last executing test programs: 2m54.529081686s ago: executing program 2 (id=519): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c) write(r0, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 x00000000ffffff7', 0x32) 2m52.540053174s ago: executing program 2 (id=526): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104fcffffff80000000ffffffe3", @ANYRES32=0x0, @ANYBLOB="03150000000000002c00128009000100626f6e64000000001c00028005000100040000000500160000000000050015"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2m51.431536401s ago: executing program 2 (id=530): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48804}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@multicast, @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0xd, 0x1c, 0x65, 0x0, 0x9, 0x2, 0x0, @rand_addr=0x64010100, @multicast2}, {0x11, 0x1, 0x0, @rand_addr=0x64010102}}}}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) unshare(0x20000400) listen(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) restart_syscall() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400) creat(&(0x7f0000000140)='./file0/file2\x00', 0x14) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') ptrace$setsig(0x4203, r2, 0x7, &(0x7f0000002200)={0x1b, 0xe, 0x605}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4) 2m50.197963911s ago: executing program 2 (id=532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000005000), 0x0, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) 2m44.330551114s ago: executing program 2 (id=540): r0 = fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f00000001c0)=@filename='./cgroup\x00', r5, 0x0) close(r4) connect$unix(r3, &(0x7f0000000140)=@abs, 0x6e) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000d1000c000000000001000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000090e387cb8500000082000000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x0, 0xe, 0x0, &(0x7f0000000800)="40b8ab3aab4700cfd1794ba75a24", 0x0, 0x1, 0x0, 0x0, 0x38, 0x0, &(0x7f00000006c0)="35011cf3a496686e444ad661d04ea6ca452602370c068db75306412f107913906d1ee5b6aadf4905d2f69bf1f61156bd46ea62ec903f0751"}, 0x50) r10 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r10, 0xab00, r11) r12 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r12}}) listen(0xffffffffffffffff, 0x805) listen(r6, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m27.494249325s ago: executing program 32 (id=544): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904"], 0x0) r1 = epoll_create1(0x80000) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x281841d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f00000001c0)=@filename='./cgroup\x00', r5, 0x0) close(r4) connect$unix(r3, &(0x7f0000000140)=@abs, 0x6e) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000d1000c000000000001000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000090e387cb8500000082000000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x0, 0xe, 0x0, &(0x7f0000000800)="40b8ab3aab4700cfd1794ba75a24", 0x0, 0x1, 0x0, 0x0, 0x38, 0x0, &(0x7f00000006c0)="35011cf3a496686e444ad661d04ea6ca452602370c068db75306412f107913906d1ee5b6aadf4905d2f69bf1f61156bd46ea62ec903f0751"}, 0x50) r10 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r10, 0xab00, r11) r12 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r12}}) listen(0xffffffffffffffff, 0x805) listen(r6, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m26.853124123s ago: executing program 5 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x400}) 1m25.435500208s ago: executing program 5 (id=694): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000004000)=0x2, 0x5, 0x1, 0x0, 0x0, 0xa701fffc) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109"], 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x43]}, 0x36) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) clock_gettime(0x0, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c0102030109021200010000000009"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) futex$unlock_pi_list64(0x0, 0x287, 0x2d0a, 0x0, 0x0, 0x5072) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 1m16.703058941s ago: executing program 5 (id=716): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40084) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8410) ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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") write$nci(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(r1, 0x0, 0x0) r3 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x5, 0x85, 0x1, 0x1, {0x3, 0xff, 0x5, 0x8, 0x1fc, 0xd615, 0x9, 0x535, 0xfffffffc, 0x1000, 0x4000000, 0x0, 0x0, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 1m15.032995771s ago: executing program 5 (id=718): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) 1m14.432822276s ago: executing program 5 (id=719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r5, 0x3}, 0x18) 1m13.183340066s ago: executing program 5 (id=721): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) sync() sync() ioprio_set$pid(0x1, 0x0, 0x6000) 58.022007046s ago: executing program 33 (id=721): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) sync() sync() ioprio_set$pid(0x1, 0x0, 0x6000) 16.230646844s ago: executing program 0 (id=852): socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15.006716974s ago: executing program 1 (id=855): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) close(r0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r3, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e1e, 0x3, @empty, 0xfff}, 0x1c, 0x0}}], 0x1, 0x60080004) recvmmsg(r3, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}, 0x25a5}], 0x1, 0x40002142, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 14.564649595s ago: executing program 6 (id=856): r0 = syz_open_dev$loop(&(0x7f0000000040), 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_CPUID(0x1e, r2, 0x0, 0x1011) setpriority(0x2, r2, 0x2) syslog(0x2, &(0x7f0000000300)=""/121, 0x79) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x9) r3 = syz_clone(0x51020500, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00D\r\x00\x00\x00\x00\x00\x00\x00\x00x\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000380)={@private2, 0x800, 0x0, 0x1, 0x2, 0x0, 0x100}, 0x20) recvmmsg(r5, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/25, 0x19) r7 = socket$pptp(0x18, 0x1, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, 0x0, 0x400c090) connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) 13.873356772s ago: executing program 6 (id=857): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f000000c2c0), 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') read$FUSE(r4, &(0x7f00000041c0)={0x2020}, 0x2024) 11.414507332s ago: executing program 0 (id=863): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 11.226276946s ago: executing program 1 (id=864): syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2dd, &(0x7f0000001400)="$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") socket$inet_udp(0x2, 0x2, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @c}}) 10.892467875s ago: executing program 3 (id=866): syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2dd, &(0x7f0000001400)="$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") socket$inet_udp(0x2, 0x2, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 10.610909341s ago: executing program 4 (id=867): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f00000004c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfe, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x2, 0x0, 0x0, 0xfa, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x1, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x20, 0xff}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mknodat$loop(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xc000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) 10.069904354s ago: executing program 6 (id=868): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) openat(0xffffffffffffff9c, 0x0, 0x101c42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 10.024398115s ago: executing program 1 (id=869): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040), &(0x7f0000000440)=0x8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00') r3 = socket$kcm(0x29, 0x2, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1, 0x182, 0x20010000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r6, 0x5411, 0xffffffffffffffff) 9.8483957s ago: executing program 4 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x41b}}}, 0x7) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x70) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) 9.380690852s ago: executing program 3 (id=871): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x9, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0xb7) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 8.888321923s ago: executing program 4 (id=872): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 8.20900366s ago: executing program 4 (id=873): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x40, &(0x7f0000000200)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00001d9000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000d6000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000024000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0) r2 = syz_open_dev$amidi(0x0, 0x2, 0x181) ioctl$MEMREADOOB64(0xffffffffffffffff, 0xc0184d16, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045731, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 8.140810302s ago: executing program 1 (id=874): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) close(r0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r3, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e1e, 0x3, @empty, 0xfff}, 0x1c, 0x0}}], 0x1, 0x60080004) recvmmsg(r3, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}, 0x25a5}], 0x1, 0x40002142, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 7.908715707s ago: executing program 0 (id=875): socket$l2tp6(0xa, 0x2, 0x73) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000800)='/proc/self/net/pfkey\x00', 0x0) setns(0xffffffffffffffff, 0x24020000) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x20042000) setsockopt$packet_int(r0, 0x107, 0x11, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0x0, 0x0) read$eventfd(r5, &(0x7f0000000000), 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r6 = syz_open_procfs(0x0, &(0x7f0000000e40)='mountinfo\x00') mount_setattr(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x0, &(0x7f0000000140)={0x6, 0x8a, 0x0, {r6}}, 0x20) bind$tipc(r6, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={0x0, 0x20e}, &(0x7f00000007c0)=ANY=[], 0x0, 0x0) 7.497348697s ago: executing program 3 (id=876): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) flock(r1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) gettid() timer_create(0x1, 0x0, &(0x7f0000000000)) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_getres(0xffffffffffffffed, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(r2, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f00000029c0)={0x90, 0x0, 0x0, {0x2, 0x1, 0x6, 0x2, 0x1, 0x3, {0x6, 0x2, 0xe7, 0x6, 0xffffffff, 0x7ff, 0x7, 0xfff, 0x7, 0x6000, 0x5, 0x0, r3, 0x2, 0x6153}}}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) flock(r0, 0x5) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000040)=""/38) 7.014488839s ago: executing program 0 (id=877): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1f9) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c) write(r2, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 x00000000ffffff7', 0x32) 6.934974361s ago: executing program 6 (id=878): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f000000c2c0), 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') read$FUSE(r5, &(0x7f00000041c0)={0x2020}, 0x2024) 6.321745866s ago: executing program 3 (id=879): syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2dd, &(0x7f0000001400)="$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") socket$inet_udp(0x2, 0x2, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @c}}) 6.268444237s ago: executing program 0 (id=880): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) mount(0x0, 0x0, 0x0, 0x2002404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0xffffffff, {{}, 0x1, {0x400}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1df) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) 4.825603522s ago: executing program 0 (id=881): syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2dd, &(0x7f0000001400)="$eJzs3U9rE08YwPGnadMmKW1y+PEDBemDXvSytPEVBGlBDCi1KepB2NqNhqxJycZIRKyevHrzPRSP3gTrG+jFm3fxUgTBgz1IV5LNmj+utalNN7XfD5RMZ+bJTHaW8uzSnWzfeHG/mHeMvFmVSEwlJiKyI5KSiHjist4qNWpGZFw6PZULk99c171560omm51fVF3ILF1Mq+r0zNuHj1+dfVedXH49/WZCtlK3t7+kP279v3Vqe3fJf/dy9ZnoSrlcNVdsS1cLTtFQvWZbpmNpoeRYlaqa7fa8XV5bq6tZWp1KrFUsx1GzVNeiVddqWauVupp3zUJJDcPQqYScNKN7NcaDKnMbi4tmpq9BIn1OCkcpcJUrlYw5GtiY2ziKSQEAgOHSm/9HGil9V/7fyPk9v8v/v344c73f/P9ewdGCo6VyV37/a/4fEfL/wWnm/7tBSWM0hNlgABoLWcmYicBLN/J/AAAAAAAAAAAAAAAAAAAAAACOgx3XTbqum/Rf/Z8JEYnJbszr5SbDnicGY+/1F/F/7wgZCXG6OGQdD+7FROzntVwt57167Zm8FMQWS2ajIt+b50OLV164nJ2f1aaUbNrrrfjmQ4ITfrwvFRw/58VrR/x6LReVROf4aUnKf8Hx6Z74qIjUcuNy/lxHvCFJeX9HymLLavO8bsc/mVO9dDXbM3682Q8AAAAAgH+BoT+luq9/vd0kDUP9bUN62r3K9v0BSf7h/oDK5ri048fk9Fh4nxsAAAAAgJPEqT8qmrZtVQ5emFn+q/AhKMSl/6hDOXTHrGC0/h1sz86u6za/MGaf7/wyLtJdI34hIr1NR1b4LCJDcMAP+xz79MBbwP10DvOvEgAAAIBBaCf9Yc8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICTa7+bh/n9D7L3WMdwo+F8SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA4/AgAAP//iQYV8g==") socket$inet_udp(0x2, 0x2, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 4.727959565s ago: executing program 4 (id=882): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40084) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8410) ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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") write$nci(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(r1, 0x0, 0x0) 3.718911839s ago: executing program 3 (id=883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, 0x0, &(0x7f0000000040)='%ps \x00'}, 0x20) write(0xffffffffffffffff, &(0x7f0000000280)='tcp', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='127.0.0.1', 0x9) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') r4 = socket(0x18, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x24, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000f4ff32060000000000000000fc000000000000000000000000000000fc01000008300000000000000000000000000000000000000000000000080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2100000000ac1414aa0000000000000000000000001c0004000200"/296], 0x170}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) 3.718267549s ago: executing program 1 (id=884): socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}], 0x58}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) sendmsg$inet(r4, &(0x7f0000000a40)={&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000440)="bf7c5cdf232d0a521789fc6f21f80f7562c220ce5554eb592dca8d5ec2433c30e7bb042ab27ca3f71d0128bf14874fd4eac8eccb05aed5bba8515a34ec0c84b06a830e50f696670344f42de4143605126a94352a5cbcab2d9aee7d57b030b6a1f3bb9cbbf9cdf7da27654b1553305e41635f7e7695061c473359f4ad63bd59a79c81846ab97755ae0a460a8b09e67e11d55bd77d8157fa1d8a0e71b9042b53a040fa730270049cca70eaf6645f4cf9c196af4488ba47059e081338e49e3129e94cae4e856af0e9109d71ee88069bb4649f02", 0xd2}, {&(0x7f0000000600)="8f1f82f0febd2147c882645a35fdf812147997c3e076a2606526d3bf1cc801a07ad129671884c9356019b8659c90806a71bdc4b93195f792478dfe1ca1958c5557e08272c23bba86fd4adff03fec11b2b5cb7e1e475472c5fd742654e045a9ac2c386138d8ec067fb27b6c6a611f44feb4e020d3e862107d6125df1256adda", 0x7f}, {&(0x7f0000000700)="ac", 0x1}, {0x0}, {&(0x7f00000007c0)="84845a80019ed9d0833dc6ad54f875c027c1f1489e46711837dbec4f0f150ddf6c127a007075d5a8beb11f6d81850f8dc90eb4be5b57b85431bf25dfb006d86378baf15bcf5d29709cd76e7e384742e3f8826787103432ef35f6babe16cbd163b416", 0x62}], 0x5, &(0x7f00000008c0)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x98, 0x0, 0x7, {[@generic={0x44, 0x12, "7100cbaa60c489b3f1f37fe061207520"}, @lsrr={0x83, 0x13, 0xfd, [@multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x33}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @noop, @lsrr={0x83, 0xf, 0x7, [@loopback, @dev={0xac, 0x14, 0x14, 0x1e}, @private=0xa010101]}, @timestamp_prespec={0x44, 0x24, 0xf0, 0x3, 0x7, [{@loopback, 0xc24}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x20bb}]}, @timestamp={0x44, 0x18, 0x2f, 0x0, 0x0, [0x7, 0x5, 0xc8, 0x5, 0x1]}, @timestamp_prespec={0x44, 0xc, 0xbe, 0x3, 0x6, [{@private=0xa010102, 0x5}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}], 0x128}, 0x40) 2.330917823s ago: executing program 1 (id=885): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 2.288107594s ago: executing program 4 (id=886): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @remote, 0x3}, 0x1c) r0 = syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff00070582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.112351999s ago: executing program 6 (id=887): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000280)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x400, 0x4, 0x2, 0xfffffffe, 0x0, 0x0, 0x8}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) r3 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/fail_page_alloc/probability\x00', 0x1, 0x0) write$fault_inject(r3, &(0x7f0000000340)='N\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) 328.751212ms ago: executing program 3 (id=888): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) openat(0xffffffffffffff9c, 0x0, 0x101c42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) 0s ago: executing program 6 (id=889): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) flock(r1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) gettid() timer_create(0x1, 0x0, &(0x7f0000000000)) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_getres(0xffffffffffffffed, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(r2, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f00000029c0)={0x90, 0x0, 0x0, {0x2, 0x1, 0x6, 0x2, 0x1, 0x3, {0x6, 0x2, 0xe7, 0x6, 0xffffffff, 0x7ff, 0x7, 0xfff, 0x7, 0x6000, 0x5, 0x0, r3, 0x2, 0x6153}}}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) flock(r0, 0x5) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000040)=""/38) kernel console output (not intermixed with test programs): lback for: / [ 182.609377][ T4227] usb 3-1: Using ep0 maxpacket: 32 [ 183.149071][ T26] audit: type=1800 audit(1788585295.762:51): pid=5378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.298" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 183.229472][ T4227] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 183.237135][ T4227] usb 3-1: can't read configurations, error -61 [ 183.320821][ T4227] usb usb3-port1: attempt power cycle [ 183.440399][ T5432] device syzkaller0 entered promiscuous mode [ 183.759097][ T4227] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 183.860447][ T4227] usb 3-1: Using ep0 maxpacket: 32 [ 184.020164][ T4227] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 184.028879][ T4227] usb 3-1: can't read configurations, error -61 [ 184.189377][ T4227] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 184.309635][ T4227] usb 3-1: Using ep0 maxpacket: 32 [ 184.339316][ T4480] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 185.289371][ T4227] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 185.299725][ T4227] usb 3-1: can't read configurations, error -71 [ 185.361535][ T4227] usb usb3-port1: unable to enumerate USB device [ 185.405492][ T26] audit: type=1800 audit(1788585298.032:52): pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.318" name="idProduct" dev="configfs" ino=60046 res=0 errno=0 [ 185.472020][ T26] audit: type=1800 audit(1788585298.052:53): pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.318" name="max_speed" dev="configfs" ino=60048 res=0 errno=0 [ 185.493280][ T4480] usb 1-1: Using ep0 maxpacket: 32 [ 185.619422][ T4480] usb 1-1: config 1 interface 0 has no altsetting 0 [ 185.810655][ T4480] usb 1-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 185.833631][ T4480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.856553][ T5470] device syzkaller0 entered promiscuous mode [ 185.879420][ T4480] usb 1-1: Product: syz [ 185.889690][ T4480] usb 1-1: Manufacturer: syz [ 185.894420][ T4480] usb 1-1: SerialNumber: syz [ 186.552228][ T4480] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input9 [ 186.609252][ T3543] bcm5974 1-1:1.0: could not read from device [ 186.610694][ T5472] netdevsim netdevsim4: loading /lib/firmware// failed with error -22 [ 186.625628][ T5472] netdevsim netdevsim4: Direct firmware load for / failed with error -22 [ 186.634127][ T5472] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 186.659278][ T3543] bcm5974 1-1:1.0: could not read from device [ 186.765585][ T4480] usb 1-1: USB disconnect, device number 22 [ 186.771860][ T3543] bcm5974 1-1:1.0: could not read from device [ 187.870980][ T5494] loop0: detected capacity change from 0 to 4096 [ 187.940145][ T5494] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 187.970383][ T5494] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0002] [ 187.989118][ T5494] System zones: 0-5 [ 188.019637][ T5494] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,journal_ioprio=0x0000000000000004,noload,init_itable=0x000000000a2a41b4,nodiscard,jqfmt=vfsv1,debug,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 188.042160][ T5477] loop4: detected capacity change from 0 to 32768 [ 188.239218][ T4480] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 188.270179][ T5477] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.324 (5477) [ 188.330973][ T5477] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 188.349158][ T5477] BTRFS info (device loop4): use zlib compression, level 3 [ 188.356438][ T5477] BTRFS info (device loop4): turning on sync discard [ 188.369425][ T5477] BTRFS info (device loop4): using free space tree [ 188.409295][ T5477] BTRFS info (device loop4): has skinny extents [ 188.906258][ T5477] BTRFS info (device loop4): enabling ssd optimizations [ 189.010771][ T26] audit: type=1800 audit(1788585301.582:54): pid=5477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.324" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 190.291533][ T5532] netdevsim netdevsim4: loading /lib/firmware// failed with error -22 [ 190.299969][ T5532] netdevsim netdevsim4: Direct firmware load for / failed with error -22 [ 190.309150][ T5532] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 190.846097][ T5534] binder: BINDER_SET_CONTEXT_MGR already set [ 190.950502][ T5534] binder: 5533:5534 ioctl 4018620d 200000004a80 returned -16 [ 191.045968][ T5539] loop4: detected capacity change from 0 to 512 [ 191.069149][ T4480] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 191.079543][ T4480] usb 3-1: can't read configurations, error -71 [ 191.093636][ T5537] device syzkaller0 entered promiscuous mode [ 191.103413][ T5539] EXT4-fs (loop4): Ignoring removed bh option [ 191.315654][ T5539] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.337: corrupted in-inode xattr [ 191.379697][ T4487] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 191.390577][ T5539] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.337: couldn't read orphan inode 15 (err -117) [ 191.457915][ T5539] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000002,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 191.659136][ T4487] usb 4-1: Using ep0 maxpacket: 32 [ 192.099227][ T4436] Bluetooth: hci0: command 0x0406 tx timeout [ 192.106816][ T4436] Bluetooth: hci3: command 0x0406 tx timeout [ 192.113172][ T4436] Bluetooth: hci4: command 0x0406 tx timeout [ 192.122024][ T4436] Bluetooth: hci1: command 0x0406 tx timeout [ 192.128219][ T4436] Bluetooth: hci2: command 0x0406 tx timeout [ 192.296063][ T4487] usb 4-1: config 1 interface 0 has no altsetting 0 [ 193.679247][ T4487] usb 4-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 193.724696][ T4487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.733047][ T4487] usb 4-1: Product: syz [ 193.737254][ T4487] usb 4-1: Manufacturer: syz [ 193.747830][ T4487] usb 4-1: SerialNumber: syz [ 193.809358][ T4487] usb 4-1: can't set config #1, error -71 [ 193.829561][ T4487] usb 4-1: USB disconnect, device number 8 [ 193.999496][ T5560] loop3: detected capacity change from 0 to 4096 [ 194.029351][ T5560] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 194.110044][ T5560] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0002] [ 194.123623][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.139523][ T5560] System zones: 0-5 [ 194.147627][ T5560] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,journal_ioprio=0x0000000000000004,noload,init_itable=0x000000000a2a41b4,nodiscard,jqfmt=vfsv1,debug,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 194.195052][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.201443][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.213191][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.224404][ T5566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.234429][ T5566] device bridge_slave_0 left promiscuous mode [ 194.241364][ T5566] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.334527][ T5566] device bridge_slave_1 left promiscuous mode [ 194.349606][ T5566] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.433892][ T5566] bond0: (slave bond_slave_0): Releasing backup interface [ 194.471792][ T5566] bond0: (slave bond_slave_1): Releasing backup interface [ 195.643581][ T5566] team0: Port device team_slave_0 removed [ 195.791164][ T5566] team0: Port device team_slave_1 removed [ 195.825565][ T5566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.874099][ T5566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.911118][ T5566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.951859][ T5566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.619375][ T5583] device syzkaller0 entered promiscuous mode [ 196.629224][ T4436] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 196.685367][ T5568] team0: Port device xfrm0 added [ 196.716034][ T5569] tipc: Started in network mode [ 196.721033][ T5569] tipc: Node identity 421f8936f6f1, cluster identity 4711 [ 196.728329][ T5569] tipc: Enabled bearer , priority 0 [ 196.999378][ T4436] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.009916][ T4436] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.174041][ T4436] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 197.192354][ T4436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.237754][ T4436] usb 2-1: Product: syz [ 197.252488][ T4436] usb 2-1: Manufacturer: syz [ 197.257157][ T4436] usb 2-1: SerialNumber: syz [ 197.281196][ T4436] usb 2-1: config 0 descriptor?? [ 197.311962][ T5600] device syzkaller0 entered promiscuous mode [ 197.341194][ T4436] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 197.361508][ T4436] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.390205][ T4436] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 197.398879][ T4436] usb 2-1: media controller created [ 197.427622][ T4436] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.495504][ T4436] DVB: Unable to find symbol tda10046_attach() [ 197.502476][ T4436] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 197.511253][ T4436] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 197.720284][ T4480] tipc: Node number set to 3035531574 [ 197.999323][ T4436] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71 [ 198.048206][ T4436] usb 2-1: USB disconnect, device number 8 [ 198.105677][ T4487] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 198.534740][ T4487] usb 5-1: Using ep0 maxpacket: 32 [ 198.689415][ T4487] usb 5-1: config 1 interface 0 has no altsetting 0 [ 198.813589][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 198.823326][ T5619] tipc: Resetting bearer [ 198.832295][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.841835][ T5619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.849393][ T4436] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 198.905736][ T4487] usb 5-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 198.916642][ T4487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.931057][ T4487] usb 5-1: Product: syz [ 198.942982][ T4487] usb 5-1: Manufacturer: syz [ 198.947637][ T4487] usb 5-1: SerialNumber: syz [ 198.980015][ T5620] team0: Port device xfrm0 added [ 198.985736][ T5619] tipc: Enabling of bearer rejected, already enabled [ 199.075971][ T5622] loop0: detected capacity change from 0 to 4096 [ 199.103177][ T5624] device syzkaller0 entered promiscuous mode [ 199.131955][ T5622] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 199.157707][ T5622] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0002] [ 199.169793][ T4436] usb 2-1: Using ep0 maxpacket: 8 [ 199.184934][ T5622] System zones: 0-5 [ 199.197395][ T5622] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,journal_ioprio=0x0000000000000004,noload,init_itable=0x000000000a2a41b4,nodiscard,jqfmt=vfsv1,debug,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 199.319137][ T4487] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input10 [ 199.374948][ T4487] usb 5-1: USB disconnect, device number 5 [ 199.381334][ T3543] bcm5974 5-1:1.0: could not read from device [ 199.452654][ T3543] bcm5974 5-1:1.0: could not read from device [ 199.459319][ T4436] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.474734][ T4436] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 200.932033][ T4436] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 200.943298][ T5632] loop3: detected capacity change from 0 to 4096 [ 200.955774][ T4436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.968849][ T5634] device syzkaller0 entered promiscuous mode [ 200.972552][ T4436] usb 2-1: Product: syz [ 200.979805][ T4436] usb 2-1: Manufacturer: syz [ 200.984435][ T4436] usb 2-1: SerialNumber: syz [ 201.017101][ T4436] usb 2-1: config 0 descriptor?? [ 201.037326][ T5632] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 201.257915][ T5632] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0002] [ 201.295409][ T5632] System zones: 0-5 [ 201.540807][ T5645] loop0: detected capacity change from 0 to 32768 [ 201.583638][ T5632] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,journal_ioprio=0x0000000000000004,noload,init_itable=0x000000000a2a41b4,nodiscard,jqfmt=vfsv1,debug,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 201.660927][ T4487] usb 2-1: USB disconnect, device number 9 [ 201.673713][ T5645] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.367 (5645) [ 202.121952][ T5645] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 202.130997][ T5645] BTRFS info (device loop0): use zlib compression, level 3 [ 202.138253][ T5645] BTRFS info (device loop0): turning on sync discard [ 202.145092][ T5645] BTRFS info (device loop0): using free space tree [ 202.151688][ T5645] BTRFS info (device loop0): has skinny extents [ 202.728912][ T5645] BTRFS info (device loop0): enabling ssd optimizations [ 203.663594][ T26] audit: type=1800 audit(1788585316.122:55): pid=5674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.367" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 204.339067][ T1108] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 204.700512][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.720283][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 204.765115][ T4179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (4179) [ 204.889280][ T1108] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 204.898395][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.947491][ T1108] usb 2-1: Product: syz [ 204.953166][ T1108] usb 2-1: Manufacturer: syz [ 204.978402][ T1108] usb 2-1: SerialNumber: syz [ 205.001197][ T1108] usb 2-1: config 0 descriptor?? [ 205.042470][ T1108] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 205.253241][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 205.476671][ T1108] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 205.486080][ T1108] usb 2-1: media controller created [ 205.504549][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.704447][ T1108] DVB: Unable to find symbol tda10046_attach() [ 205.717605][ T1108] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 205.754562][ T1108] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 205.861825][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.917714][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.947851][ T5696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.079551][ T1108] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71 [ 206.096322][ T5696] team0: Port device xfrm0 removed [ 206.104068][ T5704] MTRR 1 not used [ 206.146361][ T5698] team0: Port device xfrm0 added [ 206.156549][ T5703] tipc: Enabling of bearer rejected, already enabled [ 206.218538][ T1108] usb 2-1: USB disconnect, device number 10 [ 206.268496][ T5698] syz.3.376 (5698) used greatest stack depth: 21040 bytes left [ 206.410194][ T5710] loop0: detected capacity change from 0 to 4096 [ 206.420767][ T26] audit: type=1800 audit(1788585319.042:56): pid=5712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.380" name="idProduct" dev="configfs" ino=61220 res=0 errno=0 [ 206.457724][ T5710] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 206.502619][ T5710] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0002] [ 206.504066][ T26] audit: type=1800 audit(1788585319.042:57): pid=5712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.380" name="max_speed" dev="configfs" ino=61221 res=0 errno=0 [ 206.539222][ T5710] System zones: 0-5 [ 206.586678][ T5710] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,journal_ioprio=0x0000000000000004,noload,init_itable=0x000000000a2a41b4,nodiscard,jqfmt=vfsv1,debug,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 