last executing test programs: 1m52.698451008s ago: executing program 4 (id=5): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x7fff}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) r2 = fcntl$dupfd(r0, 0x405, r1) r3 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000200)={0x1, @output={0x1000, 0x0, {0x8, 0x7}, 0x1}}) r4 = dup(r2) write$cgroup_subtree(r4, &(0x7f00000002c0)={[{0x0, 'rdma'}]}, 0xfdef) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)={0x14, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000713050300"/22, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x7fa, 0x65c0, 0x6, 0x0, 0xffffffffffffffff, 0xcb05}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = syz_open_procfs(0x0, &(0x7f00000004c0)='ns\x00') getdents(r8, 0x0, 0x3b) 1m52.55207381s ago: executing program 4 (id=8): eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) r3 = socket$nl_crypto(0x10, 0x3, 0x15) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x204001) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r5, 0x0, 0x6}, 0xc) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) ptrace$pokeuser(0x6, r2, 0x358, 0x0) 1m51.367233078s ago: executing program 4 (id=11): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) madvise(&(0x7f00000ea000/0x4000)=nil, 0x4000, 0x15) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0xc0, &(0x7f0000002140)=ANY=[@ANYBLOB='nostrict,novrs,umask=00000000000000000177777,uid=forget,volume=00000000000000001023,noadinicb,novrs,dmode=00000000000000000000003,iocharset=cp874,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c001b6b2b7b95983d86d5ddaf48d86840ef4cf77c2f98177a6fb5fc4afc6da77db514171b9e2984edcaed83282f7fea74be9c8046ba6ab7f63f5d56d47df5febc4012fd70ec470d4527301c6128e0a92b5eb3b67796e7a483cdebdbf871ddc63d4d14bad1793ee72c3e00f4cb69cbd31e5389c1b38cc57339abb02736ce8e65de5142ab9593203f59ad361edec5e249f7c2a45f284b4a4682f7a0d1d02f6703ee15698a0ac8d4141c79a82876c96d743697c517d4456672f14fc0c9"], 0x1, 0xc32, &(0x7f0000009100)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002300)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched_retired(r4, &(0x7f0000002cc0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002340)=@deltclass={0xdc, 0x29, 0x2, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0xe}, {0x5, 0xffe0}, {0xf, 0x2}}, [@c_atm={{0x8}, {0x34, 0x2, [@TCA_ATM_HDR={0x30, 0x3, "4abfcbc621385fde85d8453830314eb7ec15e1e6838eb94ad1092311ec83a20a2f4f1db15337851b3bfd6f8d"}]}}, @c_cbq={{0x8}, {0x24, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x3, 0x6, 0x3, 0x400, 0xfffffff2}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x93, 0x4, 0x7, 0xff, 0x1, 0x9}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xf7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x81}}}, @c_cbq={{0x8}, {0x4}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0x1}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20040001}, 0x4006010) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=@gettaction={0x8c, 0x32, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}]}, 0x8c}}, 0x48080) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r9, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 1m49.516312816s ago: executing program 4 (id=17): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0xc0086c43, &(0x7f0000000f40)=0x6ff) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000f40)=0x6ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000070a01f0c304000000000000000002020900020073797a32000000000900010073797a3000000000000000000000000000000000e22aac664360320fba4df0f659c33f2742c535c238abe6d51e68cdeecbce894d2c43f4e7c6369cb28e0afbe903bbf2319ba4ffcd30af6149fdfcf1d009db5876cb02da5c15061caeec8ac05b880066a1ec57bae426bd3457794e6f6cca41578191df11e383"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1m46.873651156s ago: executing program 4 (id=23): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4044, &(0x7f0000000300)=ANY=[], 0x0, 0x5e59, &(0x7f0000005d80)="$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") r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0xffffff4f) semop(0xffffffffffffffff, &(0x7f0000000140)=[{0x3, 0x8, 0x1000}], 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = socket$inet6(0xa, 0x3, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000d00ffffffff080010000000000008000200ffffff7f080012007fffffff080013"], 0x54}}, 0x4004) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0xffffffff}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@can, 0x80, 0x0, 0x0, &(0x7f0000001740)=[{0x10, 0x29, 0x7}], 0x10}}], 0x2, 0x0) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/pids.max\x00', 0x2, 0x0) r5 = dup(r3) setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f0000000300)=0x6, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000240)={0x80000001, 0x8000, 0xfffff800, 0x4, 0x7e, "28122ce7ae20d81286245d18ea3092e6add878", 0x1, 0x95f}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001900010000000000b51d0000e0000002001c00000000000000000000000000e600000000000000000000000000000a00000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000fbfffffffffffffffdffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000001000000000c00150007000000217d976d"], 0xc4}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@empty, 0x1fe, 0x0, 0x0, 0xe80, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x8, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x4004) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, 0xb8}}, 0x0) r10 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000206a05044000000000000109022400010000000309040000010300dfbd42573def98d46c334d8f0b28dd9400000921270b000122060009058103ff03000000"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(0x0, 0x0, 0x0) 1m46.682615249s ago: executing program 32 (id=23): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4044, &(0x7f0000000300)=ANY=[], 0x0, 0x5e59, &(0x7f0000005d80)="$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") r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0xffffff4f) semop(0xffffffffffffffff, &(0x7f0000000140)=[{0x3, 0x8, 0x1000}], 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = socket$inet6(0xa, 0x3, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000d00ffffffff080010000000000008000200ffffff7f080012007fffffff080013"], 0x54}}, 0x4004) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0xffffffff}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@can, 0x80, 0x0, 0x0, &(0x7f0000001740)=[{0x10, 0x29, 0x7}], 0x10}}], 0x2, 0x0) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/pids.max\x00', 0x2, 0x0) r5 = dup(r3) setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f0000000300)=0x6, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000240)={0x80000001, 0x8000, 0xfffff800, 0x4, 0x7e, "28122ce7ae20d81286245d18ea3092e6add878", 0x1, 0x95f}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000001900010000000000b51d0000e0000002001c00000000000000000000000000e600000000000000000000000000000a00000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000fbfffffffffffffffdffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000001000000000c00150007000000217d976d"], 0xc4}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@empty, 0x1fe, 0x0, 0x0, 0xe80, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x8, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x4004) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, 0xb8}}, 0x0) r10 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000206a05044000000000000109022400010000000309040000010300dfbd42573def98d46c334d8f0b28dd9400000921270b000122060009058103ff03000000"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(0x0, 0x0, 0x0) 4.778616857s ago: executing program 0 (id=402): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}], 0x2}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 4.5742829s ago: executing program 0 (id=407): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r1], 0x0) 2.832200016s ago: executing program 0 (id=420): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0xd000000, &(0x7f0000000540)=ANY=[@ANYBLOB="003e4b8298d91d788a570591d63c24d40f4900e8febef00ad146cea58a0a1e92837cc6f4ad57ab6887740f7b2184af9dc533d9becfdb834fbfd05d750447e3554e2ddda0097c10922fd7b87013e20464388bd6f51412214eb39d7eda781d2d46431e00db4fd6185a814a5bff150c7457ed12653f9869e9fc7a0c8a84b0ac062f80bbb1e8c99edc30b0a0b92382116961c071598c4357a1ac947e86eaa3eca445ff0e578e02fc4c56bb7867ee3fba0f68a8a29fca69313fb01344d85492e2777f5d770332ae9290886f3a8bd8da49457a4aa449001eb6571d704d048080018cab3530774d3b39b4f042b3aadfa8f190f9e350acf1677e"], 0x1, 0x1cf, &(0x7f00000002c0)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYezz8mk8ZK71OZb5kvLBI6tSKqpkTvijNZjT8znCHp2yFhIaGk8QVCYsGE4YjdbYNriAnpjQwpCmEMSapsYm1bTkzJ4SZn81tgUJL8gmm0KMcS2dKWBwQqjr501LzrUOi24xtTx3YzvAcPs6zpqBP0Oi4BIPTQsH/MiBjEhoayjTWMi21XfClSOOvhNdqY6cMBnd7pmWwAGVpAJEroTxZsJ6E5BUeOpqaRinJCQ2bJBKS3AoMlRm27uFcLdDAgBRtKgwMDNsZYXELAddgjFEwCkbBKBgFo2AUjIJRMApGwSgYBSMCAAIAAP//QJCYyw==") read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) 2.381298764s ago: executing program 0 (id=426): socket$alg(0x26, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x208182) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 2.374667993s ago: executing program 2 (id=427): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl726\x00', [0x30, 0x0, 0x8, 0xfffffffb, 0x1000, 0x100, 0x9, 0x6, 0x200d, 0x8, 0xfffffffa, 0x2, 0xfffffff8, 0x5, 0x6, 0x4, 0x1, 0x7, 0x1, 0x1, 0x10, 0x5, 0x9, 0x1, 0x2, 0x4, 0x1, 0xc005, 0x59, 0x7, 0x4]}) 2.236382056s ago: executing program 2 (id=429): poll(0x0, 0x0, 0xffffffffffbffff8) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 2.177436147s ago: executing program 0 (id=430): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x8, 0x0, 0x0) 2.093844638s ago: executing program 0 (id=432): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001240)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.991502199s ago: executing program 1 (id=433): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000a80)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$evdev(0x0, 0x0, 0x60000) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) 1.685867404s ago: executing program 1 (id=436): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 1.642549264s ago: executing program 3 (id=437): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c0d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x9, 0x9}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 1.33385488s ago: executing program 2 (id=439): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYBLOB="80000200e180000008001b000000000087637539412b7bb03f00a8370ff1e83951192d4d11de52d5a07c31c6297ca5b9f62d004a2bf91998510e99d516d1306ea3cb23c5a8dd0adf52b8b15cfe68f4bfc86b71"], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x8000, 0x0, 0x2, 0x4, {{0xa, 0x4, 0x2, 0x7, 0x28, 0x68, 0x0, 0x6f, 0x2f, 0x0, @loopback, @multicast1, {[@lsrr={0x83, 0x13, 0x24, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) syz_open_procfs$userns(0x0, &(0x7f0000000340)) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x8002}, 0x24040000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) socket$inet(0x2, 0x4, 0xe052) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x1) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000500)="9f68accc98e1", 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file1\x00', 0x12b) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peekuser(0x3, r3, 0x128) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r4}, 0x10) 1.271905711s ago: executing program 1 (id=440): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2000000000000000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000040000003b00000008000300", @ANYRES32=r2, @ANYBLOB="470033008000000008021100000008021100000050505050505000e97f099a945851500064000000000602020213020201028b9803010104"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.259497891s ago: executing program 2 (id=441): unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") 1.197705432s ago: executing program 5 (id=442): r0 = openat$comedi(0xffffff9c, &(0x7f0000001a80)='/dev/comedi3\x00', 0x181000, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8008640b, 0x0) 1.117963513s ago: executing program 5 (id=443): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e07090908"], 0xa) socket$inet6(0xa, 0x805, 0x0) chdir(0x0) 1.117770043s ago: executing program 5 (id=444): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100004c, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0xae8, 0x863, 0x0) 1.111430063s ago: executing program 1 (id=445): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0xb1, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.067564774s ago: executing program 3 (id=446): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0x8000c00) 960.809985ms ago: executing program 1 (id=447): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0x0) mq_open(&(0x7f0000000680)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05|\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7jo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2\x1e\xd8\xdfJ\xcc\xd7\x9b\xfa\xf0\x0f\x05\xf1\xc4 \xde@\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xec\x87\x1b\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8\x99$\xfb(\x9b5\xcbF4?O\x1d\xd7\x01*\xc9\xd6L\x86 \x1b\xab9\x1b\x12k\xf9\xec\xd8\x16E\x11-\xfd\x10\x89\x8d\xccbP\x14\x89w\xef\x90\x1d\xc9\x02\xeb\x01V\xfbm\x86\x8a\xc1.m\xd0\xa2\xa4\xc9\a;(\n\xc0\"\x1f\xe4\x1d\x85\xb3\x95\xec\xbb\x9b\x01\x85\xffx\xf2\a\f=\xd1\xcf\xec\xb8!