_unregister_gsi+0x25/0x40 [ 798.160853][ T1641] acpi_pci_irq_disable+0x275/0x360 [ 798.163207][ T1641] pcibios_disable_device+0x89/0xb0 [ 798.165565][ T1641] do_pci_disable_device+0x9f/0x100 [ 798.167915][ T1641] pci_disable_device+0x130/0x270 [ 798.170166][ T1641] quirk_usb_early_handoff+0x24b/0x1360 [ 798.172638][ T1641] pci_fixup_device+0x334/0x4d0 [ 798.174861][ T1641] pci_apply_final_quirks+0x115/0x3e0 [ 798.176750][ T1641] do_one_initcall+0x11d/0x700 [ 798.178427][ T1641] kernel_init_freeable+0x6ea/0x7b0 [ 798.180402][ T1641] kernel_init+0x1f/0x1e0 [ 798.182353][ T1641] ret_from_fork+0x72b/0xd50 [ 798.183992][ T1641] ret_from_fork_asm+0x1a/0x30 [ 798.186089][ T1641] [ 798.186089][ T1641] -> #8 (sparse_irq_lock){+.+.}-{4:4}: [ 798.188720][ T1641] lock_acquire+0x1b9/0x370 [ 798.190415][ T1641] __mutex_lock+0x1a4/0x1bd0 [ 798.192028][ T1641] cpuhp_bringup_ap+0x63/0x10e0 [ 798.193689][ T1641] cpuhp_invoke_callback+0x3b4/0x9a0 [ 798.195495][ T1641] __cpuhp_invoke_callback_range+0x158/0x1d0 [ 798.197484][ T1641] _cpu_up+0x3f6/0x960 [ 798.198987][ T1641] cpu_up+0x1ba/0x230 [ 798.200731][ T1641] cpuhp_bringup_mask+0xf8/0x180 [ 798.202682][ T1641] bringup_nonboot_cpus+0xec/0x1b0 [ 798.204655][ T1641] smp_init+0x32/0x150 [ 798.206128][ T1641] kernel_init_freeable+0x44b/0x7b0 [ 798.208177][ T1641] kernel_init+0x1f/0x1e0 [ 798.209902][ T1641] ret_from_fork+0x72b/0xd50 [ 798.211985][ T1641] ret_from_fork_asm+0x1a/0x30 [ 798.214193][ T1641] [ 798.214193][ T1641] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 798.217363][ T1641] lock_acquire+0x1b9/0x370 [ 798.219038][ T1641] cpus_read_lock+0x42/0x170 [ 798.221054][ T1641] static_key_slow_inc+0x12/0x30 [ 798.223159][ T1641] nbd_genl_reconfigure+0xd82/0x1a00 [ 798.225238][ T1641] genl_family_rcv_msg_doit+0x214/0x300 [ 798.227438][ T1641] genl_rcv_msg+0x560/0x800 [ 798.229270][ T1641] netlink_rcv_skb+0x159/0x420 [ 798.231192][ T1641] genl_rcv+0x28/0x40 [ 798.232849][ T1641] netlink_unicast+0x585/0x850 [ 798.234794][ T1641] netlink_sendmsg+0x8b0/0xda0 [ 798.236868][ T1641] ____sys_sendmsg+0xa4d/0xbe0 [ 798.239041][ T1641] ___sys_sendmsg+0x190/0x1e0 [ 798.241187][ T1641] __sys_sendmsg+0x160/0x210 [ 798.243276][ T1641] __do_fast_syscall_32+0xe7/0x970 [ 798.245562][ T1641] do_fast_syscall_32+0x32/0x70 [ 798.247762][ T1641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 798.250529][ T1641] [ 798.250529][ T1641] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 798.253668][ T1641] lock_acquire+0x1b9/0x370 [ 798.255760][ T1641] __mutex_lock+0x1a4/0x1bd0 [ 798.257796][ T1641] nbd_queue_rq+0x428/0x1080 [ 798.259864][ T1641] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 798.262338][ T1641] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 798.265082][ T1641] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 798.267706][ T1641] blk_mq_run_work_fn+0x135/0x380 [ 798.269955][ T1641] process_one_work+0xa23/0x1940 [ 798.272215][ T1641] worker_thread+0x5ef/0xe50 [ 798.274097][ T1641] kthread+0x370/0x450 [ 798.275624][ T1641] ret_from_fork+0x72b/0xd50 [ 798.277512][ T1641] ret_from_fork_asm+0x1a/0x30 [ 798.279666][ T1641] [ 798.279666][ T1641] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 798.282695][ T1641] lock_acquire+0x1b9/0x370 [ 798.284725][ T1641] __mutex_lock+0x1a4/0x1bd0 [ 798.286694][ T1641] nbd_queue_rq+0xba/0x1080 [ 