206.811347][ T5717] device syzkaller0 entered promiscuous mode [ 207.501279][ T5528] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 207.739160][ T5528] usb 5-1: Using ep0 maxpacket: 32 [ 207.859367][ T5528] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.886831][ T5528] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.917060][ T5528] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 207.965851][ T5528] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.989112][ T1108] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 208.030142][ T5528] usb 5-1: config 0 descriptor?? [ 208.070966][ T5528] hub 5-1:0.0: USB hub found [ 208.239048][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 208.289266][ T5528] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 208.359437][ T1108] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 208.384317][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 208.415446][ T1108] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.439843][ T5719] loop1: detected capacity change from 0 to 32768 [ 208.639337][ T1108] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 208.679108][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.723500][ T5528] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 208.741744][ T1108] usb 4-1: Product: syz [ 208.758441][ T1108] usb 4-1: Manufacturer: syz [ 208.787021][ T1108] usb 4-1: SerialNumber: syz [ 208.841118][ T5528] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 208.865674][ T1108] usb 4-1: config 0 descriptor?? [ 208.987939][ T5528] usb 5-1: USB disconnect, device number 6 [ 209.133989][ T5725] udc-core: couldn't find an available UDC or it's busy [ 209.169883][ T5725] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 209.241514][ T5731] fido_id[5731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 209.263564][ T5725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.384'. [ 209.306243][ T4488] usb 4-1: USB disconnect, device number 9 [ 210.443494][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 210.497908][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.554136][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.716363][ T5742] team0: Port device xfrm0 removed [ 210.794171][ T26] audit: type=1800 audit(1788585323.412:58): pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.391" name="idProduct" dev="configfs" ino=60370 res=0 errno=0 [ 210.975626][ T26] audit: type=1800 audit(1788585323.432:59): pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.391" name="max_speed" dev="configfs" ino=60371 res=0 errno=0 [ 211.063845][ T5743] team0: Port device xfrm0 added [ 211.097531][ T5744] tipc: Enabling of bearer rejected, already enabled [ 211.539307][ T4438] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 211.609148][ T5761] device syzkaller0 entered promiscuous mode [ 211.669233][ T4488] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 213.099054][ T4488] usb 3-1: Using ep0 maxpacket: 32 [ 213.107755][ T5767] loop0: detected capacity change from 0 to 512 [ 213.119173][ T4438] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.151555][ T4438] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.349553][ T4438] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 213.394649][ T4438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.409177][ T4488] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.433206][ T4438] usb 2-1: Product: syz [ 213.447910][ T4438] usb 2-1: Manufacturer: syz [ 213.458073][ T4438] usb 2-1: SerialNumber: syz [ 213.518407][ T4438] usb 2-1: config 0 descriptor?? [ 213.582463][ T4438] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 213.626873][ T4438] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.679519][ T4438] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 213.699115][ T4438] usb 2-1: media controller created [ 213.760267][ T4438] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.876284][ T4488] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.070735][ T4438] DVB: Unable to find symbol tda10046_attach() [ 214.076961][ T4438] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 214.116397][ T4438] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 214.169281][ T4488] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 214.188819][ T4488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.209039][ T4488] usb 3-1: Product: syz [ 214.224943][ T4488] usb 3-1: Manufacturer: syz [ 214.229771][ T4488] usb 3-1: SerialNumber: syz [ 214.299250][ T4488] usb 3-1: can't set config #1, error -71 [ 214.313964][ T4488] usb 3-1: USB disconnect, device number 19 [ 214.429194][ T4438] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71 [ 214.450568][ T4438] usb 2-1: USB disconnect, device number 11 [ 214.489660][ T5779] loop4: detected capacity change from 0 to 32768 [ 214.806911][ T26] audit: type=1800 audit(1788585327.422:60): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.405" name="idProduct" dev="configfs" ino=61334 res=0 errno=0 [ 214.842622][ T26] audit: type=1800 audit(1788585327.462:61): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.405" name="max_speed" dev="configfs" ino=61335 res=0 errno=0 [ 215.172637][ T5799] device syzkaller0 entered promiscuous mode [ 215.409268][ T4639] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 215.494870][ T5809] loop4: detected capacity change from 0 to 512 [ 216.109317][ T4639] usb 2-1: Using ep0 maxpacket: 16 [ 216.299604][ T4639] usb 2-1: unable to get BOS descriptor or descriptor too short [ 216.645143][ T4639] usb 2-1: config 206 has an invalid interface number: 167 but max is 0 [ 216.654150][ T4488] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 216.662119][ T4639] usb 2-1: config 206 has no interface number 0 [ 216.668425][ T4639] usb 2-1: config 206 interface 167 altsetting 2 endpoint 0x6 has an invalid bInterval 32, changing to 9 [ 216.683140][ T4639] usb 2-1: config 206 interface 167 has no altsetting 0 [ 216.720646][ T26] audit: type=1800 audit(1788585329.342:62): pid=5825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.416" name="idProduct" dev="configfs" ino=61374 res=0 errno=0 [ 216.748943][ T26] audit: type=1800 audit(1788585329.342:63): pid=5825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.416" name="max_speed" dev="configfs" ino=61375 res=0 errno=0 [ 217.588307][ T5832] device syzkaller0 entered promiscuous mode [ 217.615016][ T4639] usb 2-1: New USB device found, idVendor=06f8, idProduct=0003, bcdDevice=9d.cb [ 217.626925][ T4639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.639188][ T4488] usb 3-1: Using ep0 maxpacket: 32 [ 217.647291][ T4639] usb 2-1: Product: syz [ 217.654842][ T4639] usb 2-1: Manufacturer: syz [ 217.663715][ T4639] usb 2-1: SerialNumber: syz [ 217.779380][ T4488] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.799037][ T4488] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.993250][ T4488] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 218.002582][ T4639] usb 2-1: USB disconnect, device number 12 [ 218.019319][ T4488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.027393][ T4488] usb 3-1: Product: syz [ 218.040266][ T4488] usb 3-1: Manufacturer: syz [ 218.049248][ T4488] usb 3-1: SerialNumber: syz [ 218.069123][ T4230] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 218.439388][ T4230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.450176][ T4230] usb 4-1: config 0 interface 0 has no altsetting 0 [ 218.508684][ T5845] device syzkaller0 entered promiscuous mode [ 218.543332][ T4488] usb 3-1: USB disconnect, device number 20 [ 218.620989][ T4230] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 218.645327][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.654994][ T4230] usb 4-1: Product: syz [ 218.660324][ T4230] usb 4-1: Manufacturer: syz [ 218.665504][ T4230] usb 4-1: SerialNumber: syz [ 218.675089][ T4230] usb 4-1: config 0 descriptor?? [ 218.727462][ T4230] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 218.806345][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.834613][ T4230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 218.937646][ T4230] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 219.044494][ T4230] usb 4-1: media controller created [ 219.577051][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.310480][ T4230] DVB: Unable to find symbol tda10046_attach() [ 221.317195][ T4230] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 221.326366][ T4230] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 221.351884][ T5869] fuse: Bad value for 'fd' [ 221.359714][ T4230] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71 [ 221.372080][ T26] audit: type=1800 audit(1788585333.992:64): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.428" name="idProduct" dev="configfs" ino=62467 res=0 errno=0 [ 221.471555][ T4230] usb 4-1: USB disconnect, device number 10 [ 221.548788][ T26] audit: type=1800 audit(1788585334.022:65): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.428" name="max_speed" dev="configfs" ino=62471 res=0 errno=0 [ 222.381149][ T5877] netdevsim netdevsim4: loading /lib/firmware// failed with error -22 [ 222.389587][ T5877] netdevsim netdevsim4: Direct firmware load for / failed with error -22 [ 222.398103][ T5877] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 223.829488][ T5883] loop3: detected capacity change from 0 to 512 [ 223.959386][ T5883] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 223.993069][ T5884] device syzkaller0 entered promiscuous mode [ 224.419311][ T26] audit: type=1326 audit(1788585336.792:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.4.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6496959159 code=0x7ffc0000 [ 224.897119][ T26] audit: type=1326 audit(1788585336.792:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.4.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6496959159 code=0x7ffc0000 [ 225.049700][ T5893] MTRR 1 not used [ 225.105605][ T26] audit: type=1326 audit(1788585336.802:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.4.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f6496959159 code=0x7ffc0000 [ 225.320326][ T26] audit: type=1326 audit(1788585336.802:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.4.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6496959159 code=0x7ffc0000 [ 225.397210][ T26] audit: type=1326 audit(1788585336.802:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5885 comm="syz.4.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6496959159 code=0x7ffc0000 [ 226.330382][ T26] audit: type=1800 audit(1788585338.952:71): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.440" name="idProduct" dev="configfs" ino=62526 res=0 errno=0 [ 226.379058][ T4230] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 226.457065][ T26] audit: type=1800 audit(1788585338.992:72): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.440" name="max_speed" dev="configfs" ino=62527 res=0 errno=0 [ 226.820297][ T4230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.883485][ T4230] usb 2-1: config 0 interface 0 has no altsetting 0 [ 227.089736][ T4230] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 227.131052][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.158451][ T4230] usb 2-1: Product: syz [ 227.204438][ T4230] usb 2-1: Manufacturer: syz [ 227.235959][ T4230] usb 2-1: SerialNumber: syz [ 227.272441][ T4230] usb 2-1: config 0 descriptor?? [ 227.344915][ T4230] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 227.419622][ T4230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.499336][ T4230] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 227.548776][ T4230] usb 2-1: media controller created [ 227.817168][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.640002][ T26] audit: type=1326 audit(1788585340.742:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5929 comm="syz.0.446" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21ff7a159 code=0x7ffc0000 [ 228.678921][ T26] audit: type=1326 audit(1788585340.752:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5929 comm="syz.0.446" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21ff7a159 code=0x7ffc0000 [ 229.074161][ T26] audit: type=1326 audit(1788585340.752:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5929 comm="syz.0.446" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fd21ff7a159 code=0x7ffc0000 [ 229.423770][ T4230] DVB: Unable to find symbol tda10046_attach() [ 230.185901][ T4230] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 230.197007][ T4230] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 230.289116][ T4230] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71 [ 230.374307][ T4230] usb 2-1: USB disconnect, device number 13 [ 230.393500][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 230.393517][ T26] audit: type=1800 audit(1788585343.012:78): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.452" name="idProduct" dev="configfs" ino=62594 res=0 errno=0 [ 230.518012][ T5953] MTRR 1 not used [ 230.553257][ T26] audit: type=1800 audit(1788585343.052:79): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.452" name="max_speed" dev="configfs" ino=62596 res=0 errno=0 [ 230.871932][ T5952] loop1: detected capacity change from 0 to 4096 [ 230.925671][ T5952] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 230.998847][ T5952] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0002] [ 231.080522][ T5952] System zones: 0-5 [ 231.301140][ T5952] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,journal_ioprio=0x0000000000000004,noload,init_itable=0x000000000a2a41b4,nodiscard,jqfmt=vfsv1,debug,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 232.164044][ T5966] loop2: detected capacity change from 0 to 32768 [ 234.324312][ T4485] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 234.464105][ T5980] loop2: detected capacity change from 0 to 512 [ 234.878353][ T26] audit: type=1326 audit(1788585347.482:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.0.459" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21ff7a159 code=0x7ffc0000 [ 234.939469][ T4485] usb 5-1: device descriptor read/64, error -71 [ 235.418170][ T4485] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 235.479473][ T26] audit: type=1326 audit(1788585347.482:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.0.459" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21ff7a159 code=0x7ffc0000 [ 235.832242][ T26] audit: type=1326 audit(1788585347.482:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.0.459" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fd21ff7a159 code=0x7ffc0000 [ 235.913378][ T26] audit: type=1326 audit(1788585347.482:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.0.459" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21ff7a159 code=0x7ffc0000 [ 236.044517][ T4485] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.225602][ T26] audit: type=1326 audit(1788585347.482:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.0.459" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21ff7a159 code=0x7ffc0000 [ 236.281292][ T4485] usb 5-1: config 0 interface 0 has no altsetting 0 [ 236.585039][ T26] audit: type=1800 audit(1788585349.202:85): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.463" name="idProduct" dev="configfs" ino=61664 res=0 errno=0 [ 236.665544][ T26] audit: type=1800 audit(1788585349.232:86): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.463" name="max_speed" dev="configfs" ino=61665 res=0 errno=0 [ 236.833640][ T4485] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 236.855510][ T4485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.919036][ T4485] usb 5-1: Product: syz [ 236.954473][ T4485] usb 5-1: Manufacturer: syz [ 236.980483][ T4485] usb 5-1: SerialNumber: syz [ 237.060235][ T4485] usb 5-1: config 0 descriptor?? [ 237.136979][ T4485] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 237.155492][ T4485] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 237.209534][ T4485] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 237.227661][ T4485] usb 5-1: media controller created [ 237.271847][ T4485] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.430626][ T4485] DVB: Unable to find symbol tda10046_attach() [ 237.438144][ T4485] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 237.462509][ T4485] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 237.632639][ T6008] loop0: detected capacity change from 0 to 512 [ 237.657308][ T6010] device syzkaller0 entered promiscuous mode [ 237.689126][ T6008] EXT4-fs (loop0): Ignoring removed bh option [ 237.761334][ T6008] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.465: corrupted in-inode xattr [ 237.794516][ T6008] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.465: couldn't read orphan inode 15 (err -117) [ 237.853052][ T6008] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000002,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 