\v\x958\xbf\x15b-\x92\xd6\xb5\xbf\xe2\x92\xc2\xa3}\xd0;\xd1\x96\x86\x8a\x1b\xe1w\xf9\xb0\xd2\xab\xc9\x8a\x19\n\xc5o\x1e\x13/\xe4\x91\x7f\xa5\xf1\xddW\xdb\x98\xcd\x94\xfc\x90\xa0\x05*', 0x6e93ebbbcc0884f2, 0x15b, &(0x7f0000000040)={0x0, 0x1, 0x5}) symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 778.846728ms ago: executing program 5 (id=448): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000010c0)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'team_slave_0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x40000, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) close(r1) 758.705318ms ago: executing program 3 (id=449): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x26c, 0x0, 0xa, 0xd0e0000, 0x248, 0x100, 0x248, 0x1d8, 0x1d8, 0x248, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00', {0xff}}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@inet=@ecn={{0x24}, {0x20, 0x1, 0x9, 0x2}}, @common=@addrtype={{0x2c}, {0x6e77d6933fcf49f9, 0x1, 0x0, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x5, 0x800, 'netbios-ns\x00', {0x6}}}}, {{@ip={@remote, @broadcast, 0x0, 0xff000000, 'ipvlan1\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x62, 0x1, 0x12}, 0x3202, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x1], 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2c8) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) unlink(0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000100)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x106547, 0x0, 0x0, 0x0, 0x9, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1aa654fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x10000]}}) syz_80211_join_ibss(&(0x7f0000000240)='wlan0\x00', &(0x7f0000000280)=@default_ibss_ssid, 0x6, 0x1) sendmmsg$inet(r1, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000d00)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002500), 0x0, &(0x7f0000002580)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=[@ip_retopts={{0x10, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0xc9}]}}}], 0x10}}], 0x4, 0x40040c1) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x141841, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, 0x0) write$tun(r4, 0x0, 0x57) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r11, 0x2, {0x2, 0xf0, 0x1}, 0x3}, 0x18) sendmsg$can_j1939(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x2, 0x1ee}}, 0x18, 0x0, 0x1, 0x0, 0x0, 0x400c0}, 0x0) read$FUSE(r3, &(0x7f0000003c40)={0x2020}, 0xffffff0a) 554.005051ms ago: executing program 2 (id=450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x1, {}, 0xff}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 553.533651ms ago: executing program 3 (id=451): listen(0xffffffffffffffff, 0x7d4165c9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe7630a33b6deca160d8c2fbff48eb96428300"}, 0xd8) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 521.466362ms ago: executing program 1 (id=452): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}, 0x7ffffffe}, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x16}, @window={0x3, 0x0, 0xfffc}, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) socket$netlink(0x10, 0x3, 0x0) 492.942472ms ago: executing program 2 (id=453): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x3, 0x519, &(0x7f0000001300)="$eJzs3c9vI1cdAPDvTOJtsptiFxAqlSgVLcpWsHbS0DZCCMoFTpWAcl9C4kRR7DiKnbKJKkjFf4CQQOLEiQsSfwBS1QN/AKpUCS6IAwIEQrCFA+JHB9ke041jJ6k2yezGn4/04vdmxvN9byy/+eGXmQAm1lMR8VJETEXEsxFRzqeneYrDfuou987d11a7KYkse+WvSST5tMG6uuXpiLiRv20mIr725YhvJsfjtvcPtlYajfpuXq51mju19v7Brc3mykZ9o769tLT4wvKLy88vL2S5+2pnZZD5yZc+/8anv/W723+++e1utT73kSjFUDvOU7/ppd62GOhuo92LCFaAqbw9paIrAgDAmXSP8T8YEZ/oHf+XY6p3NDdkqoiaAQAAAOcl+8Jc/CeJyAAAAIArK42IuUjSaj4WYC7S9Fp+beDDcT1ttNqdT6239rbXuvMiKlFK1zcb9YV8rHAlSkm3vJiPsR2UnxsqL0XEYxHx/fJsr1xdbTXWCr72AQAAAJPixtD5/z/KaS9/uhH/JwAAAAA8uCpjCwAAAMBV4ZQfAAAArr7h8/83CqoHAAAAcCG+8vLL3ZQNnn+99ur+3lbr1Vtr9fZWtbm3Wl1t7e5UN1qtjd49+5qnra/Rau18Jrb37tQ69Xan1t4/uN1s7W13bm8eeQQ2AAAAcIke+/ibv04i4vCzs70U+X0AAY74Q9EVAM7TVNEVAArjLt4wuUpFVwAoXHLKfIN3AADg4Tf/0eO//w+e/+/aAFxtxvoAwOSZjtmiqwAUpGQEIEy0NCI+0M8+Mm6Zsb////KsUbIs4q3yvVNcXwQAgMs110tJWs3PA+YiTavViEcj0kqUkvXNRn0hPz/4Vbn0SLe82HtncuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgL8uSyAAAAIArLSL9U9K7m3/EfPmZueHrA9eSf5bjj3nhR6/84M5Kp7O72J3+t96zvK5FROeH+fTnxj4+DAAAADhvyeHYWf3z9Px18VJrBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAEeOfua6uDdJlx//LFiKiMij8dM73XmShFxPW/JzF9z/uSiJg6h/iHr0fE46PiJ/FulmWVvBbD8dOImL3g+JXephkf/8Y5xIdJ9ma3/3lp1Pcvjad6r6O/f9N5ul/j+780j/x4r58b1f89emxtzZExnnj7Z7Wx8V+PeGJ6dP8z6H+TMfGfPra2f2dZdjzGN75+cDAufvbjiPmR+5/kSKxap7lTa+8f3NpsrmzUN+rbS0uLLyy/uPz88kJtfbNRz/+OjPG9j/383ZPaf31E/N/+pt//ntT+Z8atdMh/375z90P9bGlU/JtPj9z/zsSY+Gm+7/tknu/Onx/kD/v5ez3507eePKn9a2O2/2mf/80ztv/Zr37392dcFAC4BO39g62VRqO+e0Jm5gzLPIyZX8w8ENV4n5nsO/1P7oRlysXV8F9nXrh7tPrelEGrCt+8RzLZpcWaigekyf/PFNotAQAAF+C9g/6iawIAAAAAAAAAAAAAAAAAAACT6zJuJzYc87CYpgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnOh/AQAA///uxuBB") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 252.970886ms ago: executing program 5 (id=454): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 182.260977ms ago: executing program 3 (id=455): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0416"], 0x9) 24.451289ms ago: executing program 5 (id=456): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x1, 0x9, @loopback, 0xd9b}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@dstopts_2292={{0x18, 0x29, 0x3e, {0x2c}}}], 0x18}}], 0x2, 0x4004804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=457): r0 = io_uring_setup(0x6dc6, &(0x7f00000001c0)={0x0, 0xcf51, 0x400, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): imeout [ 53.683793][ T1326] Bluetooth: hci1: command 0x0409 tx timeout [ 53.748755][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 53.755400][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 53.871641][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.881979][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.903914][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.914902][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.968508][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.978062][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.001700][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.011329][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.041354][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.054487][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.067438][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.096325][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.155259][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.188252][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.201100][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.213812][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.239900][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.263282][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.288409][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.298719][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.310198][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.320115][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.347299][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.354791][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.363710][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.374153][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.381406][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.390787][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.399432][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.407072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.419168][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.439771][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.453134][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.463004][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.473920][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.481014][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.490573][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.515852][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.524164][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.533317][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.542994][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.551683][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.558783][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.571039][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.579967][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.588702][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.596997][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.604062][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.612171][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.620976][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.629678][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.638135][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.646731][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.655412][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.664214][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.673214][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.693733][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.706140][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.715216][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.724686][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.732867][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.740822][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.750619][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.759121][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.767602][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.776177][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.783251][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.794430][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.802343][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.811024][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.819460][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.835839][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.848825][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.857425][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.870614][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.877676][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.887037][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.915318][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.935337][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.965802][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.973795][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.982312][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.991020][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.000944][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.009390][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.017732][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.026068][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.034582][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.044160][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.053045][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.062686][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.071610][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.079966][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.089176][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.109724][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.126681][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.149428][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.158397][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.192921][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.207412][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.221368][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.231250][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.240428][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.247545][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.255808][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.264409][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.273349][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.280469][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.289568][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.297944][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.306441][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.321933][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.357974][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.368270][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.382081][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.391923][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.424196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.434835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.449906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.458313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.468551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.476879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.485417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.509769][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.527791][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.545803][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.554885][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.568026][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.577598][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.586135][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.624808][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.633941][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.648552][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.656768][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.666154][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.674182][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.682701][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.690791][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.703521][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.711084][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.719369][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.729045][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.750215][ T4185] device veth0_vlan entered promiscuous mode [ 55.764186][ T4240] Bluetooth: hci1: command 0x041b tx timeout [ 55.770911][ T4240] Bluetooth: hci4: command 0x041b tx timeout [ 55.780577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.789142][ T4240] Bluetooth: hci2: command 0x041b tx timeout [ 55.797649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.806614][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.813803][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.826434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.835385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.836477][ T4240] Bluetooth: hci0: command 0x041b tx timeout [ 55.844471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.854742][ T4240] Bluetooth: hci3: command 0x041b tx timeout [ 55.859108][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.870855][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.883280][ T4185] device veth1_vlan entered promiscuous mode [ 55.893255][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.926972][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.937201][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.951758][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.961791][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.970929][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.980155][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.999882][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.019287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.034277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.046294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.058373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.067464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.077248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.085889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.094287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.107615][ T4184] device veth0_vlan entered promiscuous mode [ 56.127514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.137487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.150522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.160382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.171290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.179971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.189432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.197867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.206195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.220105][ T4185] device veth0_macvtap entered promiscuous mode [ 56.227933][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.256668][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.265399][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.275116][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.285992][ T4184] device veth1_vlan entered promiscuous mode [ 56.296073][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.305905][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.328355][ T4183] device veth0_vlan entered promiscuous