798.288322][ T1641] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 798.290414][ T1641] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 798.292609][ T1641] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 798.294708][ T1641] blk_mq_run_work_fn+0x135/0x380 [ 798.296428][ T1641] process_one_work+0xa23/0x1940 [ 798.298101][ T1641] worker_thread+0x5ef/0xe50 [ 798.299857][ T1641] kthread+0x370/0x450 [ 798.301558][ T1641] ret_from_fork+0x72b/0xd50 [ 798.303435][ T1641] ret_from_fork_asm+0x1a/0x30 [ 798.305338][ T1641] [ 798.305338][ T1641] -> #4 (set->srcu){.+.+}-{0:0}: [ 798.307878][ T1641] lock_sync+0x9d/0x110 [ 798.309629][ T1641] __synchronize_srcu+0xa2/0x300 [ 798.311704][ T1641] blk_mq_quiesce_queue+0x149/0x1c0 [ 798.313503][ T1641] elevator_switch+0x17b/0x7e0 [ 798.315181][ T1641] elevator_change+0x352/0x530 [ 798.316828][ T1641] elevator_set_default+0x29e/0x360 [ 798.318600][ T1641] blk_register_queue+0x48e/0x630 [ 798.320605][ T1641] __add_disk+0x73f/0xe40 [ 798.322441][ T1641] add_disk_fwnode+0x118/0x480 [ 798.324604][ T1641] nbd_dev_add+0x77a/0xb10 [ 798.326707][ T1641] nbd_init+0x291/0x2b0 [ 798.328683][ T1641] do_one_initcall+0x11d/0x700 [ 798.330933][ T1641] kernel_init_freeable+0x6ea/0x7b0 [ 798.333270][ T1641] kernel_init+0x1f/0x1e0 [ 798.335293][ T1641] ret_from_fork+0x72b/0xd50 [ 798.337408][ T1641] ret_from_fork_asm+0x1a/0x30 [ 798.339678][ T1641] [ 798.339678][ T1641] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 798.342950][ T1641] lock_acquire+0x1b9/0x370 [ 798.345045][ T1641] __mutex_lock+0x1a4/0x1bd0 [ 798.347169][ T1641] elevator_change+0x1bc/0x530 [ 798.349342][ T1641] elevator_set_none+0x92/0xf0 [ 798.351462][ T1641] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 798.354058][ T1641] nbd_start_device+0x1a6/0xbd0 [ 798.356351][ T1641] nbd_genl_connect+0xff2/0x1a40 [ 798.358543][ T1641] genl_family_rcv_msg_doit+0x214/0x300 [ 798.360622][ T1641] genl_rcv_msg+0x560/0x800 [ 798.362210][ T1641] netlink_rcv_skb+0x159/0x420 [ 798.363849][ T1641] genl_rcv+0x28/0x40 [ 798.365266][ T1641] netlink_unicast+0x585/0x850 [ 798.366912][ T1641] netlink_sendmsg+0x8b0/0xda0 [ 798.368544][ T1641] ____sys_sendmsg+0xa4d/0xbe0 [ 798.370459][ T1641] ___sys_sendmsg+0x190/0x1e0 [ 798.372629][ T1641] __sys_sendmsg+0x160/0x210 [ 798.374435][ T1641] __do_fast_syscall_32+0xe7/0x970 [ 798.376165][ T1641] do_fast_syscall_32+0x32/0x70 [ 798.378232][ T1641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 798.380775][ T1641] [ 798.380775][ T1641] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 798.383893][ T1641] lock_acquire+0x1b9/0x370 [ 798.385728][ T1641] blk_alloc_queue+0x610/0x790 [ 798.387652][ T1641] blk_mq_alloc_queue+0x174/0x290 [ 798.389668][ T1641] __blk_mq_alloc_disk+0x29/0x120 [ 798.391632][ T1641] nbd_dev_add+0x492/0xb10 [ 798.393190][ T1641] nbd_init+0x291/0x2b0 [ 798.394657][ T1641] do_one_initcall+0x11d/0x700 [ 798.396222][ T1641] kernel_init_freeable+0x6ea/0x7b0 [ 798.397982][ T1641] kernel_init+0x1f/0x1e0 [ 798.399559][ T1641] ret_from_fork+0x72b/0xd50 [ 798.401620][ T1641] ret_from_fork_asm+0x1a/0x30 [ 798.403267][ T1641] [ 798.403267][ T1641] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 798.405734][ T1641] lock_acquire+0x1b9/0x370 [ 798.407835][ T1641] fs_reclaim_acquire+0xc4/0x100 [ 798.410008][ T1641] kmem_cache_alloc_lru_noprof+0x5f/0x6a0 [ 798.412047][ T1641] alloc_inode+0x183/0x250 [ 798.413625][ T1641] iget_locked+0x1d9/0x6d0 [ 798.415204][ T1641] kernfs_get_inode+0x46/0x470 [ 798.416854][ T1641] kernfs_get_tree+0x63e/0xbb0 [ 798.418515][ T1641] vfs_get_tree+0x92/0x320 [ 798.420218][ T1641] path_mount+0x7d0/0x23d0 [ 798.421740][ T1641] __x64_sys_mount+0x293/0x310 [ 798.423405][ T1641] do_syscall_64+0x115/0x840 [ 798.424989][ T1641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.426978][ T1641] [ 798.426978][ T1641] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 798.429455][ T1641] check_prev_add+0xeb/0xe60 [ 798.431204][ T1641] __lock_acquire+0x136c/0x1a40 [ 798.433065][ T1641] lock_acquire+0x1b9/0x370 [ 798.434636][ T1641] down_write+0x8b/0x1f0 [ 798.436109][ T1641] kernfs_remove_by_name_ns+0x51/0x120 [ 798.437962][ T1641] cgroup_addrm_files+0x7e6/0xdb0 [ 798.439858][ T1641] css_clear_dir+0x117/0x2c0 [ 798.441989][ T1641] kill_css_sync+0x19a/0x450 [ 798.444173][ T1641] cgroup_destroy_locked+0x264/0x940 [ 798.446604][ T1641] cgroup_rmdir+0x37/0x2f0 [ 798.448654][ T1641] kernfs_iop_rmdir+0x106/0x170 [ 798.450880][ T1641] vfs_rmdir+0x328/0x8a0 [ 798.452820][ T1641] filename_rmdir+0x31a/0x5c0 [ 798.454981][ T1641] __ia32_sys_unlinkat+0xf5/0x130 [ 798.457235][ T1641] __do_fast_syscall_32+0xe7/0x970 [ 798.459556][ T1641] do_fast_syscall_32+0x32/0x70 [ 798.461729][ T1641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 798.463842][ T1641] [ 798.463842][ T1641] other info that might help us debug this: [ 798.463842][ T1641] [ 798.466949][ T1641] Chain exists of: [ 798.466949][ T1641] &root->kernfs_rwsem --> sparse_irq_lock --> &root->kernfs_supers_rwsem [ 798.466949][ T1641] [ 798.471338][ T1641] Possible unsafe locking scenario: [ 798.471338][ T1641] [ 798.473617][ T1641] CPU0 CPU1 [ 798.475290][ T1641] ---- ---- [ 798.476957][ T1641] rlock(&root->kernfs_supers_rwsem); [ 798.478693][ T1641] lock(sparse_irq_lock); [ 798.480868][ T1641] lock(&root->kernfs_supers_rwsem); [ 798.483246][ T1641] lock(&root->kernfs_rwsem); [ 798.484689][ T1641] [ 798.484689][ T1641] *** DEADLOCK *** [ 798.484689][ T1641] [ 798.487654][ T1641] 5 locks held by syz.8.27091/1641: [ 798.489813][ T1641] #0: ffff88801e2ca450 (sb_writers#9){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 798.493534][ T1641] #1: ffff888012c24880 (&type->i_mutex_dir_key#6/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 798.497779][ T1641] #2: ffff88800051c3c0 (&type->i_mutex_dir_key#6){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 798.501729][ T1641] #3: ffffffff8ec4a9e0 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x116/0x520 [ 798.505695][ T1641] #4: ffff88801d2c6aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 798.509317][ T1641] [ 798.509317][ T1641] stack backtrace: [ 798.511721][ T1641] CPU: 1 UID: 0 PID: 1641 Comm: syz.8.27091 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.511749][ T1641] Tainted: [L]=SOFTLOCKUP [ 798.511756][ T1641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 798.511768][ T1641] Call Trace: [ 798.511776][ T1641] [ 798.511786][ T1641] dump_stack_lvl+0x100/0x190 [ 798.511807][ T1641] print_circular_bug.cold+0x178/0x1c7 [ 798.511838][ T1641] check_noncircular+0x146/0x160 [ 798.511866][ T1641] check_prev_add+0xeb/0xe60 [ 798.511892][ T1641] __lock_acquire+0x136c/0x1a40 [ 798.511928][ T1641] lock_acquire+0x1b9/0x370 [ 798.511953][ T1641] ? kernfs_remove_by_name_ns+0x51/0x120 [ 798.511973][ T1641] ? __pfx___might_resched+0x10/0x10 [ 798.512003][ T1641] down_write+0x8b/0x1f0 [ 798.512026][ T1641] ? kernfs_remove_by_name_ns+0x51/0x120 [ 798.512044][ T1641] ? __pfx_down_write+0x10/0x10 [ 798.512068][ T1641] kernfs_remove_by_name_ns+0x51/0x120 [ 798.512087][ T1641] cgroup_addrm_files+0x7e6/0xdb0 [ 798.512116][ T1641] ? check_prev_add+0xfe/0xe60 [ 798.512144][ T1641] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 798.512176][ T1641] css_clear_dir+0x117/0x2c0 [ 798.512202][ T1641] kill_css_sync+0x19a/0x450 [ 798.512228][ T1641] cgroup_destroy_locked+0x264/0x940 [ 798.512253][ T1641] ? __pfx_cgroup_destroy_locked+0x10/0x10 [ 798.512281][ T1641] ? cgroup_kn_lock_live+0x116/0x520 [ 798.512300][ T1641] ? cgroup_kn_lock_live+0x165/0x520 [ 798.512320][ T1641] ? kernfs_root+0xee/0x2a0 [ 798.512344][ T1641] cgroup_rmdir+0x37/0x2f0 [ 798.512369][ T1641] kernfs_iop_rmdir+0x106/0x170 [ 798.512395][ T1641] ? security_inode_rmdir+0xe2/0x280 [ 798.512416][ T1641] vfs_rmdir+0x328/0x8a0 [ 798.512440][ T1641] filename_rmdir+0x31a/0x5c0 [ 798.512459][ T1641] ? __pfx_filename_rmdir+0x10/0x10 [ 798.512482][ T1641] ? do_getname+0x191/0x390 [ 798.512503][ T1641] __ia32_sys_unlinkat+0xf5/0x130 [ 798.512522][ T1641] __do_fast_syscall_32+0xe7/0x970 [ 798.512544][ T1641] do_fast_syscall_32+0x32/0x70 [ 798.512565][ T1641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 798.512589][ T1641] RIP: 0023:0xf7fe3fec [ 798.512611][ T1641] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 798.512621][ T1641] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 000000000000012d [ 798.512640][ T1641] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 798.512651][ T1641] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 798.512661][ T1641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 798.512672][ T1641] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 798.512683][ T1641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 798.512702][ T1641] [ 798.939392][ T1165] smc: removing ib device syz1 [ 798.947743][ T1165] smbdirect: ib_dev[syz1] removed [ 799.452425][ T13] bridge_slave_1: left allmulticast mode [ 799.455100][ T13] bridge_slave_1: left promiscuous mode [ 799.457598][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.461856][ T13] bridge_slave_0: left allmulticast mode [ 799.464285][ T13] bridge_slave_0: left promiscuous mode [ 799.466798][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.472245][ T13] dummy0: left allmulticast mode [ 799.549528][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.556695][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.560924][ T13] bond0 (unregistering): Released all slaves [ 799.565306][ T13] bond1 (unregistering): Released all slaves [ 799.570759][ T13] bond2 (unregistering): Released all slaves [ 799.659624][ T13] tipc: Left network mode [ 800.087606][ T13] hsr_slave_0: left promiscuous mode [ 800.090355][ T13] hsr_slave_1: left promiscuous mode [ 800.093014][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.096597][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.167071][ T13] team0 (unregistering): Port device team_slave_1 removed [ 800.172444][ T13] team0 (unregistering): Port device team_slave_0 removed