237.891122][ T6014] loop3: detected capacity change from 0 to 4096 [ 237.909155][ T4485] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 237.926877][ T4485] usb 5-1: USB disconnect, device number 9 [ 237.958567][ T6014] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 237.968458][ T4639] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 237.999335][ T6014] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0002] [ 238.019454][ T6014] System zones: 0-5 [ 238.097008][ T6014] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,journal_ioprio=0x0000000000000004,noload,init_itable=0x000000000a2a41b4,nodiscard,jqfmt=vfsv1,debug,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 239.621781][ T6020] loop2: detected capacity change from 0 to 32768 [ 239.639079][ T4639] usb 2-1: config index 0 descriptor too short (expected 75, got 18) [ 239.647219][ T4639] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.651222][ T4639] usb 2-1: config 0 has no interfaces? [ 241.409179][ T4639] usb 2-1: string descriptor 0 read error: -71 [ 241.415476][ T4639] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 241.426554][ T4639] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 241.531174][ T4639] usb 2-1: config 0 descriptor?? [ 241.559139][ T4639] usb 2-1: can't set config #0, error -71 [ 241.589901][ T4639] usb 2-1: USB disconnect, device number 14 [ 242.155109][ T6030] loop1: detected capacity change from 0 to 512 [ 243.866045][ T6058] loop0: detected capacity change from 0 to 512 [ 243.951478][ T6058] EXT4-fs (loop0): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 244.306225][ T6067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.481'. [ 245.145173][ T6078] binder: BINDER_SET_CONTEXT_MGR already set [ 245.219968][ T6078] binder: 6077:6078 ioctl 4018620d 200000004a80 returned -16 [ 245.307579][ T6085] loop4: detected capacity change from 0 to 512 [ 245.944161][ T6092] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 246.814433][ T6094] MTRR 1 not used [ 248.216467][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.225588][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.233100][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.183020][ T6114] loop1: detected capacity change from 0 to 512 [ 250.605667][ T6122] MTRR 1 not used [ 250.689144][ T4485] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 250.800182][ T6125] device syzkaller0 entered promiscuous mode [ 251.619025][ T4485] usb 2-1: Using ep0 maxpacket: 32 [ 251.859321][ T4485] usb 2-1: config 1 interface 0 has no altsetting 0 [ 252.059333][ T4485] usb 2-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 252.073047][ T4485] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.089075][ T4485] usb 2-1: Product: syz [ 252.099900][ T4485] usb 2-1: Manufacturer: syz [ 252.109690][ T4485] usb 2-1: SerialNumber: syz [ 253.642946][ T26] audit: type=1326 audit(1788585365.042:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.494" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b753a159 code=0x7ffc0000 [ 253.851293][ T26] audit: type=1326 audit(1788585365.042:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.494" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b753a159 code=0x7ffc0000 [ 253.886360][ T26] audit: type=1326 audit(1788585365.052:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.494" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fa8b753a159 code=0x7ffc0000 [ 253.935453][ T6149] device syzkaller0 entered promiscuous mode [ 253.944436][ T4485] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input11 [ 253.958833][ T6152] loop4: detected capacity change from 0 to 512 [ 253.964182][ T26] audit: type=1326 audit(1788585365.052:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.494" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b753a159 code=0x7ffc0000 [ 254.019168][ T3543] bcm5974 2-1:1.0: could not read from device [ 254.047804][ T26] audit: type=1326 audit(1788585365.052:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.494" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b753a159 code=0x7ffc0000 [ 254.089236][ T4485] usb 2-1: USB disconnect, device number 15 [ 255.621942][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.628290][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.748838][ T6169] loop1: detected capacity change from 0 to 512 [ 255.978283][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 256.025738][ T6169] EXT4-fs (loop1): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 258.368219][ T26] audit: type=1326 audit(1788585370.982:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.520" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b753a159 code=0x7ffc0000 [ 258.429022][ T26] audit: type=1326 audit(1788585370.982:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.520" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b753a159 code=0x7ffc0000 [ 258.523438][ T26] audit: type=1326 audit(1788585371.012:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.520" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fa8b753a159 code=0x7ffc0000 [ 258.578365][ T26] audit: type=1326 audit(1788585371.012:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.520" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b753a159 code=0x7ffc0000 [ 258.603478][ T6191] device syzkaller0 entered promiscuous mode [ 258.669344][ T26] audit: type=1326 audit(1788585371.012:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.3.520" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b753a159 code=0x7ffc0000 [ 259.165874][ T6195] netdevsim netdevsim3: loading /lib/firmware// failed with error -22 [ 259.174591][ T6195] netdevsim netdevsim3: Direct firmware load for / failed with error -22 [ 259.183519][ T6195] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 259.972270][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.130918][ T6199] crypto_alloc_aead failed rc=-4 [ 260.359589][ T4436] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 260.850842][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.858389][ T6202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.980590][ T6202] team0: Port device xfrm0 removed [ 261.039120][ T4436] usb 1-1: Using ep0 maxpacket: 32 [ 261.094664][ T6208] team0: Port device xfrm0 added [ 261.103608][ T6219] tipc: Enabling of bearer rejected, already enabled [ 261.183824][ T4436] usb 1-1: config 1 interface 0 has no altsetting 0 [ 262.485226][ T6250] Trying to write to read-only block-device nullb0 [ 262.493190][ T6250] Trying to write to read-only block-device nullb0 [ 262.499903][ T6250] Trying to write to read-only block-device nullb0 [ 262.506553][ T6250] Trying to write to read-only block-device nullb0 [ 262.513246][ T6250] Trying to write to read-only block-device nullb0 [ 262.519897][ T6250] Trying to write to read-only block-device nullb0 [ 262.526531][ T6250] Trying to write to read-only block-device nullb0 [ 262.533178][ T6250] Trying to write to read-only block-device nullb0 [ 262.539840][ T6250] Trying to write to read-only block-device nullb0 [ 262.546463][ T6250] Trying to write to read-only block-device nullb0 [ 262.634235][ T6256] loop3: detected capacity change from 0 to 512 [ 262.644498][ T4436] usb 1-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 262.659321][ T4436] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.667527][ T4436] usb 1-1: Product: syz [ 262.672825][ T4436] usb 1-1: Manufacturer: syz [ 262.677803][ T4436] usb 1-1: SerialNumber: syz [ 262.710756][ T6256] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 263.106082][ T6262] netdevsim netdevsim4: loading /lib/firmware// failed with error -22 [ 263.114922][ T6262] netdevsim netdevsim4: Direct firmware load for / failed with error -22 [ 263.123539][ T6262] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 264.246592][ T6269] loop3: detected capacity change from 0 to 512 [ 264.599727][ T4436] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input12 [ 264.659778][ T3543] bcm5974 1-1:1.0: could not read from device [ 265.716769][ T4436] usb 1-1: USB disconnect, device number 23 [ 267.639287][ T4230] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 267.673748][ T6277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.683497][ T6277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.691120][ T6277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.700835][ T6277] device bridge_slave_0 left promiscuous mode [ 267.707118][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.727523][ T6277] device bridge_slave_1 left promiscuous mode [ 267.755644][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.786301][ T6277] bond0: (slave bond_slave_0): Releasing backup interface [ 267.836344][ T6277] bond0: (slave bond_slave_1): Releasing backup interface [ 267.903929][ T4230] usb 1-1: Using ep0 maxpacket: 8 [ 267.938579][ T6277] team0: Port device team_slave_0 removed [ 267.986455][ T6277] team0: Port device team_slave_1 removed [ 267.997384][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.018916][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.064399][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.074829][ T4230] usb 1-1: unable to get BOS descriptor or descriptor too short [ 268.105224][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.171797][ T4230] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 179, changing to 7 [ 268.183697][ T26] audit: type=1326 audit(1788585380.792:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.2.532" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c2a77159 code=0x7ffc0000 [ 268.312515][ T6278] team0: Port device xfrm0 added [ 268.325256][ T6279] tipc: Started in network mode [ 268.332302][ T6279] tipc: Node identity 06c9f1d1cbaf, cluster identity 4711 [ 268.358055][ T6279] tipc: Enabled bearer , priority 0 [ 268.382770][ T26] audit: type=1326 audit(1788585380.792:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.2.532" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c2a77159 code=0x7ffc0000 [ 268.477375][ T26] audit: type=1326 audit(1788585380.802:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.2.532" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f78c2a77159 code=0x7ffc0000 [ 268.529355][ T4230] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 268.595584][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.604539][ T26] audit: type=1326 audit(1788585380.802:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.2.532" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c2a77159 code=0x7ffc0000 [ 268.619539][ T4230] usb 1-1: Product: syz [ 269.108782][ T26] audit: type=1326 audit(1788585380.802:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.2.532" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78c2a77159 code=0x7ffc0000 [ 269.192810][ T4230] usb 1-1: can't set config #1, error -71 [ 269.229927][ T4230] usb 1-1: USB disconnect, device number 24 [ 269.645595][ T6292] loop0: detected capacity change from 0 to 32768 [ 269.657829][ T21] tipc: Node number set to 3446075857 [ 269.806255][ T6292] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 269.815042][ T6292] BTRFS info (device loop0): use zlib compression, level 3 [ 269.822325][ T6292] BTRFS info (device loop0): turning on sync discard [ 269.829062][ T6292] BTRFS info (device loop0): using free space tree [ 269.835608][ T6292] BTRFS info (device loop0): has skinny extents [ 269.999083][ T4485] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 270.276978][ T6292] BTRFS info (device loop0): enabling ssd optimizations [ 270.302500][ T6321] loop4: detected capacity change from 0 to 512 [ 270.399397][ T4485] usb 3-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 270.439231][ T4485] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.551210][ T4485] i2c-tiny-usb 3-1:1.0: version 1.00 found at bus 003 address 021 [ 270.579070][ T4641] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 270.892621][ T6321] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 271.731288][ T4641] usb 2-1: Using ep0 maxpacket: 32 [ 271.745893][ T6331] 9pnet: Insufficient options for proto=fd [ 271.959335][ T4641] usb 2-1: config 1 interface 0 has no altsetting 0 [ 272.219105][ T4641] usb 2-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 272.228813][ T4485] (null): failure reading functionality [ 272.300315][ T4641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.328115][ T4641] usb 2-1: Product: syz [ 272.334930][ T4641] usb 2-1: Manufacturer: syz [ 272.344025][ T4641] usb 2-1: SerialNumber: syz [ 272.669113][ T6353] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 273.049535][ T6353] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.079510][ T6353] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 273.106967][ T6353] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 273.129091][ T6353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.176503][ T6353] usb 5-1: config 0 descriptor?? [ 273.427315][ T6358] loop3: detected capacity change from 0 to 128 [ 273.468359][ T6358] FAT-fs (loop3): Directory bread(block 1048) failed [ 273.486629][ T6358] FAT-fs (loop3): Directory bread(block 1049) failed [ 273.503855][ T6358] FAT-fs (loop3): Directory bread(block 1050) failed [ 273.521341][ T6358] FAT-fs (loop3): Directory bread(block 1051) failed [ 273.536074][ T6358] FAT-fs (loop3): Directory bread(block 1052) failed [ 273.562173][ T6358] FAT-fs (loop3): Directory bread(block 1053) failed [ 273.587069][ T6358] FAT-fs (loop3): Directory bread(block 1054) failed [ 273.608012][ T6358] FAT-fs (loop3): Directory bread(block 1055) failed [ 273.856353][ T6353] Bluetooth: Can't get version to change to load ram patch err [ 273.865307][ T6353] Bluetooth: Loading patch file failed [ 273.873480][ T6353] ath3k: probe of 5-1:0.0 failed with error -71 [ 273.882410][ T6353] usb 5-1: USB disconnect, device number 10 [ 273.912455][ T4179] udevd[4179]: setting owner of /dev/bus/usb/005/010 to uid=0, gid=0 failed: No such file or directory [ 273.995910][ T6360] FAT-fs (loop3): Directory bread(block 1048) failed [ 274.002914][ T6360] FAT-fs (loop3): Directory bread(block 1049) failed [ 274.370585][ T4485] i2c i2c-9: failure reading functionality [ 274.406344][ T4485] i2c i2c-9: connected i2c-tiny-usb device [ 274.471845][ T4641] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input13 [ 274.649154][ T3543] bcm5974 2-1:1.0: could not read from device [ 274.773698][ T4641] usb 2-1: USB disconnect, device number 16 [ 275.907142][ T6370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 275.925103][ T6370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.938330][ T6370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.078064][ T6370] team0: Port device xfrm0 removed [ 276.165227][ T9] tipc: Resetting bearer [ 276.202460][ T6370] tipc: Enabling of bearer rejected, already enabled [ 276.461527][ T6378] loop0: detected capacity change from 0 to 512 [ 277.279523][ T6390] loop1: detected capacity change from 0 to 512 [ 277.424305][ T6390] EXT4-fs (loop1): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 277.489672][ T6392] device syzkaller0 entered promiscuous mode [ 277.527384][ T6355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.817365][ T6402] loop3: detected capacity change from 0 to 128 [ 278.854123][ T6402] FAT-fs (loop3): Directory bread(block 1048) failed [ 278.865179][ T6402] FAT-fs (loop3): Directory bread(block 1049) failed [ 278.872363][ T6402] FAT-fs (loop3): Directory bread(block 1050) failed [ 278.879502][ T6402] FAT-fs (loop3): Directory bread(block 1051) failed [ 278.886561][ T6402] FAT-fs (loop3): Directory bread(block 1052) failed [ 278.894350][ T6402] FAT-fs (loop3): Directory bread(block 1053) failed [ 278.901387][ T6402] FAT-fs (loop3): Directory bread(block 1054) failed [ 278.908281][ T6402] FAT-fs (loop3): Directory bread(block 1055) failed [ 279.296378][ T6412] FAT-fs (loop3): Directory bread(block 1048) failed [ 279.303462][ T6412] FAT-fs (loop3): Directory bread(block 1049) failed [ 280.676417][ T6410] vivid-001: kernel_thread() failed [ 280.735513][ T4433] kernel read not supported for file /video9 (pid: 4433 comm: kworker/1:12) [ 280.759458][ T6408] loop4: detected capacity change from 0 to 32768 [ 280.926599][ T6408] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.567 (6408) [ 280.971748][ T6408] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 280.981299][ T6408] BTRFS info (device loop4): use zlib compression, level 3 [ 280.988559][ T6408] BTRFS info (device loop4): turning on sync discard [ 280.995344][ T6408] BTRFS info (device loop4): using free space tree [ 281.001934][ T6408] BTRFS info (device loop4): has skinny extents [ 282.617211][ T6408] BTRFS error (device loop4): open_ctree failed: -12 [ 282.624459][ T4179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4179) [ 283.079787][ T6355] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 283.959349][ T6355] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.000069][ T6355] usb 1-1: config 0 interface 0 has no altsetting 