mode [ 56.342840][ T4185] device veth1_macvtap entered promiscuous mode [ 56.358825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.373991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.384773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.394253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.431658][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.442958][ T4183] device veth1_vlan entered promiscuous mode [ 56.455806][ T4184] device veth0_macvtap entered promiscuous mode [ 56.465045][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.480155][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.490094][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.499178][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.507664][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.516478][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.525142][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.537207][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.549429][ T4184] device veth1_macvtap entered promiscuous mode [ 56.558873][ T4182] device veth0_vlan entered promiscuous mode [ 56.574967][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.583120][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.593557][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.601952][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.609922][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.617536][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.627110][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.640076][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.649504][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.658215][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.669255][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.697081][ T4182] device veth1_vlan entered promiscuous mode [ 56.714576][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.727844][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.740085][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.747423][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.756643][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.765672][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.775224][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.784052][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.811594][ T4183] device veth0_macvtap entered promiscuous mode [ 56.821556][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.833440][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.845104][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.853251][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.861812][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.870024][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.877424][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.884997][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.893528][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.913790][ T4183] device veth1_macvtap entered promiscuous mode [ 56.926480][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.937924][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.949610][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.958328][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.978152][ T4182] device veth0_macvtap entered promiscuous mode [ 56.988020][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.998967][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.007110][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.016039][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.037133][ T4182] device veth1_macvtap entered promiscuous mode [ 57.067885][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.076156][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.086366][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.099288][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.113392][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.123974][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.135827][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.167979][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.180546][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.191188][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.204254][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.214332][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.225004][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.236048][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.248222][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.258575][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.267078][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.276939][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.291156][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.301676][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.312023][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.323519][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.334700][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.345850][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.362978][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.371954][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.381090][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.391886][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.402662][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.412610][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.423186][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.433478][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.444130][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.455745][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.472255][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.484152][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.493734][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.502708][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.512194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.522069][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.551279][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.560182][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.569693][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.578378][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.597672][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.607189][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.618120][ T4186] device veth0_vlan entered promiscuous mode [ 57.635657][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.648947][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.660629][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.673929][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.681730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.710667][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.720488][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.729928][ T4186] device veth1_vlan entered promiscuous mode [ 57.736642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.745762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.806112][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.807434][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.821569][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.825454][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.837427][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 57.839606][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.852978][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 57.859160][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 57.859386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.909721][ T4186] device veth0_macvtap entered promiscuous mode [ 57.920049][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 57.931609][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 57.953496][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.970129][ T4186] device veth1_macvtap entered promiscuous mode [ 57.978986][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.995693][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.007259][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.022914][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.037009][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.044970][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.056787][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.070381][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.078142][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.086597][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.104267][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.115319][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.126899][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.138042][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.149635][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.161213][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.171688][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.182418][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.193654][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.204586][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.215615][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.225860][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.244147][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.277847][ T4300] loop2: detected capacity change from 0 to 2048 [ 58.289866][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.301188][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.312139][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.323068][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.334240][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.352836][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.353083][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.370215][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.378039][ T4300] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 58.382879][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.406160][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.415502][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.424668][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.450267][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.478582][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.509831][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.527637][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.700074][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.705464][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.708007][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.717499][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.272647][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.340104][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.359217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.385572][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.425934][ T4311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.450039][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.613342][ T4314] loop0: detected capacity change from 0 to 2048 [ 59.696649][ T4314] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 59.788990][ T4297] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 60.130357][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 60.158840][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.228804][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.238387][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 60.248513][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!! [ 60.257613][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!! [ 60.266786][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 60.276022][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 60.285135][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 60.294278][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 60.608670][ T4270] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 60.768294][ T4256] Bluetooth: hci1: command 0x0419 tx timeout [ 60.779352][ T4256] Bluetooth: hci4: command 0x0419 tx timeout [ 60.785593][ T4256] Bluetooth: hci2: command 0x0419 tx timeout [ 60.792479][ T4256] Bluetooth: hci0: command 0x0419 tx timeout [ 60.799141][ T4256] Bluetooth: hci3: command 0x0419 tx timeout [ 60.876849][ T4329] loop0: detected capacity change from 0 to 4096 [ 60.895923][ T4329] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 60.929517][ T4270] usb 4-1: Using ep0 maxpacket: 16 [ 60.987118][ T4329] ntfs3: loop0: failed to convert "c46c" to cp864 [ 61.001819][ T4331] loop1: detected capacity change from 0 to 2048 [ 61.012943][ T4329] capability: warning: `syz.0.9' uses deprecated v2 capabilities in a way that may be insecure [ 61.044368][ T4331] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.068761][ T4270] usb 4-1: config 0 has no interfaces? [ 61.119088][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.158526][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.169818][ T4297] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 61.189074][ T4297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.461728][ T4297] usb 3-1: config 0 descriptor?? [ 61.464582][ T4270] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 61.477746][ T4335] loop0: detected capacity change from 0 to 32768 [ 61.486373][ T4270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.514417][ T4270] usb 4-1: Product: syz [ 61.539291][ T4335] xfs: Unknown parameter 'obj_user' [ 62.017936][ T4270] usb 4-1: Manufacturer: syz [ 62.159601][ T4333] ptrace attach of "./syz-executor exec"[4182] was attempted by ""[4333] [ 62.222503][ T4270] usb 4-1: SerialNumber: syz [ 62.261555][ T4270] r8152-cfgselector 4-1: config 0 descriptor?? [ 62.284192][ T4333] loop4: detected capacity change from 0 to 2048 [ 62.379398][ T4333] ======================================================= [ 62.379398][ T4333] WARNING: The mand mount option has been deprecated and [ 62.379398][ T4333] and is ignored by this kernel. Remove the mand [ 62.379398][ T4333] option from the mount to silence this warning. [ 62.379398][ T4333] ======================================================= [ 62.462418][ T4333] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 62.535136][ T4297] hid-generic 0003:05AC:4262.0001: unbalanced delimiter at end of report description [ 62.574047][ T4297] hid-generic: probe of 0003:05AC:4262.0001 failed with error -22 [ 62.582370][ T4270] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 62.646917][ T4333] autofs4:pid:4333:autofs_fill_super: called with bogus options [ 62.795451][ T4182] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 62.827303][ T4270] usb 4-1: USB disconnect, device number 2 [ 62.837267][ T4182] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 63.219291][ T4353] bridge0: port 3(netdevsim0) entered blocking state [ 63.226169][ T4353] bridge0: port 3(netdevsim0) entered disabled state [ 63.235024][ T4353] device netdevsim0 entered promiscuous mode [ 63.241563][ T4353] bridge0: port 3(netdevsim0) entered blocking state [ 63.248664][ T4353] bridge0: port 3(netdevsim0) entered forwarding state [ 64.066353][ T4297] usb 3-1: USB disconnect, device number 2 [ 64.110009][ T4350] xt_recent: Unsupported userspace flags (000000de) [ 64.351843][ T4359] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.20'. [ 65.346355][ T4182] syz-executor (4182) used greatest stack depth: 21152 bytes left [ 65.473639][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.473791][ T4361] loop1: detected capacity change from 0 to 32768 [ 65.487209][ T4366] loop3: detected capacity change from 0 to 4096 [ 65.611119][ T4361] XFS: ikeep mount option is deprecated. [ 65.646353][ T4355] loop2: detected capacity change from 0 to 32768 [ 65.657704][ T4361] XFS: ikeep mount option is deprecated. [ 65.679227][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.784745][ T4355] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.18 (4355) [ 65.816757][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.917058][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.971926][ T4355] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 66.032920][ T4355] BTRFS info (device loop2): using free space tree [ 66.098125][ T4355] BTRFS info (device loop2): has skinny extents [ 66.213652][ T4366] loop3: detected capacity change from 0 to 32768 [ 66.518861][ T4355] BTRFS info (device loop2): enabling ssd optimizations [ 66.803796][ T4419] loop3: detected capacity change from 0 to 64 [ 66.890745][ T4395] chnl_net:caif_netlink_parms(): no params data found [ 68.301629][ T4395] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.317711][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 68.339806][ T4395] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.347961][ T4395] device bridge_slave_0 entered promiscuous mode [ 68.400641][ T4449] loop1: detected capacity change from 0 to 128 [ 69.593671][ T4395] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.628753][ T4395] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.666597][ T4395] device bridge_slave_1 entered promiscuous mode [ 69.684862][ T4440] loop0: detected capacity change from 0 to 32768 [ 69.793872][ T4440] XFS (loop0): Invalid device [./file0], error=-15 [ 69.870045][ T4395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.004901][ T4395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.657751][ T4457] Bluetooth: hci0: command 0x041b tx timeout [ 70.661118][ T4473] process 'syz.2.32' launched './file0' with NULL argv: empty string added [ 70.874441][ T4395] team0: Port device team_slave_0 added [ 71.099232][ T4395] team0: Port device team_slave_1 added [ 71.170951][ T4484] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 71.266089][ T4395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.280928][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.287655][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.322276][ T4395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.358788][ T4395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.406331][ T4482] IPv6: Can't replace route, no match found [ 71.520581][ T4457] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.590081][ T4395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.597108][ T4395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.662770][ T4395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.678015][ T4504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'. [ 71.769641][ T4501] loop3: detected capacity change from 0 to 16384 [ 71.842688][ T4512] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.880059][ T4395] device hsr_slave_0 entered promiscuous mode [ 71.889591][ T4395] device hsr_slave_1 entered promiscuous mode [ 71.897800][ T4395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.907501][ T4395] Cannot create hsr debugfs directory [ 71.952768][ T4457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.003248][ T4457] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.036559][ T4457] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.066057][ T4457] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 72.084817][ T4457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.148334][ T4457] usb 2-1: config 0 descriptor?? [ 72.184510][ T4517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 72.254264][ T4524] device macvlan2 entered promiscuous mode [ 72.386083][ T9] device hsr_slave_0 left promiscuous mode [ 72.403888][ T9] device hsr_slave_1 left promiscuous mode [ 72.415685][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.425912][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.439834][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.468881][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.486933][ T9] device bridge_slave_1 left promiscuous mode [ 72.667023][ T4457] ortek 0003:1223:3F07.0002: unexpected long global item [ 72.695105][ T4457] ortek: probe of 0003:1223:3F07.0002 failed with error -22 [ 73.167153][ T4325] usb 2-1: USB disconnect, device number 2 [ 73.185109][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.226630][ T4457] Bluetooth: hci0: command 0x040f tx timeout [ 73.256761][ T9] device bridge_slave_0 left promiscuous mode [ 73.268161][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.312185][ T4540] loop3: detected capacity change from 0 to 128 [ 73.330902][ T4542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 73.346203][ T9] device veth1_macvtap left promiscuous mode [ 73.366834][ T9] device veth0_macvtap left promiscuous mode [ 73.414543][ T9] device veth1_vlan left promiscuous mode [ 73.420711][ T9] device veth0_vlan left promiscuous mode [ 73.460217][ T4546] netlink: 68 bytes leftover after parsing attributes in process `syz.3.48'. [ 73.507398][ T4546] loop3: detected capacity change from 0 to 1024 [ 73.710828][ T9] team0 (unregistering): Port device team_slave_1 removed [ 73.733268][ T9] team0 (unregistering): Port device team_slave_0 removed [ 73.766049][ T4552] loop1: detected capacity change from 0 to 128 [ 73.774212][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.798074][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.897627][ T9] bond0 (unregistering): Released all slaves [ 74.537147][ T4558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.53'. [ 74.732737][ T4268] hfsplus: b-tree write err: -5, ino 4 [ 75.025057][ T4580] fuse: Bad value for 'fd' [ 75.486927][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 75.595614][ T4395] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.620843][ T4395] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.650604][ T4395] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.747162][ T4395] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.834118][ T4600] FAULT_INJECTION: forcing a failure. [ 75.834118][ T4600] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.949332][ T4600] CPU: 0 PID: 4600 Comm: syz.3.62 Not tainted 5.15.188-syzkaller #0 [ 75.957356][ T4600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.967808][ T4600] Call Trace: [ 75.971092][ T4600] [ 75.974022][ T4600] dump_stack_lvl+0x168/0x230 [ 75.978817][ T4600] ? show_regs_print_info+0x20/0x20 [ 75.984026][ T4600] ? load_image+0x3b0/0x3b0 [ 75.988538][ T4600] ? __lock_acquire+0x7c60/0x7c60 [ 75.993575][ T4600] should_fail+0x38c/0x4c0 [ 75.998008][ T4600] _copy_from_user+0x2e/0x170 [ 76.002699][ T4600] __se_sys_memfd_create+0x189/0x430 [ 76.008003][ T4600] ? __x64_sys_memfd_create+0x60/0x60 [ 76.013387][ T4600] ? lockdep_hardirqs_on+0x94/0x140 [ 76.018594][ T4600] do_syscall_64+0x4c/0xa0 [ 76.023113][ T4600] ? clear_bhb_loop+0x30/0x80 [ 76.027923][ T4600] ? clear_bhb_loop+0x30/0x80 [ 76.032370][ T4395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.032610][ T4600] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.045063][ T4600] RIP: 0033:0x7f5a83df9929 [ 76.049756][ T4600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.069377][ T4600] RSP: 002b:00007f5a81c60e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 76.077798][ T4600] RAX: ffffffffffffffda RBX: 000000000001f288 RCX: 00007f5a83df9929 [ 76.085677][ T4395] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.085768][ T4600] RDX: 00007f5a81c60ef0 RSI: 0000000000000000 RDI: 00007f5a83e7c634 [ 76.100297][ T4600] RBP: 0000200000000240 R08: 00007f5a81c60bb7 R09: 00007f5a81c60e40 [ 76.108281][ T4600] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000000c0 [ 76.116359][ T4600] R13: 00007f5a81c60ef0 R14: 00007f5a81c60eb0 R15: 000020000001f500 [ 76.124349][ T4600] [ 76.134802][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.153435][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.189401][ T4607] loop2: detected capacity change from 0 to 4096 [ 76.210222][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.211169][ T4605] [U] „ [ 76.220615][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.224160][ T4325] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 76.251760][ T4474] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.258971][ T4474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.269564][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.278742][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.287341][ T4474] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.294576][ T4474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.311138][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.322763][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.350091][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.361206][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.369966][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.378136][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.437307][ T4395] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.506763][ T1108] cfg80211: failed to load regulatory.db [ 76.594037][ T4325] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.604486][ T4395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.647402][ T4325] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.332844][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.342920][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.356052][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.364950][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.374569][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.383886][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.393126][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.429165][ T4325] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 77.429194][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 77.429213][ T4325] usb 1-1: SerialNumber: syz [ 77.505840][ T4325] usb 1-1: 0:2 : does not exist [ 77.631624][ T4622] loop3: detected capacity change from 0 to 4096 [ 77.762550][ T4622] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 77.844559][ T4622] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 77.964909][ T4622] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 78.006701][ T4622] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -5 while reading attribute inode (mft_no 0x0, type 0xb0, name_len 0). Marking corrupt inode and base inode 0x0 as bad. Run chkdsk. [ 78.015350][ T4593] udc-core: couldn't find an available UDC or it's busy [ 78.065369][ T4593] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.071713][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.079817][ T4622] ntfs: (device loop3): load_system_files(): Failed to load $MFT/$BITMAP attribute. [ 78.317393][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.454800][ T4622] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 78.518683][ T4325] usb 1-1: USB disconnect, device number 2 [ 78.701805][ T4395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.176950][ T4672] 9pnet: Insufficient options for proto=fd [ 80.266050][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.300353][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.335717][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.368258][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.378167][ T4681] fuse: Bad value for 'fd' [ 80.402382][ T4395] device veth0_vlan entered promiscuous mode [ 80.429335][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.437594][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.486727][ T4395] device veth1_vlan entered promiscuous mode [ 80.618699][ T4646] loop2: detected capacity change from 0 to 32768 [ 80.626808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.668621][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.699361][ T4646] XFS (loop2): Invalid device [./file0], error=-15 [ 80.719705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.758892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.800207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.839906][ T4395] device veth0_macvtap entered promiscuous mode [ 80.867526][ T4395] device veth1_macvtap entered promiscuous mode [ 81.068263][ T4395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.113252][ T4395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.163629][ T4395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.197409][ T1108] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 81.210304][ T1108] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 81.229930][ T4395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.252268][ T1108] usb 1-1: config 220 has no interface number 2 [ 81.267552][ T4395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.287677][ T1108] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 81.313433][ T4395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.342135][ T1108] usb 1-1: config 220 interface 0 has no altsetting 0 [ 81.363328][ T4395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.384019][ T1108] usb 1-1: config 220 interface 76 has no altsetting 0 [ 81.414946][ T1108] usb 1-1: config 220 interface 1 has no altsetting 0 [ 81.433569][ T4395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.451092][ T4395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.479536][ T4698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.82'. [ 81.511560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.529207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.571845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.585964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.616158][ T4395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.659628][ T4395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.678697][ T1108] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 81.687758][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.788325][ T1108] usb 1-1: Product: syz [ 81.798856][ T1108] usb 1-1: Manufacturer: syz [ 81.803472][ T1108] usb 1-1: SerialNumber: syz [ 81.825288][ T4395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.848148][ T4395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.867734][ T4395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.912706][ T4395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.934431][ T4395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.977196][ T4395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.019364][ T4395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.036476][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.054363][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.095339][ T4395] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.118210][ T4395] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.137106][ T4395] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.154974][ T4395] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.186666][ T4719] loop3: detected capacity change from 0 to 64 [ 82.283228][ T4719] hfs: unable to locate alternate MDB [ 82.309173][ T4719] hfs: continuing without an alternate MDB [ 82.445392][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.467194][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.504217][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.537980][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.564987][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.595044][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.938146][ T4732] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.982067][ T4732] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 83.039181][ T4729] loop5: detected capacity change from 0 to 1024 [ 83.327903][ T4680] loop0: detected capacity change from 0 to 40427 [ 83.699820][ T1108] usb 1-1: selecting invalid altsetting 0 [ 83.706782][ T1108] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 83.716413][ T4754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 83.741687][ T1108] usb 1-1: No valid video chain found. [ 83.818610][ T4457] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 83.863225][ T1108] usb 1-1: selecting invalid altsetting 0 [ 83.898479][ T1108] usbtest: probe of 1-1:220.1 failed with error -22 [ 83.963221][ T1108] usb 1-1: USB disconnect, device number 3 [ 84.164515][ T4761] ptrace attach of "./syz-executor exec"[4184] was attempted by "./syz-executor exec"[4761] [ 84.258952][ T4457] usb 4-1: config 4 has an invalid interface number: 118 but max is 0 [ 84.310817][ T4457] usb 4-1: config 4 has no interface number 0 [ 84.326020][ T4457] usb 4-1: config 4 interface 118 has no altsetting 0 [ 84.342443][ T4457] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.71 [ 84.355238][ T4457] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.589591][ T4764] loop1: detected capacity change from 0 to 4096 [ 84.637171][ T4764] ntfs3: loop1: ino=3, Correct links count -> 2. [ 84.778785][ T4764] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 84.800669][ T4325] usb 4-1: USB disconnect, device number 3 [ 86.197259][ T4766] loop2: detected capacity change from 0 to 40427 [ 86.231961][ T4787] loop1: detected capacity change from 0 to 4096 [ 86.310712][ T4787] ntfs: (device loop1): parse_options(): Unrecognized mount option ÿ0x000000000000ee00. [ 86.338504][ T4787] ntfs: (device loop1): parse_options(): The show_sys_files option requires a boolean argument. [ 86.345184][ T4766] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 86.381580][ T4766] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 86.407967][ T4799] fuse: Bad value for 'fd' [ 86.438621][ T4766] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x1ffff [ 86.520671][ T4796] loop3: detected capacity change from 0 to 4096 [ 86.527577][ T4766] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 86.602816][ T4766] F2FS-fs (loop2): invalid crc value [ 86.625438][ T4801] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.711149][ T4766] F2FS-fs (loop2): Found nat_bits in checkpoint [ 86.828494][ T4452] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.989184][ T4766] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 86.996640][ T4766] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 87.062387][ T4814] fuse: Bad value for 'fd' [ 87.298968][ T4452] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 87.345632][ T4452] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50430, setting to 1024 [ 87.586294][ T4452] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.613547][ T4452] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.623044][ T4452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.737432][ T4452] usb 2-1: config 0 descriptor?? [ 87.759049][ T4784] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 87.800030][ T4794] loop0: detected capacity change from 0 to 32768 [ 87.912617][ T4794] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 87.957707][ T4794] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 88.173120][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 88.240815][ T4452] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 88.255667][ T4452] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 88.311468][ T4452] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 88.864160][ T4785] udc-core: couldn't find an available UDC or it's busy [ 88.898939][ T4785] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 89.037352][ T4847] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.108'. [ 89.280665][ T4834] loop2: detected capacity change from 0 to 32768 [ 89.343632][ T4784] loop1: detected capacity change from 0 to 32768 [ 89.840048][ T4457] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 90.059863][ T4834] XFS (loop2): invalid log iosize: 1 [not 12-30] [ 90.075157][ T4856] loop0: detected capacity change from 0 to 128 [ 90.086315][ T4834] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 90.247448][ T4834] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 90.273900][ T4834] netlink: 'syz.2.103': attribute type 6 has an invalid length. [ 91.715384][ T23] usb 2-1: USB disconnect, device number 3 [ 92.197033][ T4898] loop0: detected capacity change from 0 to 4096 [ 92.203588][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.217283][ T4898] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 92.287990][ T4901] fuse: Bad value for 'fd' [ 92.293569][ T4901] Zero length message leads to an empty skb [ 92.321449][ T4898] ntfs: volume version 3.1. [ 92.754017][ T4910] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.835799][ T4887] loop5: detected capacity change from 0 to 32768 [ 92.988515][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 93.189087][ T23] usb 2-1: config 0 has an invalid descriptor of length 172, skipping remainder of the config [ 93.212850][ T23] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 93.419740][ T23] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 93.501511][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.527618][ T23] usb 2-1: Product: syz [ 93.560720][ T23] usb 2-1: Manufacturer: syz [ 93.669012][ T23] usb 2-1: SerialNumber: syz [ 93.762754][ T23] r8152-cfgselector 2-1: config 0 descriptor?? [ 93.828601][ T4453] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 94.108604][ T4453] usb 6-1: Using ep0 maxpacket: 32 [ 94.240097][ T4453] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.301754][ T23] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 94.314212][ T4453] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.422670][ T4453] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 94.484685][ T4453] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.707862][ T4453] usb 6-1: config 0 descriptor?? [ 94.732284][ T4885] (unnamed net_device) (uninitialized): (slave team_slave_1): Device is not bonding slave [ 94.751662][ T4453] usb 6-1: can't set config #0, error -71 [ 94.779043][ T4453] usb 6-1: USB disconnect, device number 2 [ 94.789119][ T4885] (unnamed net_device) (uninitialized): option active_slave: invalid value (team_slave_1) [ 94.798390][ T4474] usb 2-1: config 0 descriptor?? [ 94.981491][ T4885] loop1: detected capacity change from 0 to 512 [ 95.062723][ T1326] usb 2-1: USB disconnect, device number 4 [ 95.080837][ T4474] usb 2-1: can't set config #0, error -71 [ 95.687558][ T4948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.764377][ T4962] fuse: Bad value for 'fd' [ 96.247915][ T4967] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.436379][ T4973] loop2: detected capacity change from 0 to 128 [ 96.930144][ T1326] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 97.024165][ T4257] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.558795][ T1326] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.583242][ T1326] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.618725][ T4257] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.635492][ T4988] loop2: detected capacity change from 0 to 8 [ 97.635925][ T4257] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.662068][ T4985] loop5: detected capacity change from 0 to 4096 [ 97.676038][ T4176] udevd[4176]: incorrect cramfs checksum on /dev/loop2 [ 97.689513][ T4988] cramfs: Unknown parameter '/dev/nullb0' [ 97.709050][ T1326] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 97.758835][ T4257] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 97.768038][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 97.777859][ T4991] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.783425][ T1326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 97.813957][ T1326] usb 2-1: SerialNumber: syz [ 97.941257][ T4994] (unnamed net_device) (uninitialized): (slave team_slave_1): Device is not bonding slave [ 97.964315][ T4257] usb 1-1: SerialNumber: syz [ 97.969326][ T4994] (unnamed net_device) (uninitialized): option active_slave: invalid value (team_slave_1) [ 98.000308][ T4995] loop2: detected capacity change from 0 to 4096 [ 98.020745][ T1326] usb 2-1: 0:2 : does not exist [ 98.588650][ T4997] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.646096][ T4966] udc-core: couldn't find an available UDC or it's busy [ 98.675285][ T4966] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 98.689066][ T5001] FAULT_INJECTION: forcing a failure. [ 98.689066][ T5001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.702786][ T5001] CPU: 1 PID: 5001 Comm: syz.2.142 Not tainted 5.15.188-syzkaller #0 [ 98.710870][ T5001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.720924][ T5001] Call Trace: [ 98.724207][ T5001] [ 98.727138][ T5001] dump_stack_lvl+0x168/0x230 [ 98.731818][ T5001] ? show_regs_print_info+0x20/0x20 [ 98.737021][ T5001] ? load_image+0x3b0/0x3b0 [ 98.741536][ T5001] ? __lock_acquire+0x7c60/0x7c60 [ 98.746813][ T5001] should_fail+0x38c/0x4c0 [ 98.751254][ T5001] _copy_to_user+0x2e/0x130 [ 98.755767][ T5001] simple_read_from_buffer+0xe3/0x150 [ 98.761155][ T5001] proc_fail_nth_read+0x19a/0x210 [ 98.766221][ T5001] ? proc_fault_inject_write+0x2f0/0x2f0 [ 98.771867][ T5001] ? fsnotify_perm+0x254/0x560 [ 98.776633][ T5001] ? proc_fault_inject_write+0x2f0/0x2f0 [ 98.782296][ T5001] vfs_read+0x2f6/0xcf0 [ 98.786458][ T5001] ? kernel_read+0x1e0/0x1e0 [ 98.791154][ T5001] ? __fget_files+0x40f/0x480 [ 98.795833][ T5001] ? mutex_lock_nested+0x17/0x20 [ 98.800765][ T5001] ? __fdget_pos+0x2bf/0x370 [ 98.805348][ T5001] ? ksys_read+0x71/0x250 [ 98.809760][ T5001] ksys_read+0x14d/0x250 [ 98.814094][ T5001] ? vfs_write+0xd00/0xd00 [ 98.818596][ T5001] ? lockdep_hardirqs_on+0x94/0x140 [ 98.823795][ T5001] do_syscall_64+0x4c/0xa0 [ 98.828388][ T5001] ? clear_bhb_loop+0x30/0x80 [ 98.833413][ T5001] ? clear_bhb_loop+0x30/0x80 [ 98.838193][ T5001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.844097][ T5001] RIP: 0033:0x7fdd7178233c [ 98.848512][ T5001] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 98.868728][ T5001] RSP: 002b:00007fdd6f5a9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.877429][ T5001] RAX: ffffffffffffffda RBX: 00007fdd719ab160 RCX: 00007fdd7178233c [ 98.885405][ T5001] RDX: 000000000000000f RSI: 00007fdd6f5a90a0 RDI: 0000000000000007 [ 98.893392][ T5001] RBP: 00007fdd6f5a9090 R08: 0000000000000000 R09: 0000000000000000 [ 98.901364][ T5001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.909333][ T5001] R13: 0000000000000000 R14: 00007fdd719ab160 R15: 00007ffe5b439108 [ 98.917343][ T5001] [ 99.034714][ T4257] usb 1-1: 0:2 : does not exist [ 99.048088][ T1326] usb 2-1: USB disconnect, device number 5 [ 99.093744][ T4257] usb 1-1: USB disconnect, device number 4 [ 99.297320][ T5016] loop5: detected capacity change from 0 to 16 [ 99.340424][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.360880][ T4201] udevd[4201]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 99.481687][ T5016] erofs: (device loop5): mounted with root inode @ nid 36. [ 99.728618][ T1108] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.919281][ T5038] loop1: detected capacity change from 0 to 128 [ 100.011151][ T5038] ufs: Invalid option: "0xffffffffffffffff" or missing value [ 100.028591][ T5038] ufs: wrong mount options [ 100.068625][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 100.119891][ T5045] FAULT_INJECTION: forcing a failure. [ 100.119891][ T5045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.178635][ T5045] CPU: 0 PID: 5045 Comm: syz.5.157 Not tainted 5.15.188-syzkaller #0 [ 100.186740][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.197060][ T5045] Call Trace: [ 100.200345][ T5045] [ 100.203291][ T5045] dump_stack_lvl+0x168/0x230 [ 100.207990][ T5045] ? show_regs_print_info+0x20/0x20 [ 100.213226][ T5045] ? load_image+0x3b0/0x3b0 [ 100.217750][ T5045] ? __lock_acquire+0x7c60/0x7c60 [ 100.222796][ T5045] should_fail+0x38c/0x4c0 [ 100.227365][ T5045] _copy_from_user+0x2e/0x170 [ 100.232193][ T5045] __copy_msghdr_from_user+0xaf/0x5e0 [ 100.237590][ T5045] ? verify_lock_unused+0x140/0x140 [ 100.242804][ T5045] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 100.248105][ T5045] ? __might_fault+0xb7/0x110 [ 100.252795][ T5045] ___sys_sendmsg+0x156/0x260 [ 100.257486][ T5045] ? __sys_sendmsg+0x250/0x250 [ 100.262283][ T5045] ? __fdget+0x18b/0x210 [ 100.266558][ T5045] __sys_sendmmsg+0x27c/0x4a0 [ 100.271244][ T5045] ? __ia32_sys_sendmsg+0x80/0x80 [ 100.276277][ T5045] ? __context_tracking_exit+0x4c/0x80 [ 100.281749][ T5045] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 100.287737][ T5045] ? lock_chain_count+0x20/0x20 [ 100.292592][ T5045] ? vtime_user_exit+0x2dc/0x400 [ 100.297539][ T5045] __x64_sys_sendmmsg+0x9c/0xb0 [ 100.302397][ T5045] do_syscall_64+0x4c/0xa0 [ 100.306840][ T5045] ? clear_bhb_loop+0x30/0x80 [ 100.311643][ T5045] ? clear_bhb_loop+0x30/0x80 [ 100.316422][ T5045] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.322584][ T5045] RIP: 0033:0x7fb9f352c929 [ 100.326999][ T5045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.346697][ T5045] RSP: 002b:00007fb9f1394038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 100.355117][ T5045] RAX: ffffffffffffffda RBX: 00007fb9f3753fa0 RCX: 00007fb9f352c929 [ 100.363095][ T5045] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 000000000000000c [ 100.371070][ T5045] RBP: 00007fb9f1394090 R08: 0000000000000000 R09: 0000000000000000 [ 100.379050][ T5045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.387022][ T5045] R13: 0000000000000000 R14: 00007fb9f3753fa0 R15: 00007ffe9a469fb8 [ 100.395024][ T5045] [ 100.488951][ T1108] usb 1-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 100.507323][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.535903][ T1108] usb 1-1: Product: syz [ 100.546031][ T1108] usb 1-1: Manufacturer: syz [ 100.592158][ T1108] usb 1-1: SerialNumber: syz [ 100.628982][ T1108] usb 1-1: config 0 descriptor?? [ 100.691603][ T1108] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 101.022292][ T1108] pwc: send_video_command error -71 [ 101.029743][ T1108] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 101.058591][ T23] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 101.076919][ T1108] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 101.145645][ T1108] usb 1-1: USB disconnect, device number 5 [ 101.488791][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.518575][ T1326] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 101.519569][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.658771][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 101.672051][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.687926][ T23] usb 2-1: SerialNumber: syz [ 101.740881][ T23] usb 2-1: 0:2 : does not exist [ 101.771695][ T1326] usb 6-1: Using ep0 maxpacket: 8 [ 101.888726][ T1326] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 101.896969][ T1326] usb 6-1: config 0 has no interface number 0 [ 101.899404][ T5106] loop0: detected capacity change from 0 to 32768 [ 102.058381][ T5123] loop2: detected capacity change from 0 to 64 [ 102.078032][ T5126] FAULT_INJECTION: forcing a failure. [ 102.078032][ T5126] name failslab, interval 