0 [ 284.350513][ T6355] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 284.372406][ T6355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.412546][ T6355] usb 1-1: Product: syz [ 284.435636][ T6355] usb 1-1: Manufacturer: syz [ 284.459467][ T6355] usb 1-1: SerialNumber: syz [ 284.575659][ T6355] usb 1-1: config 0 descriptor?? [ 284.755158][ T6355] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 285.117109][ T6355] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 285.180219][ T6355] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 285.219076][ T6355] usb 1-1: media controller created [ 285.272515][ T6355] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.596613][ T6355] DVB: Unable to find symbol tda10046_attach() [ 287.637689][ T6355] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 287.659023][ T6355] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 287.679134][ T6355] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 287.803335][ T6486] loop0: detected capacity change from 0 to 32768 [ 287.842083][ T6355] usb 1-1: USB disconnect, device number 25 [ 287.938804][ T6486] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 287.947695][ T6486] BTRFS info (device loop0): use zlib compression, level 3 [ 287.955027][ T6486] BTRFS info (device loop0): turning on sync discard [ 287.961810][ T6486] BTRFS info (device loop0): using free space tree [ 287.968343][ T6486] BTRFS info (device loop0): has skinny extents [ 289.113208][ T6510] loop3: detected capacity change from 0 to 512 [ 289.199449][ T6510] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 289.347684][ T6490] chnl_net:caif_netlink_parms(): no params data found [ 289.392311][ T6486] BTRFS info (device loop0): enabling ssd optimizations [ 290.202199][ T6353] Bluetooth: hci5: command 0x0409 tx timeout [ 291.468062][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.476364][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.485463][ T6490] device bridge_slave_0 entered promiscuous mode [ 291.495469][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.503008][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.513759][ T6490] device bridge_slave_1 entered promiscuous mode [ 291.547388][ T6490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.584577][ T6490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.759022][ T4485] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 291.871207][ T6541] loop0: detected capacity change from 0 to 32768 [ 291.893664][ T6490] team0: Port device team_slave_0 added [ 291.902745][ T6490] team0: Port device team_slave_1 added [ 291.943467][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.953846][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.990375][ T6490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.031961][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.046730][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.085251][ T6490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.167602][ T6451] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 292.181354][ T6353] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 292.183013][ T6541] XFS (loop0): Mounting V5 Filesystem [ 292.190228][ T6353] Bluetooth: hci1: Injecting HCI hardware error event [ 292.193614][ T4200] Bluetooth: hci1: hardware error 0x00 [ 292.245522][ T6490] device hsr_slave_0 entered promiscuous mode [ 292.259524][ T6353] Bluetooth: hci5: command 0x041b tx timeout [ 292.271674][ T6490] device hsr_slave_1 entered promiscuous mode [ 292.278692][ T6490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.288490][ T6490] Cannot create hsr debugfs directory [ 292.309280][ T4485] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.328035][ T4485] usb 5-1: config 0 interface 0 has no altsetting 0 [ 292.344065][ T6541] XFS (loop0): Ending clean mount [ 292.351870][ T6541] XFS (loop0): Quotacheck needed: Please wait. [ 292.412170][ T6541] XFS (loop0): Quotacheck: Done. [ 292.538342][ T6490] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 292.553936][ T6490] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 292.564461][ T6490] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 292.575239][ T4485] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 292.584994][ T4485] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.596840][ T4485] usb 5-1: Product: syz [ 292.601157][ T4485] usb 5-1: Manufacturer: syz [ 292.606444][ T4485] usb 5-1: SerialNumber: syz [ 292.619099][ T6451] usb 4-1: Using ep0 maxpacket: 32 [ 292.655063][ T4485] usb 5-1: config 0 descriptor?? [ 292.674172][ T6490] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 292.805855][ T4485] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 292.839943][ T26] audit: type=1800 audit(1788585405.402:102): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.591" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 292.927943][ T4485] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 292.982522][ T4485] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 293.029730][ T4485] usb 5-1: media controller created [ 293.105628][ T4485] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.245890][ T4187] XFS (loop0): Unmounting Filesystem [ 293.317924][ T6490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.359227][ T6451] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 293.379084][ T6451] usb 4-1: can't read configurations, error -61 [ 293.379127][ T4485] DVB: Unable to find symbol tda10046_attach() [ 293.419255][ T4485] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 293.430142][ T6490] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.466268][ T4485] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 293.476085][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.494873][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.531368][ T6451] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 293.546751][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.567667][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.589211][ T6224] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.596419][ T6224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.624988][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.654471][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.668166][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.690385][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.697576][ T6224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.713319][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.743584][ T6223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 293.783667][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 293.799191][ T6451] usb 4-1: Using ep0 maxpacket: 32 [ 293.799310][ T4485] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 293.814430][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.844772][ T4485] usb 5-1: USB disconnect, device number 11 [ 293.860951][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.902880][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.920330][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.953869][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.973139][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.003252][ T6223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.011617][ T6451] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 294.021793][ T6451] usb 4-1: can't read configurations, error -61 [ 294.029818][ T6223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.043022][ T6451] usb usb4-port1: attempt power cycle [ 294.052485][ T6490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.238018][ T6569] loop1: detected capacity change from 0 to 512 [ 294.291539][ T6569] EXT4-fs (loop1): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 294.339396][ T6355] Bluetooth: hci5: command 0x040f tx timeout [ 294.426133][ T6490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.438136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.446574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.470474][ T6451] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 294.629353][ T6574] loop4: detected capacity change from 0 to 32768 [ 294.715970][ T6574] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.600 (6574) [ 294.732218][ T6574] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 294.741117][ T6574] BTRFS info (device loop4): use zlib compression, level 3 [ 294.748406][ T6574] BTRFS info (device loop4): turning on sync discard [ 294.755262][ T6574] BTRFS info (device loop4): using free space tree [ 294.762242][ T6574] BTRFS info (device loop4): has skinny extents [ 294.799612][ T6451] usb 4-1: Using ep0 maxpacket: 32 [ 295.526214][ T6451] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 295.545053][ T6451] usb 4-1: can't read configurations, error -71 [ 295.562662][ T6591] loop3: detected capacity change from 0 to 128 [ 295.674887][ T6591] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 295.694377][ T4179] udevd[4179]: incorrect ext4 checksum on /dev/loop3 [ 296.018787][ T6574] BTRFS info (device loop4): enabling ssd optimizations [ 296.631426][ T6355] Bluetooth: hci5: command 0x0419 tx timeout [ 296.807451][ T6223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.857561][ T6223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.889427][ T6223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.898739][ T6223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.157070][ T26] audit: type=1800 audit(1788585409.582:103): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.600" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 297.280227][ T6490] device veth0_vlan entered promiscuous mode [ 297.306073][ T6223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.334634][ T6223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.369025][ T6490] device veth1_vlan entered promiscuous mode [ 297.457069][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 297.473396][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 297.489579][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.532337][ T6224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.589595][ T6490] device veth0_macvtap entered promiscuous mode [ 297.600077][ T4432] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 297.636885][ T6490] device veth1_macvtap entered promiscuous mode [ 297.729839][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.744200][ T6626] loop0: detected capacity change from 0 to 512 [ 297.750819][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.787901][ T6626] EXT4-fs (loop0): Ignoring removed bh option [ 297.805901][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.820750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.845851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.864352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.886164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.922560][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.979139][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.023174][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.031686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.042266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.049249][ T4432] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 298.069048][ T4432] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.090858][ T6490] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.109406][ T6490] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.132910][ T6490] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.145800][ T6490] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.148603][ T6626] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.607: corrupted in-inode xattr [ 299.194373][ T6626] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.607: couldn't read orphan inode 15 (err -117) [ 299.253520][ T6224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.369725][ T6224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.378344][ T6223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 299.409901][ T6223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.421583][ T6626] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000002,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 299.487514][ T6223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.677554][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 300.855302][ T4432] pn533_usb 4-1:1.0: NFC: Couldn't poweron the reader (error -71) [ 300.879237][ T4432] pn533_usb: probe of 4-1:1.0 failed with error -71 [ 300.950122][ T4432] usb 4-1: USB disconnect, device number 15 [ 302.442859][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 302.451825][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.459319][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.486781][ T150] block nbd2: Possible stuck request ffff8880213c0000: control (read@0,512B). Runtime 30 seconds [ 302.677498][ T6656] loop0: detected capacity change from 0 to 512 [ 302.759871][ T6656] EXT4-fs (loop0): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 302.933212][ T4432] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 303.299689][ T4432] usb 4-1: Using ep0 maxpacket: 32 [ 303.592770][ T4432] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 303.768801][ T4432] usb 4-1: can't read configurations, error -61 [ 303.959753][ T4432] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 304.878084][ T6673] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 304.959081][ T4432] usb 4-1: device descriptor read/64, error -71 [ 305.079244][ T4432] usb usb4-port1: attempt power cycle [ 306.289033][ T4432] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 306.980676][ T6688] loop4: detected capacity change from 0 to 512 [ 307.098176][ T6688] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 307.339811][ T4432] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.425323][ T4432] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 307.597530][ T4432] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.879147][ T4432] usb 4-1: can't set config #1, error -71 [ 308.889369][ T4432] usb 4-1: USB disconnect, device number 18 [ 309.299234][ T4432] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 309.500344][ T6711] loop4: detected capacity change from 0 to 128 [ 309.640952][ T6711] FAT-fs (loop4): Directory bread(block 1048) failed [ 309.649110][ T4432] usb 4-1: Using ep0 maxpacket: 32 [ 310.873721][ T6711] FAT-fs (loop4): Directory bread(block 1049) failed [ 310.913928][ T6711] FAT-fs (loop4): Directory bread(block 1050) failed [ 310.948236][ T6711] FAT-fs (loop4): Directory bread(block 1051) failed [ 310.955125][ T6711] FAT-fs (loop4): Directory bread(block 1052) failed [ 310.962205][ T6711] FAT-fs (loop4): Directory bread(block 1053) failed [ 310.969276][ T6711] FAT-fs (loop4): Directory bread(block 1054) failed [ 310.976249][ T6711] FAT-fs (loop4): Directory bread(block 1055) failed [ 311.019277][ T4432] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 311.037333][ T4432] usb 4-1: can't read configurations, error -61 [ 311.199181][ T4432] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 311.344256][ T6719] FAT-fs (loop4): Directory bread(block 1048) failed [ 311.351700][ T6719] FAT-fs (loop4): Directory bread(block 1049) failed [ 312.217978][ T4432] usb 4-1: device not accepting address 20, error -71 [ 312.236223][ T4432] usb usb4-port1: attempt power cycle [ 314.647862][ T6730] loop0: detected capacity change from 0 to 32768 [ 314.799788][ T6730] XFS (loop0): Mounting V5 Filesystem [ 316.323931][ T6730] XFS (loop0): Ending clean mount [ 316.332150][ T6730] XFS (loop0): Quotacheck needed: Please wait. [ 316.410439][ T6730] XFS (loop0): Quotacheck: Done. [ 316.720909][ T26] audit: type=1800 audit(1788585429.332:104): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.635" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4428 res=0 errno=0 [ 317.198784][ T26] audit: type=1800 audit(1788585429.342:105): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.635" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 317.214328][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.229127][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.309901][ T4187] XFS (loop0): Unmounting Filesystem [ 317.402991][ T6755] batman_adv: batadv0: Adding interface: ip6gretap1 [ 317.409763][ T6755] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.435640][ T6755] batman_adv: batadv0: Interface activated: ip6gretap1 [ 318.299778][ T6757] loop5: detected capacity change from 0 to 32768 [ 318.342939][ T6757] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.644 (6757) [ 318.414456][ T6757] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 318.423320][ T6757] BTRFS info (device loop5): use zlib compression, level 3 [ 318.430749][ T6757] BTRFS info (device loop5): turning on sync discard [ 318.437461][ T6757] BTRFS info (device loop5): using free space tree [ 318.444077][ T6757] BTRFS info (device loop5): has skinny extents [ 318.695180][ T6774] loop3: detected capacity change from 0 to 512 [ 318.763419][ T6774] EXT4-fs (loop3): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 320.312956][ T4230] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 320.346813][ T6757] BTRFS info (device loop5): enabling ssd optimizations [ 320.775840][ T26] audit: type=1800 audit(1788585433.262:106): pid=6790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.644" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 320.839210][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 321.167095][ T4230] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 321.201394][ T4230] usb 1-1: can't read configurations, error -61 [ 321.366025][ T4230] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 321.619164][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 321.740019][ T4230] usb 1-1: device descriptor read/all, error -71 [ 321.747096][ T4230] usb usb1-port1: attempt power cycle [ 324.804335][ T6792] tipc: Resetting bearer [ 328.218446][ T6792] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.227898][ T6792] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.237486][ T6792] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.247396][ T6792] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.833275][ T6792] syz.3.648 (6792) used greatest stack depth: 20112 bytes left [ 329.091610][ T6797] tipc: Enabled bearer , priority 0 [ 329.158308][ T6797] tipc: Disabling bearer [ 329.373859][ T6836] loop4: detected capacity change from 0 to 512 [ 329.463721][ T6836] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 329.480566][ T6838] loop0: detected capacity change from 0 to 128 [ 329.569254][ T6838] FAT-fs (loop0): Directory bread(block 1048) failed [ 329.577854][ T6834] loop1: detected capacity change from 0 to 32768 [ 329.604321][ T6838] FAT-fs (loop0): Directory bread(block 1049) failed [ 329.612047][ T6838] FAT-fs (loop0): Directory bread(block 1050) failed [ 329.619064][ T6838] FAT-fs (loop0): Directory bread(block 1051) failed [ 329.626036][ T6838] FAT-fs (loop0): Directory bread(block 1052) failed [ 329.633001][ T6838] FAT-fs (loop0): Directory bread(block 1053) failed [ 329.640068][ T6838] FAT-fs (loop0): Directory bread(block 1054) failed [ 329.647144][ T6838] FAT-fs (loop0): Directory bread(block 1055) failed [ 329.989245][ T6842] FAT-fs (loop0): Directory bread(block 1048) failed [ 329.996188][ T6842] FAT-fs (loop0): Directory bread(block 1049) failed [ 330.675139][ T6834] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.657 (6834) [ 331.075518][ T6834] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 331.084292][ T6834] BTRFS info (device loop1): use zlib compression, level 3 [ 331.091660][ T6834] BTRFS info (device loop1): turning on sync discard [ 331.098414][ T6834] BTRFS info (device loop1): using free space tree [ 331.104983][ T6834] BTRFS info (device loop1): has skinny extents [ 331.479205][ T6354] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 332.619014][ T6354] usb 1-1: Using ep0 maxpacket: 32 [ 332.819653][ T6354] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 332.846913][ T6354] usb 1-1: can't read configurations, error -61 [ 333.087406][ T6354] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 334.009192][ T6354] usb 1-1: Using ep0 maxpacket: 32 [ 334.143271][ T150] block nbd2: Possible stuck request ffff8880213c0000: control (read@0,512B). Runtime 60 seconds [ 334.229131][ T6354] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 334.236791][ T6354] usb 1-1: can't read configurations, error -71 [ 334.263291][ T6354] usb usb1-port1: attempt power cycle [ 334.343524][ T6834] BTRFS error (device loop1): open_ctree failed: -22 [ 334.349627][ T4179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4179) [ 334.674706][ T4226] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 334.919238][ T4226] usb 4-1: Using ep0 maxpacket: 32 [ 335.419142][ T4226] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 335.469609][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.504097][ T4226] usb 4-1: Product: syz [ 335.677387][ T6891] loop4: detected capacity change from 0 to 512 [ 335.691914][ T4226] usb 4-1: Manufacturer: syz [ 335.697039][ T4226] usb 4-1: SerialNumber: syz [ 335.730397][ T4226] usb 4-1: config 0 descriptor?? [ 335.772125][ T4226] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 335.797237][ T6891] EXT4-fs (loop4): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 335.800184][ T4226] dvb-usb: bulk message failed: -22 (4/0) [ 335.819112][ T4226] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 335.848232][ T4226] dvb-usb: bulk message failed: -22 (5/0) [ 335.855209][ T4226] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 336.104920][ T6896] loop1: detected capacity change from 0 to 32768 [ 336.115483][ T4226] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 336.165823][ T4226] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 336.184477][ T4226] usb 4-1: media controller created [ 337.485886][ T4226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.503277][ T6896] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 337.512088][ T6896] BTRFS info (device loop1): use zlib compression, level 3 [ 337.519408][ T6896] BTRFS info (device loop1): turning on sync discard [ 337.526121][ T6896] BTRFS info (device loop1): using free space tree [ 337.532720][ T6896] BTRFS info (device loop1): has skinny extents [ 337.568034][ T6907] netdevsim netdevsim5: loading /lib/firmware// failed with error -22 [ 337.576460][ T6907] netdevsim netdevsim5: Direct firmware load for / failed with error -22 [ 337.584997][ T6907] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 338.335765][ T4226] usb 4-1: selecting invalid altsetting 3 [ 338.369067][ T4226] ttusb2: set interface to alts=3 failed [ 338.382121][ T6896] BTRFS info (device loop1): enabling ssd optimizations [ 338.610700][ T6931] loop4: detected capacity change from 0 to 32768 [ 338.621725][ T6931] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.676 (6931) [ 339.171813][ T4226] DVB: Unable to find symbol tda10086_attach() [ 339.181406][ T4226] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 339.319156][ T4226] dvb-usb: bulk message failed: -22 (4/0) [ 339.325059][ T4226] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 339.379204][ T4226] dvb-usb: bulk message failed: -22 (5/0) [ 339.384995][ T4226] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 339.430327][ T4226] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 339.489038][ T4226] usb 4-1: USB disconnect, device number 22 [ 339.657587][ T4226] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 340.135679][ T4179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4179) [ 340.149051][ T4226] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 341.908988][ T4226] usb 4-1: Using ep0 maxpacket: 32 [ 341.969354][ T4226] usb 4-1: device descriptor read/all, error -71 [ 342.119087][ T6957] syz.4.682 (6957) used greatest stack depth: 18560 bytes left [ 342.238221][ T6964] loop5: detected capacity change from 0 to 512 [ 342.555423][ T6964] EXT4-fs (loop5): Unrecognized mount option "pcr=00000000000000000009" or missing value [ 343.749833][ T6975] loop0: detected capacity change from 0 to 32768 [ 344.602250][ T6976] loop4: detected capacity change from 0 to 32768 [ 344.692850][ T6983] loop3: detected capacity change from 0 to 128 [ 345.418431][ T6983] FAT-fs (loop3): Directory bread(block 1048) failed [ 345.545028][ T6983] FAT-fs (loop3): Directory bread(block 1049) failed [ 345.569803][ T6983] FAT-fs (loop3): Directory bread(block 1050) failed [ 345.576565][ T6983] FAT-fs (loop3): Directory bread(block 1051) failed [ 345.583480][ T6983] FAT-fs (loop3): Directory bread(block 1052) failed [ 345.590354][ T6983] FAT-fs (loop3): Directory bread(block 1053) failed [ 345.597199][ T6983] FAT-fs (loop3): Directory bread(block 1054) failed [ 345.603992][ T6983] FAT-fs (loop3): Directory bread(block 1055) failed [ 347.346358][ T7001] FAT-fs (loop3): Directory bread(block 1048) failed [ 347.353488][ T7001] FAT-fs (loop3): Directory bread(block 1049) failed [ 348.061399][ T7005] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 350.005805][ T7014] loop0: detected capacity change from 0 to 4096 [ 350.888791][ T7014] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 351.058400][ T7014] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0002] [ 351.172893][ T7014] System zones: 0-5 [ 351.289124][ T7014] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,journal_ioprio=0x0000000000000004,noload,init_itable=0x000000000a2a41b4,nodiscard,jqfmt=vfsv1,debug,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 352.879043][ T4436] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 353.349935][ T4436] usb 6-1: Using ep0 maxpacket: 32 [ 354.569206][ T4436] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 354.576847][ T4436] usb 6-1: can't read configurations, error -61 [ 354.913559][ T4436] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 355.069031][ T4230] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 355.159193][ T4436] usb 6-1: Using ep0 maxpacket: 32 [ 355.329867][ T4436] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 355.353666][ T4436] usb 6-1: can't read configurations, error -61 [ 355.425882][ T4436] usb usb6-port1: attempt power cycle [ 355.529559][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.835277][ T4230] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 355.876449][ T4230] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 356.089061][ T4230] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 356.113579][ T7075] loop4: detected capacity change from 0 to 4096 [ 356.126808][ T4230] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 356.151150][ T7077] loop5: detected capacity change from 0 to 32768 [ 356.383795][ T7075] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 356.551311][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.819412][ T7075] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0002] [ 356.827637][ T7075] System zones: 0-5 [ 357.044239][ T7083] loop3: detected capacity change from 0 to 128 [ 357.060966][ T7075] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,journal_ioprio=0x0000000000000004,noload,init_itable=0x000000000a2a41b4,nodiscard,jqfmt=vfsv1,debug,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 357.641021][ T7083] FAT-fs (loop3): Directory bread(block 1048) failed [ 357.810871][ T4230] gud 2-1:1.0: Failed to get properties (error=-5) [ 357.843095][ T7083] FAT-fs (loop3): Directory bread(block 1049) failed [ 357.922033][ T4230] gud: probe of 2-1:1.0 failed with error -5 [ 357.989306][ T7083] FAT-fs (loop3): Directory bread(block 1050) failed [ 358.047039][ T7083] FAT-fs (loop3): Directory bread(block 1051) failed [ 358.143090][ T7083] FAT-fs (loop3): Directory bread(block 1052) failed [ 358.224125][ T7083] FAT-fs (loop3): Directory bread(block 1053) failed [ 358.362269][ T7083] FAT-fs (loop3): Directory bread(block 1054) failed [ 358.406380][ T7083] FAT-fs (loop3): Directory bread(block 1055) failed [ 359.067345][ T7102] FAT-fs (loop3): Directory bread(block 1048) failed [ 359.074260][ T7102] FAT-fs (loop3): Directory bread(block 1049) failed [ 359.083465][ T6354] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 359.104909][ T6354] Bluetooth: hci4: Injecting HCI hardware error event [ 359.145339][ T4194] Bluetooth: hci4: hardware error 0x00 [ 359.604408][ T6354] usb 2-1: USB disconnect, device number 17 [ 361.340361][ T4200] Bluetooth: hci4: unexpected event for opcode 0x041b [ 365.122126][ T150] block nbd2: Possible stuck request ffff8880213c0000: control (read@0,512B). Runtime 90 seconds [ 365.882645][ T7158] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 365.993391][ T7160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.928842][ T7218] loop3: detected capacity change from 0 to 4096 [ 375.136417][ T7218] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 375.370587][ T7218] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0002] [ 375.486874][ T7218] System zones: 0-5 [ 375.696358][ T7218] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,journal_ioprio=0x0000000000000004,noload,init_itable=0x000000000a2a41b4,nodiscard,jqfmt=vfsv1,debug,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 376.436420][ T26] audit: type=1800 audit(1788585489.052:107): pid=7239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.755" name="idVendor" dev="configfs" ino=65325 res=0 errno=0 [ 376.518067][ T26] audit: type=1800 audit(1788585489.082:108): pid=7239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.755" name="idProduct" dev="configfs" ino=65326 res=0 errno=0 [ 376.541744][ T7241] Config c/1 of g1 needs at least one function. [ 376.548884][ T7241] udc dummy_udc.0: failed to start g1: -22 [ 376.571737][ T7228] chnl_net:caif_netlink_parms(): no params data found [ 376.639137][ T26] audit: type=1800 audit(1788585489.162:109): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.755" name="UDC" dev="configfs" ino=65331 res=0 errno=0 [ 376.821563][ T7228] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.240541][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.354206][ T7228] device bridge_slave_0 entered promiscuous mode [ 377.421645][ T7228] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.469978][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.551595][ T7228] device bridge_slave_1 entered promiscuous mode [ 378.131411][ T6354] Bluetooth: hci6: command 0x0409 tx timeout [ 378.205132][ T7228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.270407][ T7228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.312409][ T7228] team0: Port device team_slave_0 added [ 378.323632][ T7228] team0: Port device team_slave_1 added [ 378.346284][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.354400][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.380754][ T7228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.394799][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.402419][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.430466][ T7228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.501716][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.508031][ T7228] device hsr_slave_0 entered promiscuous mode [ 378.517108][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.518007][ T7228] device hsr_slave_1 entered promiscuous mode [ 378.540181][ T7228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.548120][ T7228] Cannot create hsr debugfs directory [ 378.807097][ T7228] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 378.830004][ T7228] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 378.866704][ T7228] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 378.899962][ T7228] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 379.293815][ T7228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.389936][ T7228] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.583558][ T7228] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 379.653472][ T7228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.824253][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.872534][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.988304][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 380.049854][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.065756][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.072920][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.090280][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 380.101779][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.114360][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.121601][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.137844][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.147674][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.166017][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 380.176648][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 380.190355][ T4231] Bluetooth: hci6: command 0x041b tx timeout [ 380.200430][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 380.217601][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 380.226618][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 380.244588][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 380.255997][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 380.276466][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.285210][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 380.297454][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 380.306124][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 381.989810][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 381.997515][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.044700][ T7228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.113574][ T7302] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.767'. [ 382.143215][ T7303] loop1: detected capacity change from 0 to 128 [ 382.170613][ T7297] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.767'. [ 382.230113][ T7303] FAT-fs (loop1): Directory bread(block 1048) failed [ 382.267505][ T7303] FAT-fs (loop1): Directory bread(block 1049) failed [ 382.274775][ T6354] Bluetooth: hci6: command 0x040f tx timeout [ 382.313986][ T7303] FAT-fs (loop1): Directory bread(block 1050) failed [ 382.350675][ T7303] FAT-fs (loop1): Directory bread(block 1051) failed [ 382.564204][ T7303] FAT-fs (loop1): Directory bread(block 1052) failed [ 382.737310][ T7303] FAT-fs (loop1): Directory bread(block 1053) failed [ 382.879441][ T7303] FAT-fs (loop1): Directory bread(block 1054) failed [ 382.959121][ T7303] FAT-fs (loop1): Directory bread(block 1055) failed [ 383.376183][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.771'. [ 383.413640][ T7317] FAT-fs (loop1): Directory bread(block 1048) failed [ 383.420561][ T7317] FAT-fs (loop1): Directory bread(block 1049) failed [ 384.223927][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 384.390439][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 384.412363][ T1325] Bluetooth: hci6: command 0x0419 tx timeout [ 385.679756][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 386.896283][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 386.961862][ T7338] netdevsim netdevsim1: loading /lib/firmware// failed with error -22 [ 386.964872][ T7228] device veth0_vlan entered promiscuous mode [ 386.970427][ T7338] netdevsim netdevsim1: Direct firmware load for / failed with error -22 [ 386.985589][ T7338] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 387.112664][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 387.160726][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 387.372940][ T7228] device veth1_vlan entered promiscuous mode [ 387.537870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 387.550956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 387.573814][ T7228] device veth0_macvtap entered promiscuous mode [ 387.593678][ T7228] device veth1_macvtap entered promiscuous mode [ 387.634523][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.658972][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.673558][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.689941][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.708795][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.735856][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 387.745673][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 387.754674][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 387.763893][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 387.779193][ T4230] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 387.811916][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.822897][ T4258] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 387.838807][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.871866][ T7228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.878299][ T7347] loop3: detected capacity change from 0 to 128 [ 387.894538][ T7228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.906591][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.915494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 387.925433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 387.938662][ T7228] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.957241][ T7228] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.967996][ T7228] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.977153][ T7228] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.000775][ T7347] FAT-fs (loop3): Directory bread(block 1048) failed [ 388.007541][ T7347] FAT-fs (loop3): Directory bread(block 1049) failed [ 388.019048][ T4230] usb 2-1: Using ep0 maxpacket: 32 [ 388.066314][ T7347] FAT-fs (loop3): Directory bread(block 1050) failed [ 388.129023][ T7347] FAT-fs (loop3): Directory bread(block 1051) failed [ 388.135802][ T7347] FAT-fs (loop3): Directory bread(block 1052) failed [ 388.155571][ T7347] FAT-fs (loop3): Directory bread(block 1053) failed [ 388.162874][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.177545][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.186533][ T7347] FAT-fs (loop3): Directory bread(block 1054) failed [ 388.203272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 388.221252][ T7347] FAT-fs (loop3): Directory bread(block 1055) failed [ 388.249284][ T4258] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.275957][ T4258] usb 1-1: config 0 interface 0 has no altsetting 0 [ 388.289369][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.299248][ T4230] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 388.308383][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.317025][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.326953][ T4230] usb 2-1: Product: syz [ 388.331217][ T4230] usb 2-1: Manufacturer: syz [ 388.335834][ T4230] usb 2-1: SerialNumber: syz [ 388.343891][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 388.362077][ T4230] usb 2-1: config 0 descriptor?? [ 388.404363][ T4230] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 388.425137][ T4230] dvb-usb: bulk message failed: -22 (4/0) [ 388.463068][ T4230] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 388.491886][ T4230] dvb-usb: bulk message failed: -22 (5/0) [ 388.512993][ T4230] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 388.561969][ T4230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 388.630879][ T7348] FAT-fs (loop3): Directory bread(block 1048) failed [ 388.637712][ T7348] FAT-fs (loop3): Directory bread(block 1049) failed [ 388.660915][ T4230] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 388.681804][ T4230] usb 2-1: media controller created [ 388.716579][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.748332][ T4230] usb 2-1: selecting invalid altsetting 3 [ 388.824576][ T4231] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 388.833090][ T4258] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 388.849099][ T4231] Bluetooth: hci2: Injecting HCI hardware error event [ 388.859159][ T4258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.888320][ T4194] Bluetooth: hci2: hardware error 0x00 [ 388.896669][ T4230] ttusb2: set interface to alts=3 failed [ 388.910242][ T4258] usb 1-1: Product: syz [ 388.917451][ T4258] usb 1-1: Manufacturer: syz [ 388.922581][ T4258] usb 1-1: SerialNumber: syz [ 388.949781][ T4258] usb 1-1: config 0 descriptor?? [ 389.012284][ T4258] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 389.035430][ T4258] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 389.049843][ T4230] DVB: Unable to find symbol tda10086_attach() [ 389.056094][ T4230] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 389.070759][ T4258] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 389.081099][ T4258] usb 1-1: media controller created [ 389.099767][ T4258] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 389.279150][ T4230] dvb-usb: bulk message failed: -22 (4/0) [ 389.291698][ T4230] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 389.833084][ T4258] DVB: Unable to find symbol tda10046_attach() [ 389.875588][ T4258] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 389.884945][ T4231] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 389.914988][ T4258] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 389.991396][ T4230] dvb-usb: bulk message failed: -22 (5/0) [ 389.997200][ T4230] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 390.007434][ T4230] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 390.019797][ T4230] usb 2-1: USB disconnect, device number 18 [ 390.116070][ T4230] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 391.006985][ T4258] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 391.137429][ T4231] usb 4-1: Using ep0 maxpacket: 32 [ 391.145169][ T4258] usb 1-1: USB disconnect, device number 32 [ 391.289203][ T4231] usb 4-1: config 1 interface 0 has no altsetting 0 [ 391.469527][ T4231] usb 4-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 391.516113][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.539721][ T4231] usb 4-1: Product: syz [ 391.544062][ T4231] usb 4-1: Manufacturer: syz [ 391.549283][ T4231] usb 4-1: SerialNumber: syz [ 391.804549][ T7391] netdevsim netdevsim6: loading /lib/firmware// failed with error -22 [ 391.813111][ T7391] netdevsim netdevsim6: Direct firmware load for / failed with error -22 [ 391.821686][ T7391] netdevsim netdevsim6: Falling back to sysfs fallback for: / [ 391.849072][ T6351] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 392.789158][ T6351] usb 2-1: Using ep0 maxpacket: 16 [ 392.891610][ T7401] loop6: detected capacity change from 0 to 128 [ 392.921985][ T7401] FAT-fs (loop6): Directory bread(block 1048) failed [ 392.937345][ T7401] FAT-fs (loop6): Directory bread(block 1049) failed [ 392.948147][ T7401] FAT-fs (loop6): Directory bread(block 1050) failed [ 392.966158][ T7401] FAT-fs (loop6): Directory bread(block 1051) failed [ 392.993318][ T7401] FAT-fs (loop6): Directory bread(block 1052) failed [ 393.032529][ T7401] FAT-fs (loop6): Directory bread(block 1053) failed [ 393.071868][ T7401] FAT-fs (loop6): Directory bread(block 1054) failed [ 393.173743][ T6351] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 393.185408][ T7401] FAT-fs (loop6): Directory bread(block 1055) failed [ 393.196793][ T4231] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input14 [ 393.346644][ T7404] loop3: detected capacity change from 0 to 32768 [ 393.563480][ T3543] bcm5974 4-1:1.0: could not read from device [ 393.581757][ T4231] usb 4-1: USB disconnect, device number 25 [ 393.611731][ T7408] FAT-fs (loop6): Directory bread(block 1048) failed [ 393.618579][ T7408] FAT-fs (loop6): Directory bread(block 1049) failed [ 394.192798][ T6351] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 394.228993][ T6351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.237093][ T6351] usb 2-1: Product: syz [ 394.241448][ T6351] usb 2-1: Manufacturer: syz [ 394.246066][ T6351] usb 2-1: SerialNumber: syz [ 394.305370][ T6351] usb 2-1: config 0 descriptor?? [ 394.369368][ T7404] XFS (loop3): Mounting V5 Filesystem [ 394.653003][ T7404] XFS (loop3): Ending clean mount [ 394.660322][ T6351] usb 2-1: USB disconnect, device number 19 [ 395.139962][ T150] block nbd2: Possible stuck request ffff8880213c0000: control (read@0,512B). Runtime 120 seconds [ 395.547622][ T7404] XFS (loop3): Quotacheck needed: Please wait. [ 395.698167][ T7404] XFS (loop3): Quotacheck: Done. [ 395.913810][ T7438] loop4: detected capacity change from 0 to 128 [ 395.953359][ T26] audit: type=1800 audit(1788585508.572:110): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.795" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 396.223920][ T26] audit: type=1800 audit(1788585508.612:111): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.795" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 396.905157][ T4198] XFS (loop3): Unmounting Filesystem [ 397.055288][ T7438] FAT-fs (loop4): Directory bread(block 1048) failed [ 397.090019][ T7438] FAT-fs (loop4): Directory bread(block 1049) failed [ 397.129061][ T21] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 397.141035][ T7438] FAT-fs (loop4): Directory bread(block 1050) failed [ 397.177426][ T7438] FAT-fs (loop4): Directory bread(block 1051) failed [ 397.309505][ T7438] FAT-fs (loop4): Directory bread(block 1052) failed [ 397.356140][ T7438] FAT-fs (loop4): Directory bread(block 1053) failed [ 397.369259][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 397.495126][ T21] usb 2-1: config 1 interface 0 has no altsetting 0 [ 397.550529][ T7438] FAT-fs (loop4): Directory bread(block 1054) failed [ 397.699879][ T21] usb 2-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 397.716107][ T7438] FAT-fs (loop4): Directory bread(block 1055) failed [ 397.779188][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.078611][ T21] usb 2-1: Product: syz [ 398.109098][ T21] usb 2-1: Manufacturer: syz [ 398.113779][ T21] usb 2-1: SerialNumber: syz [ 398.398835][ T7458] FAT-fs (loop4): Directory bread(block 1048) failed [ 398.405657][ T7458] FAT-fs (loop4): Directory bread(block 1049) failed [ 399.961820][ T21] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input15 [ 400.022716][ T3543] bcm5974 2-1:1.0: could not read from device [ 400.040595][ T21] usb 2-1: USB disconnect, device number 20 [ 400.046854][ T3543] bcm5974 2-1:1.0: could not read from device [ 400.293123][ T7484] loop1: detected capacity change from 0 to 128 [ 400.360110][ T7484] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 400.403115][ T4178] udevd[4178]: incorrect ext4 checksum on /dev/loop1 [ 401.223892][ T7489] loop3: detected capacity change from 0 to 128 [ 401.509970][ T7490] loop4: detected capacity change from 0 to 32768 [ 401.525459][ T7489] FAT-fs (loop3): Directory bread(block 1048) failed [ 401.546918][ T7489] FAT-fs (loop3): Directory bread(block 1049) failed [ 401.554278][ T7489] FAT-fs (loop3): Directory bread(block 1050) failed [ 402.519890][ T7489] FAT-fs (loop3): Directory bread(block 1051) failed [ 402.526717][ T7489] FAT-fs (loop3): Directory bread(block 1052) failed [ 402.574201][ T7489] FAT-fs (loop3): Directory bread(block 1053) failed [ 402.585450][ T7489] FAT-fs (loop3): Directory bread(block 1054) failed [ 402.592966][ T7489] FAT-fs (loop3): Directory bread(block 1055) failed [ 403.140135][ T7490] XFS (loop4): Mounting V5 Filesystem [ 403.179920][ T7511] FAT-fs (loop3): Directory bread(block 1048) failed [ 403.186727][ T7511] FAT-fs (loop3): Directory bread(block 1049) failed [ 403.401106][ T7490] XFS (loop4): Ending clean mount [ 403.413780][ T7517] loop1: detected capacity change from 0 to 128 [ 403.476431][ T7517] FAT-fs (loop1): Directory bread(block 1048) failed [ 403.487509][ T7490] XFS (loop4): Quotacheck needed: Please wait. [ 403.558639][ T7517] FAT-fs (loop1): Directory bread(block 1049) failed [ 403.582870][ T7490] XFS (loop4): Quotacheck: Done. [ 403.659099][ T7517] FAT-fs (loop1): Directory bread(block 1050) failed [ 403.671166][ T7517] FAT-fs (loop1): Directory bread(block 1051) failed [ 403.786888][ T26] audit: type=1800 audit(1788585516.402:112): pid=7521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.817" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4429 res=0 errno=0 [ 403.849126][ T7517] FAT-fs (loop1): Directory bread(block 1052) failed [ 403.861257][ T7517] FAT-fs (loop1): Directory bread(block 1053) failed [ 403.879163][ T21] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 403.914051][ T26] audit: type=1800 audit(1788585516.452:113): pid=7521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.817" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 404.000181][ T7517] FAT-fs (loop1): Directory bread(block 1054) failed [ 404.006998][ T7517] FAT-fs (loop1): Directory bread(block 1055) failed [ 404.024834][ T4188] XFS (loop4): Unmounting Filesystem [ 404.339084][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 404.357829][ T7522] FAT-fs (loop1): Directory bread(block 1048) failed [ 404.364753][ T7522] FAT-fs (loop1): Directory bread(block 1049) failed [ 404.549064][ T21] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 404.556726][ T21] usb 4-1: can't read configurations, error -61 [ 404.769042][ T21] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 406.459004][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 406.569256][ T21] usb 4-1: device descriptor read/all, error -71 [ 406.577960][ T21] usb usb4-port1: attempt power cycle [ 407.017877][ T7542] loop6: detected capacity change from 0 to 128 [ 407.075166][ T7542] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 407.345249][ T4179] udevd[4179]: incorrect ext4 checksum on /dev/loop6 [ 407.665932][ T4179] udevd[4179]: incorrect ext4 checksum on /dev/loop6 [ 407.821783][ T7547] loop3: detected capacity change from 0 to 128 [ 407.936478][ T7553] loop0: detected capacity change from 0 to 128 [ 408.010023][ T7547] FAT-fs (loop3): Directory bread(block 1048) failed [ 408.030512][ T7547] FAT-fs (loop3): Directory bread(block 1049) failed [ 408.053171][ T7547] FAT-fs (loop3): Directory bread(block 1050) failed [ 408.069052][ T7547] FAT-fs (loop3): Directory bread(block 1051) failed [ 408.086210][ T7547] FAT-fs (loop3): Directory bread(block 1052) failed [ 408.096749][ T7547] FAT-fs (loop3): Directory bread(block 1053) failed [ 408.114811][ T7547] FAT-fs (loop3): Directory bread(block 1054) failed [ 408.129066][ T7547] FAT-fs (loop3): Directory bread(block 1055) failed [ 408.208813][ T7553] FAT-fs (loop0): Directory bread(block 1048) failed [ 408.219522][ T7553] FAT-fs (loop0): Directory bread(block 1049) failed [ 408.230959][ T7553] FAT-fs (loop0): Directory bread(block 1050) failed [ 408.422053][ T7553] FAT-fs (loop0): Directory bread(block 1051) failed [ 408.430686][ T7553] FAT-fs (loop0): Directory bread(block 1052) failed [ 408.444975][ T7553] FAT-fs (loop0): Directory bread(block 1053) failed [ 408.454747][ T7553] FAT-fs (loop0): Directory bread(block 1054) failed [ 408.497677][ T7560] FAT-fs (loop3): Directory bread(block 1048) failed [ 408.504728][ T7560] FAT-fs (loop3): Directory bread(block 1049) failed [ 409.097912][ T4231] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 409.132094][ T7553] FAT-fs (loop0): Directory bread(block 1055) failed [ 409.489348][ T7566] FAT-fs (loop0): Directory bread(block 1048) failed [ 409.496237][ T7566] FAT-fs (loop0): Directory bread(block 1049) failed [ 409.535380][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 409.749659][ T4231] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 409.882984][ T4231] usb 2-1: can't read configurations, error -61 [ 410.039032][ T4231] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 411.417054][ T5528] Bluetooth: hci5: command 0x0406 tx timeout [ 414.176224][ T7598] loop3: detected capacity change from 0 to 128 [ 414.404795][ T7598] FAT-fs (loop3): Directory bread(block 1048) failed [ 414.431078][ T7598] FAT-fs (loop3): Directory bread(block 1049) failed [ 414.492209][ T7598] FAT-fs (loop3): Directory bread(block 1050) failed [ 414.535085][ T7598] FAT-fs (loop3): Directory bread(block 1051) failed [ 414.565309][ T7598] FAT-fs (loop3): Directory bread(block 1052) failed [ 415.931359][ T7598] FAT-fs (loop3): Directory bread(block 1053) failed [ 415.958835][ T7598] FAT-fs (loop3): Directory bread(block 1054) failed [ 415.989099][ T7598] FAT-fs (loop3): Directory bread(block 1055) failed [ 416.260662][ T7609] FAT-fs (loop3): Directory bread(block 1048) failed [ 416.267532][ T7609] FAT-fs (loop3): Directory bread(block 1049) failed [ 416.294200][ T7611] loop6: detected capacity change from 0 to 128 [ 416.596851][ T7611] FAT-fs (loop6): Directory bread(block 1048) failed [ 416.629252][ T7611] FAT-fs (loop6): Directory bread(block 1049) failed [ 416.708067][ T7611] FAT-fs (loop6): Directory bread(block 1050) failed [ 416.716379][ T7611] FAT-fs (loop6): Directory bread(block 1051) failed [ 416.723436][ T7611] FAT-fs (loop6): Directory bread(block 1052) failed [ 416.730624][ T7611] FAT-fs (loop6): Directory bread(block 1053) failed [ 416.737371][ T7611] FAT-fs (loop6): Directory bread(block 1054) failed [ 416.779074][ T7611] FAT-fs (loop6): Directory bread(block 1055) failed [ 416.829133][ T4436] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 417.154622][ T4436] usb 4-1: Using ep0 maxpacket: 32 [ 417.619105][ T4436] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 417.626736][ T4436] usb 4-1: can't read configurations, error -61 [ 417.832553][ T7621] FAT-fs (loop6): Directory bread(block 1048) failed [ 417.839357][ T7621] FAT-fs (loop6): Directory bread(block 1049) failed [ 418.179394][ T4436] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 418.479343][ T4436] usb 4-1: Using ep0 maxpacket: 32 [ 418.779147][ T4436] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 418.797076][ T4436] usb 4-1: can't read configurations, error -61 [ 418.807079][ T4436] usb usb4-port1: attempt power cycle [ 419.358980][ T4436] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 419.449175][ T4436] usb 4-1: Using ep0 maxpacket: 32 [ 419.589099][ T4436] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 419.596766][ T4436] usb 4-1: can't read configurations, error -71 [ 419.815802][ T7637] raw_sendmsg: syz.3.859 forgot to set AF_INET. Fix it! [ 419.853772][ T7637] mmap: syz.3.859 (7637) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 421.066119][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 421.111665][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 421.160124][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 421.261226][ T7648] team0: Port device xfrm0 removed [ 421.335493][ T7651] tipc: Enabling of bearer rejected, already enabled [ 421.386624][ T6224] tipc: Resetting bearer [ 421.447518][ T7659] loop1: detected capacity change from 0 to 128 [ 421.525595][ T7659] FAT-fs (loop1): Directory bread(block 1048) failed [ 421.577490][ T7659] FAT-fs (loop1): Directory bread(block 1049) failed [ 421.595424][ T7659] FAT-fs (loop1): Directory bread(block 1050) failed [ 421.611256][ T7659] FAT-fs (loop1): Directory bread(block 1051) failed [ 421.628681][ T7659] FAT-fs (loop1): Directory bread(block 1052) failed [ 421.650096][ T7661] capability: warning: `syz.4.865' uses 32-bit capabilities (legacy support in use) [ 421.678290][ T7659] FAT-fs (loop1): Directory bread(block 1053) failed [ 421.719058][ T7659] FAT-fs (loop1): Directory bread(block 1054) failed [ 421.744513][ T7659] FAT-fs (loop1): Directory bread(block 1055) failed [ 421.747520][ T7665] loop3: detected capacity change from 0 to 128 [ 421.770723][ T7663] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 421.995976][ T7665] FAT-fs (loop3): Directory bread(block 1048) failed [ 422.065970][ T7665] FAT-fs (loop3): Directory bread(block 1049) failed [ 422.115360][ T7665] FAT-fs (loop3): Directory bread(block 1050) failed [ 422.126581][ T7667] FAT-fs (loop1): Directory bread(block 1048) failed [ 422.133488][ T7667] FAT-fs (loop1): Directory bread(block 1049) failed [ 422.184139][ T7665] FAT-fs (loop3): Directory bread(block 1051) failed [ 422.219975][ T7665] FAT-fs (loop3): Directory bread(block 1052) failed [ 422.299245][ T7665] FAT-fs (loop3): Directory bread(block 1053) failed [ 422.340071][ T7669] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 422.359041][ T7665] FAT-fs (loop3): Directory bread(block 1054) failed [ 422.383331][ T7665] FAT-fs (loop3): Directory bread(block 1055) failed [ 422.974469][ T7679] FAT-fs (loop3): Directory bread(block 1048) failed [ 422.981433][ T7679] FAT-fs (loop3): Directory bread(block 1049) failed [ 424.733972][ T7698] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 424.757824][ T7698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 424.777148][ T7698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 424.785469][ T5528] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 424.869086][ T7698] team0: Port device xfrm0 removed [ 424.944895][ T7700] tipc: Enabling of bearer rejected, already enabled [ 424.979757][ T4398] tipc: Resetting bearer [ 425.149516][ T5528] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 425.169666][ T5528] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.190560][ T5528] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 425.219005][ T150] block nbd2: Possible stuck request ffff8880213c0000: control (read@0,512B). Runtime 150 seconds [ 425.232910][ T5528] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.379191][ T5528] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 425.417811][ T5528] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 425.438091][ T5528] usb 5-1: Product: syz [ 425.449179][ T5528] usb 5-1: Manufacturer: syz [ 425.530082][ T5528] cdc_wdm 5-1:1.0: skipping garbage [ 425.536733][ T5528] cdc_wdm 5-1:1.0: skipping garbage [ 425.605125][ T5528] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 425.643941][ T5528] cdc_wdm 5-1:1.0: Unknown control protocol [ 425.814032][ T4436] usb 5-1: USB disconnect, device number 12 [ 427.789751][ T7721] loop3: detected capacity change from 0 to 128 [ 427.845294][ T7721] FAT-fs (loop3): Directory bread(block 1048) failed [ 427.852211][ T4436] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 427.899438][ T7721] FAT-fs (loop3): Directory bread(block 1049) failed [ 427.906337][ T7721] FAT-fs (loop3): Directory bread(block 1050) failed [ 428.056303][ T7726] loop4: detected capacity change from 0 to 32768 [ 428.089800][ T7721] FAT-fs (loop3): Directory bread(block 1051) failed [ 428.096564][ T7721] FAT-fs (loop3): Directory bread(block 1052) failed [ 428.123804][ T7721] FAT-fs (loop3): Directory bread(block 1053) failed [ 428.141346][ T7721] FAT-fs (loop3): Directory bread(block 1054) failed [ 428.158343][ T7721] FAT-fs (loop3): Directory bread(block 1055) failed [ 428.470719][ T7728] FAT-fs (loop3): Directory bread(block 1048) failed [ 428.477497][ T7728] FAT-fs (loop3): Directory bread(block 1049) failed [ 430.551343][ T26] audit: type=1800 audit(1788585543.172:114): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.883" name="addr_traddr" dev="configfs" ino=67343 res=0 errno=0 [ 430.998972][ T1325] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 432.151081][ T7743] nvmet: transport type 0 not supported [ 432.679315][ T1325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 432.721095][ T1325] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 432.769003][ T1325] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 432.791967][ T1325] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 128 [ 432.838994][ T1325] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 432.899117][ T27] INFO: task syz.2.544:6297 blocked for more than 143 seconds. [ 432.906761][ T27] Not tainted syzkaller #0 [ 432.916188][ T7757] loop0: detected capacity change from 0 to 128 [ 432.948979][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.990471][ T7757] FAT-fs (loop0): Directory bread(block 1048) failed [ 432.998253][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.026968][ T7757] FAT-fs (loop0): Directory bread(block 1049) failed [ 433.039869][ T7741] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 433.047856][ T27] task:syz.2.544 state:D stack:26288 pid: 6297 ppid: 4192 flags:0x00004004 [ 433.057821][ T7757] FAT-fs (loop0): Directory bread(block 1050) failed [ 433.095185][ T7757] FAT-fs (loop0): Directory bread(block 1051) failed [ 433.098082][ T27] Call Trace: [ 433.131259][ T27] [ 433.132738][ T7757] FAT-fs (loop0): Directory bread(block 1052) failed [ 433.134256][ T27] __schedule+0x11c3/0x4350 [ 433.134344][ T27] ? release_firmware_map_entry+0x190/0x190 [ 433.178159][ T7757] FAT-fs (loop0): Directory bread(block 1053) failed [ 433.205725][ T7757] FAT-fs (loop0): Directory bread(block 1054) failed [ 433.235422][ T7757] FAT-fs (loop0): Directory bread(block 1055) failed [ 433.238465][ T27] ? blk_mq_flush_plug_list+0x5e0/0x690 [ 433.247904][ T27] schedule+0x11b/0x1e0 [ 433.330368][ T27] schedule_timeout+0xbd/0x2d0 [ 433.504009][ T27] ? console_conditional_schedule+0x40/0x40 [ 433.519086][ T1325] ims_pcu 5-1:1.0: Failed to set line state, error: -71 [ 433.578438][ T7760] FAT-fs (loop0): Directory bread(block 1048) failed [ 433.585371][ T7760] FAT-fs (loop0): Directory bread(block 1049) failed [ 433.915491][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 433.929178][ T1325] ims_pcu: probe of 5-1:1.0 failed with error -71 [ 433.945414][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 433.988527][ T1325] usb 5-1: USB disconnect, device number 14 [ 434.003133][ T27] ? lock_chain_count+0x20/0x20 [ 434.027909][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 434.103930][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 434.141275][ T27] do_wait_for_common+0x295/0x460 [ 434.175141][ T27] ? console_conditional_schedule+0x40/0x40 [ 434.210316][ T27] ? wait_for_completion_killable_timeout+0x60/0x60 [ 434.240987][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 434.257500][ T27] ? rcu_is_watching+0x11/0xa0 [ 434.278241][ T27] wait_for_completion+0x48/0x60 [ 434.291241][ T27] ? __xfs_buf_submit+0x3b5/0x7b0 [ 434.303758][ T27] xfs_buf_iowait+0xae/0x3d0 [ 434.316629][ T27] __xfs_buf_submit+0x3b5/0x7b0 [ 434.345510][ T27] ? xfs_buf_read_uncached+0x152/0x230 [ 434.370473][ T27] xfs_buf_read_uncached+0x15d/0x230 [ 434.398779][ T27] xfs_readsb+0x172/0x630 [ 434.410446][ T27] ? pcpu_alloc+0x11e6/0x16d0 [ 434.425520][ T27] ? xfs_sb_validate_fsb_count+0x80/0x80 [ 434.443302][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 434.463123][ T27] xfs_fs_fill_super+0x583/0x13e0 [ 434.476237][ T27] get_tree_bdev+0x3e6/0x610 [ 434.494794][ T27] ? xfs_mount_set_dax_mode+0x100/0x100 [ 434.515286][ T27] vfs_get_tree+0x88/0x270 [ 434.527816][ T27] do_new_mount+0x247/0xa40 [ 434.546861][ T27] __se_sys_mount+0x2e3/0x3d0 [ 434.564278][ T27] ? __x64_sys_mount+0xc0/0xc0 [ 434.579479][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 434.593898][ T27] ? __x64_sys_mount+0x1c/0xc0 [ 434.610201][ T27] do_syscall_64+0x4c/0xa0 [ 434.622740][ T27] ? clear_bhb_loop+0x30/0x80 [ 434.637873][ T27] ? clear_bhb_loop+0x30/0x80 [ 434.655445][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 434.672909][ T27] RIP: 0033:0x7f78c2a77159 [ 434.687541][ T27] RSP: 002b:00007f78c0ccf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 434.713194][ T27] RAX: ffffffffffffffda RBX: 00007f78c2cfefa0 RCX: 00007f78c2a77159 [ 434.734980][ T27] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000080 [ 434.764212][ T27] RBP: 00007f78c2b0e024 R08: 0000000000000000 R09: 0000000000000000 [ 434.792015][ T27] R10: 000000000281841d R11: 0000000000000246 R12: 0000000000000000 [ 434.816101][ T27] R13: 00007f78c2cff038 R14: 00007f78c2cfefa0 R15: 00007fffae214978 [ 434.842375][ T27] [ 434.854404][ T27] [ 434.854404][ T27] Showing all locks held in the system: [ 434.903527][ T27] 1 lock held by khungtaskd/27: [ 434.925658][ T27] #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 434.952963][ T27] 3 locks held by kworker/u4:4/1236: [ 434.968707][ T27] 2 locks held by getty/3941: [ 434.988616][ T27] #0: ffff88814ca3f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 435.022088][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 435.056047][ T27] 1 lock held by udevd/4179: [ 435.072305][ T27] 1 lock held by syz-executor/4198: [ 435.089097][ T27] #0: ffffffff8c3239e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750 [ 435.125245][ T27] 3 locks held by kworker/0:4/4231: [ 435.144431][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 435.179018][ T27] #1: ffffc9000307fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 435.223768][ T27] #2: ffffffff8c3239e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 435.260912][ T27] 1 lock held by syz.2.544/6297: [ 435.277396][ T27] #0: ffff888078c2c0e0 (&type->s_umount_key#61/1){+.+.}-{3:3}, at: alloc_super+0x200/0x970 [ 435.319895][ T27] 2 locks held by kworker/0:22/6354: [ 435.426607][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 435.463485][ T27] #1: ffffc9000423fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 435.499957][ T27] 1 lock held by syz.5.721/7105: [ 435.557959][ T27] #0: ffff888078c2c0e0 (&type->s_umount_key#62){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 435.651018][ T27] 1 lock held by syz.5.721/7106: [ 435.668680][ T27] #0: ffff888078c2c0e0 (&type->s_umount_key#62){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 435.701930][ T27] 1 lock held by syz.1.885/7742: [ 435.718514][ T27] 2 locks held by syz.3.888/7762: [ 435.771093][ T27] [ 435.779605][ T27] ============================================= [ 435.779605][ T27] [ 435.806097][ T27] NMI backtrace for cpu 1 [ 435.810526][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 435.817739][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.827830][ T27] Call Trace: [ 435.831133][ T27] [ 435.834076][ T27] dump_stack_lvl+0x188/0x250 [ 435.838770][ T27] ? show_regs_print_info+0x20/0x20 [ 435.843980][ T27] ? load_image+0x410/0x410 [ 435.848488][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 435.853872][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 435.859007][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 435.864002][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 435.870198][ T27] ? _printk+0xda/0x130 [ 435.874407][ T27] ? load_image+0x410/0x410 [ 435.878926][ T27] ? load_image+0x410/0x410 [ 435.883454][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 435.889531][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 435.895543][ T27] watchdog+0xe1b/0xe60 [ 435.899728][ T27] kthread+0x42e/0x520 [ 435.903835][ T27] ? hungtask_pm_notify+0x40/0x40 [ 435.908895][ T27] ? kthread_blkcg+0xd0/0xd0 [ 435.913517][ T27] ret_from_fork+0x1f/0x30 [ 435.917947][ T27] [ 435.921606][ T27] Sending NMI from CPU 1 to CPUs 0: [ 435.926875][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 436.315875][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 436.322786][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 436.330012][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 436.340096][ T27] Call Trace: [ 436.343393][ T27] [ 436.346338][ T27] dump_stack_lvl+0x188/0x250 [ 436.351047][ T27] ? show_regs_print_info+0x20/0x20 [ 436.356282][ T27] ? load_image+0x410/0x410 [ 436.360821][ T27] panic+0x2f8/0x850 [ 436.364741][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 436.370406][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 436.374944][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 436.380524][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 436.386711][ T27] watchdog+0xe5a/0xe60 [ 436.390904][ T27] kthread+0x42e/0x520 [ 436.395001][ T27] ? hungtask_pm_notify+0x40/0x40 [ 436.400090][ T27] ? kthread_blkcg+0xd0/0xd0 [ 436.404746][ T27] ret_from_fork+0x1f/0x30 [ 436.409204][ T27] [ 436.412610][ T27] Kernel Offset: disabled [ 436.416953][ T27] Rebooting in 86400 seconds..