1, probability 0, space 0, times 1 [ 102.078816][ T1326] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 102.118622][ T1326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.126763][ T1326] usb 6-1: Product: syz [ 102.139977][ T1326] usb 6-1: Manufacturer: syz [ 102.148722][ T5126] CPU: 0 PID: 5126 Comm: syz.0.172 Not tainted 5.15.188-syzkaller #0 [ 102.156900][ T5126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.165040][ T23] usb 2-1: USB disconnect, device number 6 [ 102.166955][ T5126] Call Trace: [ 102.166964][ T5126] [ 102.166972][ T5126] dump_stack_lvl+0x168/0x230 [ 102.183725][ T5126] ? show_regs_print_info+0x20/0x20 [ 102.188933][ T5126] ? load_image+0x3b0/0x3b0 [ 102.193449][ T5126] ? __might_sleep+0xf0/0xf0 [ 102.198139][ T5126] ? __lock_acquire+0x7c60/0x7c60 [ 102.203180][ T5126] should_fail+0x38c/0x4c0 [ 102.207611][ T5126] should_failslab+0x5/0x20 [ 102.212118][ T5126] slab_pre_alloc_hook+0x51/0xc0 [ 102.217064][ T5126] ? __alloc_file+0x25/0x240 [ 102.221656][ T5126] kmem_cache_alloc+0x3d/0x290 [ 102.226433][ T5126] __alloc_file+0x25/0x240 [ 102.230853][ T5126] alloc_empty_file+0x90/0x180 [ 102.235633][ T5126] alloc_file+0x5b/0x4f0 [ 102.239884][ T5126] ? do_raw_spin_unlock+0x11d/0x230 [ 102.245098][ T5126] alloc_file_pseudo+0x17a/0x1f0 [ 102.250085][ T5126] ? alloc_empty_file_noaccount+0x80/0x80 [ 102.255834][ T5126] __shmem_file_setup+0x1cf/0x290 [ 102.260863][ T5126] ? shmem_file_setup+0x13/0x30 [ 102.265723][ T5126] __se_sys_memfd_create+0x290/0x430 [ 102.271018][ T5126] ? __x64_sys_memfd_create+0x60/0x60 [ 102.276402][ T5126] ? lockdep_hardirqs_on+0x94/0x140 [ 102.281612][ T5126] do_syscall_64+0x4c/0xa0 [ 102.286036][ T5126] ? clear_bhb_loop+0x30/0x80 [ 102.290724][ T5126] ? clear_bhb_loop+0x30/0x80 [ 102.295410][ T5126] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.301324][ T5126] RIP: 0033:0x7f60fdc71929 [ 102.305770][ T5126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.325379][ T5126] RSP: 002b:00007f60fbad8e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 102.333885][ T5126] RAX: ffffffffffffffda RBX: 0000000000000b85 RCX: 00007f60fdc71929 [ 102.341865][ T5126] RDX: 00007f60fbad8ef0 RSI: 0000000000000000 RDI: 00007f60fdcf4634 [ 102.349843][ T5126] RBP: 0000200000000c80 R08: 00007f60fbad8bb7 R09: 00007f60fbad8e40 [ 102.357917][ T5126] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000c00 [ 102.365897][ T5126] R13: 00007f60fbad8ef0 R14: 00007f60fbad8eb0 R15: 0000200000000c40 [ 102.373990][ T5126] [ 102.385436][ T1326] usb 6-1: SerialNumber: syz [ 102.392102][ T1326] usb 6-1: config 0 descriptor?? [ 102.649723][ T5088] netlink: 'syz.5.167': attribute type 126 has an invalid length. [ 102.699974][ T5133] loop0: detected capacity change from 0 to 4096 [ 102.724912][ T5088] loop5: detected capacity change from 0 to 2048 [ 103.082037][ T5088] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.288476][ T5088] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.332967][ T5133] ntfs: (device loop0): parse_options(): NLS character set iso8859 not found. Using previous one default. [ 103.820592][ T5133] ntfs: volume version 3.1. [ 105.048696][ T1326] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 105.093049][ T1326] usb 6-1: No streaming interface found for terminal 6. [ 105.168326][ T1326] usb 6-1: USB disconnect, device number 3 [ 105.316782][ T5200] loop5: detected capacity change from 0 to 64 [ 105.666917][ T5217] loop5: detected capacity change from 0 to 2048 [ 105.696857][ T5191] loop0: detected capacity change from 0 to 32768 [ 105.725210][ T5191] XFS (loop0): invalid logbufsize: 88080384 [not 16k,32k,64k,128k or 256k] [ 106.140227][ T5237] loop1: detected capacity change from 0 to 16 [ 106.151388][ T23] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 106.178795][ T5237] erofs: (device loop1): erofs_read_superblock: invalid sb_extslots 4208 (more than a fs block) [ 106.219870][ T5228] loop5: detected capacity change from 0 to 16384 [ 106.285232][ T5243] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.535018][ T5251] loop1: detected capacity change from 0 to 2048 [ 106.579858][ T5251] UDF-fs: bad mount option "0xffffffffffffffff0000000000000000000618446744073709551615anchor=0" or missing value [ 106.603995][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.610801][ T5251] overlayfs: failed to resolve '/E<)æέ¥‰j»«q¶3xíúøÈèöÕö§ªæ@U¾üj;~âä^>Õ‹g;3PÿnûT¼>váLó•Ù«sóS S“Íñ™Î¥ÙÉ©a·õ·': -2 [ 106.623701][ T23] usb 1-1: config 0 has no interface number 0 [ 106.646827][ T23] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.671614][ T23] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 106.688076][ T23] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 106.697477][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.710868][ T5251] loop1: detected capacity change from 0 to 2048 [ 106.758256][ T23] usb 1-1: config 0 descriptor?? [ 106.778869][ T5224] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 106.802781][ T5251] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.083486][ T5277] fuse: Bad value for 'fd' [ 108.117872][ T5270] loop1: detected capacity change from 0 to 4096 [ 108.145229][ T5270] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 108.278650][ T23] usbhid 1-1:0.1: can't add hid device: -71 [ 108.284795][ T23] usbhid: probe of 1-1:0.1 failed with error -71 [ 108.292941][ T23] usb 1-1: USB disconnect, device number 6 [ 108.720627][ T5288] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 108.826879][ T5288] device tunl0 entered promiscuous mode [ 108.856948][ T5288] netlink: 'syz.2.209': attribute type 4 has an invalid length. [ 108.880732][ T5288] netlink: 9 bytes leftover after parsing attributes in process `syz.2.209'. [ 108.980070][ T5298] loop5: detected capacity change from 0 to 256 [ 109.347713][ T5288] syz.2.209 (5288) used greatest stack depth: 20576 bytes left [ 109.573643][ T4457] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 109.638743][ T1326] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 111.691382][ T1326] usb 1-1: Using ep0 maxpacket: 16 [ 111.756992][ T5284] syz.1.204 (5284): drop_caches: 1 [ 111.774109][ T5270] syz.1.204 (5270): drop_caches: 1 [ 111.811916][ T1326] usb 1-1: config 0 has an invalid descriptor of length 172, skipping remainder of the config [ 111.835671][ T1326] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 112.008905][ T1326] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 112.023621][ T1326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.032894][ T1326] usb 1-1: Product: syz [ 112.037134][ T1326] usb 1-1: Manufacturer: syz [ 112.048632][ T1326] usb 1-1: SerialNumber: syz [ 112.066705][ T1326] r8152-cfgselector 1-1: config 0 descriptor?? [ 112.329059][ T1326] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 112.646390][ T5312] (unnamed net_device) (uninitialized): (slave team_slave_1): Device is not bonding slave [ 112.664438][ T5312] (unnamed net_device) (uninitialized): option active_slave: invalid value (team_slave_1) [ 112.691896][ T23] usb 1-1: USB disconnect, device number 7 [ 112.888210][ T4457] usb 6-1: device not accepting address 4, error -71 [ 113.000547][ T5338] fuse: Bad value for 'fd' [ 113.512192][ T5335] loop1: detected capacity change from 0 to 32768 [ 113.611330][ T5335] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.222 (5335) [ 113.643657][ T5335] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 113.668603][ T5335] BTRFS info (device loop1): use zlib compression, level 3 [ 113.676074][ T5335] BTRFS info (device loop1): turning on sync discard [ 113.698538][ T5335] BTRFS info (device loop1): doing ref verification [ 113.705387][ T5335] BTRFS info (device loop1): disabling tree log [ 113.727362][ T5335] BTRFS info (device loop1): enabling tree log [ 113.738571][ T5335] BTRFS info (device loop1): enabling ssd optimizations [ 113.745663][ T5335] BTRFS info (device loop1): using spread ssd allocation scheme [ 113.754024][ T5335] BTRFS info (device loop1): not using ssd optimizations [ 113.761474][ T5335] BTRFS info (device loop1): not using spread ssd allocation scheme [ 113.772394][ T5335] BTRFS info (device loop1): using free space tree [ 113.780013][ T5335] BTRFS info (device loop1): has skinny extents [ 113.865231][ T26] audit: type=1800 audit(1752775097.409:2): pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.222" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 114.092445][ T4176] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (4176) [ 114.612831][ T5375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 114.948572][ T4457] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 115.198624][ T4457] usb 1-1: Using ep0 maxpacket: 32 [ 115.349373][ T4457] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 115.357609][ T4457] usb 1-1: config 0 has no interface number 0 [ 115.363920][ T4457] usb 1-1: config 0 interface 184 has no altsetting 0 [ 115.539232][ T4457] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 115.548563][ T4457] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.556571][ T4457] usb 1-1: Product: syz [ 115.560785][ T4457] usb 1-1: Manufacturer: syz [ 115.565415][ T4457] usb 1-1: SerialNumber: syz [ 115.577785][ T4457] usb 1-1: config 0 descriptor?? [ 115.620745][ T4457] smsc75xx v1.0.0 [ 116.278677][ T4457] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 116.289591][ T4457] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 117.848676][ T4457] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 117.860034][ T4457] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 117.869724][ T4457] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 117.880854][ T4457] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 117.891225][ T4457] usb 1-1: USB disconnect, device number 8 [ 132.710615][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.716960][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.215394][ T5403] loop2: detected capacity change from 0 to 128 [ 142.251312][ T5393] loop5: detected capacity change from 0 to 4096 [ 142.439645][ T5393] ntfs3: Unknown parameter '00000000000000000003ÿÿ' [ 143.075775][ T1108] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 143.297721][ T5395] loop0: detected capacity change from 0 to 32768 [ 143.339455][ T26] audit: type=1800 audit(1752775126.879:3): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.242" name="/" dev="sockfs" ino=35637 res=0 errno=0 [ 143.388941][ T1108] usb 6-1: Using ep0 maxpacket: 16 [ 143.538624][ T1108] usb 6-1: config 0 has an invalid descriptor of length 172, skipping remainder of the config [ 143.558464][ T1108] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 143.635055][ T5395] XFS (loop0): Mounting V5 Filesystem [ 143.746684][ T5434] capability: warning: `syz.1.245' uses 32-bit capabilities (legacy support in use) [ 143.809194][ T1108] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 143.852546][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.949823][ T1108] usb 6-1: Product: syz [ 144.003229][ T1108] usb 6-1: Manufacturer: syz [ 144.058691][ T1108] usb 6-1: SerialNumber: syz [ 144.189613][ T1108] r8152-cfgselector 6-1: config 0 descriptor?? [ 144.573307][ T1108] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 144.788592][ T5409] (unnamed net_device) (uninitialized): (slave team_slave_1): Device is not bonding slave [ 144.842553][ T5409] (unnamed net_device) (uninitialized): option active_slave: invalid value (team_slave_1) [ 145.007113][ T1326] usb 6-1: USB disconnect, device number 6 [ 145.130325][ T5395] XFS (loop0): Ending clean mount [ 145.184737][ T5395] XFS (loop0): Quotacheck needed: Please wait. [ 145.268839][ T5449] kAFS: unable to lookup cell '(/' [ 145.276991][ T5395] XFS (loop0): Quotacheck: Done. [ 145.426626][ T4184] XFS (loop0): Unmounting Filesystem [ 145.754754][ T5446] xt_TCPMSS: Only works on TCP SYN packets [ 145.851959][ T5459] netlink: 'syz.3.257': attribute type 126 has an invalid length. [ 146.340813][ T5454] loop1: detected capacity change from 0 to 32768 [ 146.587560][ T5469] ptrace attach of "./syz-executor exec"[4186] was attempted by ""[5469] [ 146.597477][ T23] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 146.606006][ T5454] gfs2: Bad value for 'quota' [ 146.651727][ T5469] autofs4:pid:5469:autofs_fill_super: called with bogus options [ 147.398283][ T5487] loop0: detected capacity change from 0 to 512 [ 147.508094][ T5487] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.608664][ T23] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 147.630504][ T23] usb 6-1: config 0 has no interface number 0 [ 147.644499][ T23] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.838774][ T23] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 147.852357][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.862247][ T23] usb 6-1: Product: syz [ 147.874109][ T23] usb 6-1: Manufacturer: syz [ 147.891581][ T23] usb 6-1: SerialNumber: syz [ 147.904279][ T23] usb 6-1: config 0 descriptor?? [ 148.116636][ T5489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.240523][ T23] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 148.265376][ T23] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 148.307165][ T23] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 148.335298][ T23] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 148.358909][ T23] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 149.218435][ C0] sched: RT throttling activated [ 149.348611][ T5515] bridge0: port 3(netdevsim0) entered blocking state [ 149.355344][ T5515] bridge0: port 3(netdevsim0) entered disabled state [ 149.364899][ T5515] device netdevsim0 entered promiscuous mode [ 149.694062][ T5515] xt_recent: Unsupported userspace flags (000000de) [ 150.064142][ T5487] fs-verity: sha512 using implementation "sha512-avx2" [ 150.071951][ T5487] EXT4-fs warning (device loop0): ext4_begin_enable_verity:136: inode #16: comm syz.0.265: verity is only allowed on extent-based files [ 150.169417][ T5365] usb 6-1: USB disconnect, device number 7 [ 150.187976][ T5365] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 150.229250][ T5365] keyspan 6-1:0.133: device disconnected [ 150.428564][ T1326] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 150.669621][ T1326] usb 2-1: Using ep0 maxpacket: 16 [ 150.712733][ T5533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'. [ 150.735301][ T5533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.788789][ T1326] usb 2-1: config 0 has no interfaces? [ 150.948869][ T1326] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 150.958075][ T1326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.983858][ T1326] usb 2-1: Product: syz [ 150.988124][ T1326] usb 2-1: Manufacturer: syz [ 151.003898][ T1326] usb 2-1: SerialNumber: syz [ 151.024942][ T1326] r8152-cfgselector 2-1: config 0 descriptor?? [ 151.099533][ T5521] loop2: detected capacity change from 0 to 65536 [ 151.149590][ T5521] XFS: noattr2 mount option is deprecated. [ 151.155521][ T5521] XFS: ikeep mount option is deprecated. [ 151.202915][ T5521] XFS (loop2): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 151.319892][ T1326] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 151.514408][ T5547] netlink: 'syz.5.280': attribute type 9 has an invalid length. [ 151.688538][ T1108] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 151.794766][ T5369] usb 2-1: USB disconnect, device number 7 [ 152.513479][ T5559] FAULT_INJECTION: forcing a failure. [ 152.513479][ T5559] name failslab, interval 1, probability 0, space 0, times 0 [ 152.549162][ T5559] CPU: 1 PID: 5559 Comm: syz.5.281 Not tainted 5.15.188-syzkaller #0 [ 152.557274][ T5559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.567504][ T5559] Call Trace: [ 152.570785][ T5559] [ 152.573722][ T5559] dump_stack_lvl+0x168/0x230 [ 152.578431][ T5559] ? show_regs_print_info+0x20/0x20 [ 152.583634][ T5559] ? load_image+0x3b0/0x3b0 [ 152.588141][ T5559] ? __might_sleep+0xf0/0xf0 [ 152.592739][ T5559] ? __lock_acquire+0x7c60/0x7c60 [ 152.597781][ T5559] should_fail+0x38c/0x4c0 [ 152.602224][ T5559] should_failslab+0x5/0x20 [ 152.606820][ T5559] slab_pre_alloc_hook+0x51/0xc0 [ 152.612037][ T5559] ? __alloc_file+0x25/0x240 [ 152.616812][ T5559] kmem_cache_alloc+0x3d/0x290 [ 152.620773][ T5562] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.285'. [ 152.621584][ T5559] __alloc_file+0x25/0x240 [ 152.621615][ T5559] alloc_empty_file+0x90/0x180 [ 152.640276][ T5559] alloc_file+0x5b/0x4f0 [ 152.644523][ T5559] ? do_raw_spin_unlock+0x11d/0x230 [ 152.649732][ T5559] alloc_file_pseudo+0x17a/0x1f0 [ 152.654682][ T5559] ? alloc_empty_file_noaccount+0x80/0x80 [ 152.660422][ T5559] __shmem_file_setup+0x1cf/0x290 [ 152.665458][ T5559] ? shmem_file_setup+0x13/0x30 [ 152.670329][ T5559] __se_sys_memfd_create+0x290/0x430 [ 152.675717][ T5559] ? __x64_sys_memfd_create+0x60/0x60 [ 152.681110][ T5559] ? lockdep_hardirqs_on+0x94/0x140 [ 152.686322][ T5559] do_syscall_64+0x4c/0xa0 [ 152.690749][ T5559] ? clear_bhb_loop+0x30/0x80 [ 152.695433][ T5559] ? clear_bhb_loop+0x30/0x80 [ 152.700124][ T5559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.706031][ T5559] RIP: 0033:0x7fb9f352c929 [ 152.710454][ T5559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.730151][ T5559] RSP: 002b:00007fb9f1393e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 152.738589][ T5559] RAX: ffffffffffffffda RBX: 0000000000000a09 RCX: 00007fb9f352c929 [ 152.746656][ T5559] RDX: 00007fb9f1393ef0 RSI: 0000000000000000 RDI: 00007fb9f35af634 [ 152.754634][ T5559] RBP: 0000200000001540 R08: 00007fb9f1393bb7 R09: 00007fb9f1393e40 [ 152.762738][ T5559] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000a80 [ 152.770897][ T5559] R13: 00007fb9f1393ef0 R14: 00007fb9f1393eb0 R15: 0000200000000000 [ 152.778985][ T5559] [ 152.998753][ T1108] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.233883][ T1108] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.241283][ T5566] loop1: detected capacity change from 0 to 32768 [ 153.248060][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.265413][ T1108] usb 1-1: Product: syz [ 153.269780][ T1108] usb 1-1: Manufacturer: syz [ 153.274382][ T1108] usb 1-1: SerialNumber: syz [ 153.333121][ T5566] XFS (loop1): invalid log iosize: 1 [not 12-30] [ 153.439148][ T5369] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 153.611666][ T5603] device syzkaller0 entered promiscuous mode [ 153.688565][ T5369] usb 3-1: Using ep0 maxpacket: 16 [ 153.835548][ T5587] loop5: detected capacity change from 0 to 40427 [ 153.951297][ T5369] usb 3-1: config 0 has no interfaces? [ 154.013958][ T26] audit: type=1326 audit(1752775137.559:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5608 comm="syz.3.302" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a83df9929 code=0x0 [ 154.108729][ T5369] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 154.118208][ T5369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.132353][ T5369] usb 3-1: Product: syz [ 154.137045][ T5369] usb 3-1: Manufacturer: syz [ 154.143860][ T5369] usb 3-1: SerialNumber: syz [ 154.164444][ T5369] r8152-cfgselector 3-1: config 0 descriptor?? [ 154.195774][ T5543] loop0: detected capacity change from 0 to 2048 [ 154.241623][ T5397] loop0: p1 < > p3 [ 154.251702][ T5397] loop0: p3 size 134217728 extends beyond EOD, truncated [ 154.268168][ T5543] loop0: p1 < > p3 [ 154.279602][ T5543] loop0: p3 size 134217728 extends beyond EOD, truncated [ 154.348698][ T4187] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 154.428611][ T5369] r8152-cfgselector 3-1: Unknown version 0x0000 [ 154.463766][ T5369] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 154.538662][ T1108] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 154.546041][ T1108] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 154.554017][ T1108] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 154.747084][ T5627] loop5: detected capacity change from 0 to 1024 [ 154.748922][ T4187] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.764624][ T4187] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.785401][ T5627] EXT4-fs (loop5): Ignoring removed nobh option [ 154.803849][ T5627] EXT4-fs (loop5): Ignoring removed bh option [ 154.813711][ T5627] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.836582][ T5627] EXT4-fs (loop5): mounted filesystem without journal. Opts: dax=inode,data_err=abort,barrier=0x0000000000000002,dioread_lock,bsddf,max_dir_size_kb=0x0000000000000007,delalloc,discard,nobh,user_xattr,bh,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 154.880015][ T5627] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3876: comm syz.5.307: Allocating blocks 257-513 which overlap fs metadata [ 154.894550][ T4187] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.903736][ T4187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.912059][ T4187] usb 2-1: SerialNumber: syz [ 154.958154][ T5627] EXT4-fs error (device loop5): mb_free_blocks:1865: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 154.974333][ T5627] EXT4-fs (loop5): pa ffff8880757fe7e0: logic 16, phys. 129, len 3 [ 154.979150][ T1108] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 154.982379][ T5627] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4893: group 0, free 3, pa_free 2 [ 155.031986][ T1108] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 155.169348][ T1108] usb 1-1: USB disconnect, device number 9 [ 155.249639][ T1108] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 156.206686][ T5643] loop5: detected capacity change from 0 to 2048 [ 156.294285][ T5643] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 156.328623][ T5643] NILFS (loop5): mounting unchecked fs [ 156.328991][ T5405] udevd[5405]: incorrect nilfs2 checksum on /dev/loop5 [ 156.366151][ T5405] udevd[5405]: incorrect nilfs2 checksum on /dev/loop5 [ 156.391100][ T5643] NILFS (loop5): recovery complete [ 156.447298][ T5646] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.501552][ T26] audit: type=1800 audit(1752775140.049:5): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.312" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 156.911426][ T5645] loop2: detected capacity change from 0 to 40427 [ 156.989735][ T5645] F2FS-fs (loop2): Unrecognized mount option "" or missing value [ 157.081205][ T4187] usb 2-1: 0:2 : does not exist [ 157.104639][ T4187] usb 2-1: USB disconnect, device number 8 [ 157.230461][ T26] audit: type=1326 audit(1752775140.779:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fdc71929 code=0x7ffc0000 [ 157.299126][ T26] audit: type=1326 audit(1752775140.779:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f60fdc71929 code=0x7ffc0000 [ 157.469683][ T26] audit: type=1326 audit(1752775140.779:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fdc71929 code=0x7ffc0000 [ 157.519138][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.618745][ T5517] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 157.618792][ T1108] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 157.641086][ T26] audit: type=1326 audit(1752775140.779:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f60fdc71929 code=0x7ffc0000 [ 157.673399][ T26] audit: type=1326 audit(1752775140.779:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fdc71929 code=0x7ffc0000 [ 157.908629][ T5517] usb 3-1: Using ep0 maxpacket: 16 [ 157.929069][ T4187] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 158.050721][ T5517] usb 3-1: config 0 has no interfaces? [ 158.069003][ T1108] usb 1-1: unable to get BOS descriptor or descriptor too short [ 158.139638][ T26] audit: type=1326 audit(1752775140.779:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f60fdc71929 code=0x7ffc0000 [ 158.164286][ T26] audit: type=1326 audit(1752775140.779:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fdc71929 code=0x7ffc0000 [ 158.194508][ T26] audit: type=1326 audit(1752775140.779:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5661 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f60fdc71929 code=0x7ffc0000 [ 158.249575][ T4187] usb 2-1: Using ep0 maxpacket: 8 [ 158.276569][ T5517] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 158.286354][ T5517] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.295542][ T1108] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 158.310900][ T1108] usb 1-1: config 1 has no interface number 1 [ 158.317493][ T5517] usb 3-1: Product: syz [ 158.326002][ T1108] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 158.348880][ T5517] usb 3-1: Manufacturer: syz [ 158.353621][ T5517] usb 3-1: SerialNumber: syz [ 158.360362][ T1108] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 158.379878][ T5517] r8152-cfgselector 3-1: config 0 descriptor?? [ 158.398934][ T4187] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 158.441554][ T4187] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 158.451949][ T4187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.467957][ T4187] usb 2-1: config 0 descriptor?? [ 158.521622][ T5678] loop5: detected capacity change from 0 to 64 [ 158.639390][ T5517] r8152-cfgselector 3-1: Unknown version 0x0000 [ 158.645808][ T1108] usb 1-1: string descriptor 0 read error: -22 [ 158.666100][ T1108] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.683452][ T5517] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 158.704307][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.761768][ T1108] usb 1-1: low speed audio streaming not supported [ 158.962546][ T4187] corsair 0003:1B1C:1B09.0004: unbalanced delimiter at end of report description [ 158.971835][ T5366] usb 1-1: USB disconnect, device number 10 [ 158.999033][ T4187] corsair 0003:1B1C:1B09.0004: parse failed [ 159.014120][ T4187] corsair: probe of 0003:1B1C:1B09.0004 failed with error -22 [ 159.801906][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 159.801921][ T26] audit: type=1326 audit(1752775143.339:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5663 comm="syz.0.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f60fdc71929 code=0x7ffc0000 [ 160.383346][ T1108] usb 2-1: USB disconnect, device number 9 [ 160.723942][ T5706] loop1: detected capacity change from 0 to 128 [ 160.825578][ T5688] loop2: detected capacity change from 0 to 32768 [ 160.857336][ T5700] loop5: detected capacity change from 0 to 32768 [ 160.930127][ T5700] XFS (loop5): invalid log iosize: 1 [not 12-30] [ 160.956485][ T5688] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 161.011103][ T5688] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 161.086474][ T5688] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 161.107406][ T5365] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 161.187143][ T5365] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 161.194389][ T1326] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 161.271962][ T5365] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 84ms [ 161.286188][ T5365] gfs2: fsid=syz:syz.0: jid=0: Done [ 161.301957][ T5688] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 161.439788][ T1326] usb 1-1: Using ep0 maxpacket: 16 [ 161.558617][ T1326] usb 1-1: config 0 has an invalid descriptor of length 172, skipping remainder of the config [ 161.579881][ T1326] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 161.648724][ T5365] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 161.758786][ T1326] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 161.788510][ T1326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.796739][ T1326] usb 1-1: Product: syz [ 161.803341][ T1326] usb 1-1: Manufacturer: syz [ 161.811849][ T1326] usb 1-1: SerialNumber: syz [ 161.821835][ T5720] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 161.854216][ T1326] r8152-cfgselector 1-1: config 0 descriptor?? [ 161.888547][ T5365] usb 6-1: Using ep0 maxpacket: 16 [ 162.008751][ T5365] usb 6-1: config 0 has no interfaces? [ 162.119139][ T1326] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 162.169168][ T5365] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 162.178354][ T5365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.202878][ T5365] usb 6-1: Product: syz [ 162.207237][ T5365] usb 6-1: Manufacturer: syz [ 162.218495][ T5365] usb 6-1: SerialNumber: syz [ 162.232067][ T5365] r8152-cfgselector 6-1: config 0 descriptor?? [ 162.248550][ T5369] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 162.279711][ T5726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'. [ 162.330145][ T5708] (unnamed net_device) (uninitialized): (slave team_slave_1): Device is not bonding slave [ 162.360365][ T5708] (unnamed net_device) (uninitialized): option active_slave: invalid value (team_slave_1) [ 162.360654][ T5718] netlink: 260 bytes leftover after parsing attributes in process `syz.3.341'. [ 162.377808][ T1326] usb 1-1: USB disconnect, device number 11 [ 162.508754][ T5365] r8152-cfgselector 6-1: Unknown version 0x0000 [ 162.519231][ T5365] r8152-cfgselector 6-1: USB disconnect, device number 8 [ 162.719641][ T5731] loop1: detected capacity change from 0 to 32768 [ 162.768725][ T5369] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 162.788300][ T5369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.796732][ T5369] usb 3-1: Product: syz [ 162.801477][ T5369] usb 3-1: Manufacturer: syz [ 162.806241][ T5369] usb 3-1: SerialNumber: syz [ 162.815866][ T5731] XFS (loop1): Mounting V5 Filesystem [ 163.039092][ T5731] XFS (loop1): Ending clean mount [ 163.057250][ T5731] XFS (loop1): Quotacheck needed: Please wait. [ 163.188882][ T5369] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 163.287408][ T5748] loop0: detected capacity change from 0 to 2048 [ 163.296222][ T5731] XFS (loop1): Quotacheck: Done. [ 163.334380][ T5748] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 163.364841][ T5748] NILFS (loop0): too large filesystem blocksize: 2 ^ 347668480 KiB [ 163.385275][ T5751] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 163.472927][ T4183] XFS (loop1): Unmounting Filesystem [ 163.759275][ T5369] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 163.828749][ T5365] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 163.945299][ T5754] loop0: detected capacity change from 0 to 32768 [ 163.995953][ T5754] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.350 (5754) [ 164.072691][ T5754] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 164.089487][ T5754] BTRFS error (device loop0): unrecognized mount option 'permit_directio' [ 164.125667][ T5754] BTRFS error (device loop0): open_ctree failed: -22 [ 164.130737][ T5369] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.172231][ T5369] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.187376][ T4187] usb 3-1: USB disconnect, device number 5 [ 164.224656][ T5623] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by udevd (5623) [ 164.262065][ T5369] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 164.281927][ T5369] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.312628][ T5369] usb 6-1: SerialNumber: syz [ 164.458581][ T1108] kernel read not supported for file /dsp (pid: 1108 comm: kworker/1:2) [ 164.631051][ T5774] loop0: detected capacity change from 0 to 256 [ 164.724193][ T5774] FAT-fs (loop0): Directory bread(block 64) failed [ 164.748383][ T5774] FAT-fs (loop0): Directory bread(block 65) failed [ 164.770687][ T5774] FAT-fs (loop0): Directory bread(block 66) failed [ 164.797540][ T5774] FAT-fs (loop0): Directory bread(block 67) failed [ 164.818676][ T5774] FAT-fs (loop0): Directory bread(block 68) failed [ 164.825612][ T5774] FAT-fs (loop0): Directory bread(block 69) failed [ 164.839838][ T5774] FAT-fs (loop0): Directory bread(block 70) failed [ 164.846855][ T5774] FAT-fs (loop0): Directory bread(block 71) failed [ 164.857909][ T5774] FAT-fs (loop0): Directory bread(block 72) failed [ 164.868583][ T5365] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 164.883190][ T5365] ath9k_htc: Failed to initialize the device [ 164.891008][ T5774] FAT-fs (loop0): Directory bread(block 73) failed [ 164.913884][ T4187] usb 3-1: ath9k_htc: USB layer deinitialized [ 165.183178][ T5781] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.257611][ T5781] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.298602][ T4187] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 165.323326][ T5781] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.372023][ T5781] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.458826][ T5781] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.490856][ T5781] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.512796][ T5781] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.540422][ T5781] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.663843][ T4187] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.685956][ T4187] usb 3-1: config 0 has no interface number 0 [ 165.695175][ T4187] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 165.711738][ T4187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.728011][ T4187] usb 3-1: config 0 descriptor?? [ 165.773732][ T4187] usb 3-1: selecting invalid altsetting 1 [ 165.787813][ T4187] dvb_ttusb_budget: ttusb_init_controller: error [ 165.814030][ T4187] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 165.966122][ T4187] DVB: Unable to find symbol cx22700_attach() [ 166.085665][ T4187] DVB: Unable to find symbol tda10046_attach() [ 166.094286][ T4187] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 166.121647][ T4187] usb 3-1: USB disconnect, device number 6 [ 166.171648][ T5817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.375'. [ 166.374036][ T5369] usb 6-1: 0:2 : does not exist [ 166.433081][ T5369] usb 6-1: USB disconnect, device number 9 [ 166.492694][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.653353][ T5844] loop1: detected capacity change from 0 to 64 [ 166.706315][ T26] audit: type=1326 audit(1752775150.249:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd71783929 code=0x7ffc0000 [ 166.707734][ T5850] loop5: detected capacity change from 0 to 256 [ 166.744910][ T26] audit: type=1326 audit(1752775150.279:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fdd71783929 code=0x7ffc0000 [ 166.790075][ T5850] exfat: Unknown parameter 'io' [ 166.885894][ T26] audit: type=1326 audit(1752775150.289:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd71783929 code=0x7ffc0000 [ 166.916263][ T26] audit: type=1326 audit(1752775150.289:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fdd71783929 code=0x7ffc0000 [ 167.033983][ T26] audit: type=1800 audit(1752775150.289:63): pid=5846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.383" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 167.058227][ T26] audit: type=1326 audit(1752775150.289:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd71783929 code=0x7ffc0000 [ 167.105681][ T5868] netlink: 96 bytes leftover after parsing attributes in process `syz.1.393'. [ 167.208654][ T5874] loop5: detected capacity change from 0 to 128 [ 167.232051][ T5877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.394'. [ 167.248857][ T5365] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 167.251148][ T5877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.394'. [ 167.275633][ T5870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.394'. [ 167.330993][ T5880] loop0: detected capacity change from 0 to 164 [ 167.474345][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.400'. [ 167.520021][ T5884] device dummy0 entered promiscuous mode [ 167.528877][ T5365] usb 3-1: Using ep0 maxpacket: 32 [ 167.536703][ T5884] device macvtap1 entered promiscuous mode [ 167.599637][ T5892] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.402'. [ 167.618836][ T4187] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 167.625002][ T5889] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.402'. [ 167.668928][ T5365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.690214][ T5365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.709036][ T5365] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 167.734614][ T5365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.754413][ T5365] usb 3-1: config 0 descriptor?? [ 167.868608][ T4187] usb 2-1: Using ep0 maxpacket: 8 [ 167.948777][ T5517] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 168.028602][ T5368] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 168.198560][ T5517] usb 6-1: Using ep0 maxpacket: 16 [ 168.231228][ T5365] ft260 0003:0403:6030.0005: unknown main item tag 0x7 [ 168.240985][ T5365] ft260 0003:0403:6030.0005: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 168.332357][ T5517] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.350347][ T5517] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 168.362585][ T5517] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.373309][ T5517] usb 6-1: config 0 descriptor?? [ 168.380165][ T4187] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 168.388723][ T5368] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.389990][ T4187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.405038][ T5368] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.407467][ T4187] usb 2-1: Product: syz [ 168.423418][ T4187] usb 2-1: Manufacturer: syz [ 168.428023][ T4187] usb 2-1: SerialNumber: syz [ 168.434549][ T4187] usb 2-1: config 0 descriptor?? [ 168.458826][ T5365] ft260 0003:0403:6030.0005: chip code: 6424 8183 [ 168.568864][ T5368] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.578396][ T5368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.586674][ T5368] usb 1-1: Product: syz [ 168.591140][ T5368] usb 1-1: Manufacturer: syz [ 168.595880][ T5368] usb 1-1: SerialNumber: syz [ 168.688964][ T4187] usb 2-1: USB disconnect, device number 10 [ 168.841509][ T5517] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 168.849123][ T5517] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 168.856190][ T5517] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 168.864225][ T5517] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 168.871694][ T5517] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 168.881139][ T5517] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 168.898977][ T5365] ft260 0003:0403:6030.0005: failed to retrieve status: -32 [ 168.919056][ T5368] usb 1-1: 0:2 : does not exist [ 168.947020][ T5368] usb 1-1: USB disconnect, device number 12 [ 169.146780][ T5365] usb 3-1: USB disconnect, device number 7 [ 169.200825][ T5411] udevd[5411]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.245398][ T5368] usb 6-1: USB disconnect, device number 10 [ 169.511756][ T5929] loop0: detected capacity change from 0 to 8 [ 170.016065][ T5948] syz.0.426 uses obsolete (PF_INET,SOCK_PACKET) [ 170.118396][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 170.129412][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:8 Not tainted 5.15.188-syzkaller #0 [ 170.137839][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.148162][ T4200] Workqueue: hci3 hci_rx_work [ 170.152941][ T4200] Call Trace: [ 170.156245][ T4200] [ 170.159186][ T4200] dump_stack_lvl+0x168/0x230 [ 170.163887][ T4200] ? show_regs_print_info+0x20/0x20 [ 170.169110][ T4200] ? load_image+0x3b0/0x3b0 [ 170.173655][ T4200] sysfs_create_dir_ns+0x252/0x280 [ 170.178780][ T4200] ? __lock_acquire+0x7c60/0x7c60 [ 170.183817][ T4200] ? sysfs_warn_dup+0xa0/0xa0 [ 170.188514][ T4200] ? le_conn_complete_evt+0xcbc/0x1590 [ 170.193994][ T4200] ? hci_event_packet+0xe05/0x12f0 [ 170.199211][ T4200] ? process_one_work+0x863/0x1000 [ 170.204337][ T4200] ? do_raw_spin_unlock+0x11d/0x230 [ 170.209551][ T4200] kobject_add_internal+0x662/0xd00 [ 170.214765][ T4200] kobject_add+0x152/0x210 [ 170.219196][ T4200] ? kobject_init+0x1d0/0x1d0 [ 170.223886][ T4200] ? klist_children_get+0x50/0x50 [ 170.228923][ T4200] ? get_device_parent+0x121/0x3f0 [ 170.234046][ T4200] device_add+0x483/0xfb0 [ 170.238400][ T4200] hci_conn_add_sysfs+0xd1/0x1e0 [ 170.243356][ T4200] le_conn_complete_evt+0xcbc/0x1590 [ 170.248659][ T4200] ? cs_le_create_conn+0x5e0/0x5e0 [ 170.253785][ T4200] ? __mutex_trylock_common+0x14f/0x250 [ 170.259350][ T4200] hci_le_meta_evt+0x289/0x3b80 [ 170.264219][ T4200] ? hci_event_packet+0x36d/0x12f0 [ 170.269341][ T4200] ? hci_event_packet+0x2e2/0x12f0 [ 170.274553][ T4200] ? __lock_acquire+0x7c60/0x7c60 [ 170.279686][ T4200] ? hci_remote_host_features_evt+0x280/0x280 [ 170.285767][ T4200] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 170.291419][ T4200] ? mark_lock+0x94/0x320 [ 170.295776][ T4200] ? mutex_unlock+0x10/0x10 [ 170.300291][ T4200] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 170.306373][ T4200] ? lock_chain_count+0x20/0x20 [ 170.311235][ T4200] ? __rwlock_init+0x140/0x140 [ 170.316012][ T4200] hci_event_packet+0xe05/0x12f0 [ 170.320961][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 170.326179][ T4200] ? rcu_lock_release+0x20/0x20 [ 170.331051][ T4200] ? hci_send_to_monitor+0x9c/0x4a0 [ 170.336260][ T4200] hci_rx_work+0x255/0xa10 [ 170.340874][ T4200] process_one_work+0x863/0x1000 [ 170.345838][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 170.351487][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 170.356788][ T4200] ? _raw_spin_lock_irq+0xab/0xe0 [ 170.361823][ T4200] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 170.367210][ T4200] ? wq_worker_running+0x97/0x170 [ 170.372254][ T4200] worker_thread+0xaa8/0x12a0 [ 170.376963][ T4200] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 170.382872][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 170.388358][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 170.393568][ T4200] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 170.399508][ T4200] kthread+0x436/0x520 [ 170.403732][ T4200] ? rcu_lock_release+0x20/0x20 [ 170.408591][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 170.413184][ T4200] ret_from_fork+0x1f/0x30 [ 170.417597][ T4200] [ 170.423770][ T4200] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 170.439189][ T4200] Bluetooth: hci3: failed to register connection device [ 170.508641][ T5368] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 170.878599][ T5368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.927130][ T5368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.945685][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 170.958395][ T5368] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 170.965994][ T5977] overlayfs: failed to resolve './file0': -2 [ 170.986452][ T5368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.006912][ T5368] usb 1-1: config 0 descriptor?? [ 171.060894][ T5368] hub 1-1:0.0: USB hub found [ 171.081726][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 171.137073][ T5983] loop2: detected capacity change from 0 to 1024 [ 171.179968][ T5989] loop5: detected capacity change from 0 to 1024 [ 171.214636][ T5983] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.271854][ T5368] hub 1-1:0.0: 1 port detected [ 171.287818][ T5989] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.320369][ T5983] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none. [ 171.349189][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.361734][ T26] audit: type=1800 audit(1752775154.909:65): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.444" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 171.365398][ T5989] Trying to write to read-only block-device loop5 [ 171.393874][ T5989] Trying to write to read-only block-device loop5 [ 171.531037][ T4395] Trying to write to read-only block-device loop5 [ 171.547943][ T4395] Trying to write to read-only block-device loop5 [ 171.561508][ T4395] Trying to write to read-only block-device loop5 [ 171.586571][ T4395] Trying to write to read-only block-device loop5 [ 171.611007][ T4395] Trying to write to read-only block-device loop5 [ 171.623211][ T4395] Trying to write to read-only block-device loop5 [ 171.694856][ T4395] Trying to write to read-only block-device loop5 [ 171.745557][ T4395] Trying to write to read-only block-device loop5 [ 171.857935][ T6012] loop2: detected capacity change from 0 to 512 [ 171.928659][ T5368] hub 1-1:0.0: activate --> -90 [ 172.046197][ T6012] EXT4-fs (loop2): Ignoring removed nobh option [ 172.078940][ T6012] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 172.294755][ T6012] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.453: corrupted inode contents [ 172.315996][ T6012] EXT4-fs (loop2): Remounting filesystem read-only [ 172.323631][ T6012] EXT4-fs error (device loop2): ext4_dirty_inode:6040: inode #16: comm syz.2.453: mark_inode_dirty error [ 172.338708][ T6012] EXT4-fs (loop2): Remounting filesystem read-only [ 172.345860][ T6012] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.453: corrupted inode contents [ 172.359932][ T6012] EXT4-fs (loop2): Remounting filesystem read-only [ 172.411780][ T6024] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 172.449986][ T6012] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.453: mark_inode_dirty error [ 172.469302][ T6012] EXT4-fs (loop2): Remounting filesystem read-only [ 172.476531][ T6012] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.453: corrupted inode contents [ 172.501432][ T6027] [ 172.503770][ T6027] ====================================================== [ 172.510923][ T6027] WARNING: possible circular locking dependency detected [ 172.512429][ T5365] usb 1-1: USB disconnect, device number 13 [ 172.517961][ T6027] 5.15.188-syzkaller #0 Not tainted [ 172.517975][ T6027] ------------------------------------------------------ [ 172.517981][ T6027] syz.3.457/6027 is trying to acquire lock: [ 172.517991][ T6027] ffff888078e4aad0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 172.553470][ T6027] [ 172.553470][ T6027] but task is already holding lock: [ 172.560903][ T6027] ffff888078e497a0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 172.569885][ T6027] [ 172.569885][ T6027] which lock already depends on the new lock. [ 172.569885][ T6027] [ 172.580353][ T6027] [ 172.580353][ T6027] the existing dependency chain (in reverse order) is: [ 172.589343][ T6027] [ 172.589343][ T6027] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 172.597236][ T6027] lock_sock_nested+0x44/0x100 [ 172.602541][ T6027] smc_listen_out+0x109/0x3d0 [ 172.607730][ T6027] process_one_work+0x863/0x1000 [ 172.613171][ T6027] worker_thread+0xaa8/0x12a0 [ 172.618358][ T6027] kthread+0x436/0x520 [ 172.623015][ T6027] ret_from_fork+0x1f/0x30 [ 172.628059][ T6027] [ 172.628059][ T6027] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 172.638470][ T6027] __lock_acquire+0x2c33/0x7c60 [ 172.643832][ T6027] lock_acquire+0x197/0x3f0 [ 172.648853][ T6027] __flush_work+0xdd/0x1b0 [ 172.653787][ T6027] __cancel_work_timer+0x3ac/0x520 [ 172.659400][ T6027] smc_clcsock_release+0x5c/0xe0 [ 172.664950][ T6027] __smc_release+0x398/0x500 [ 172.670047][ T6027] smc_close_non_accepted+0xd1/0x1f0 [ 172.675843][ T6027] smc_close_active+0x9d3/0xd90 [ 172.681199][ T6027] __smc_release+0x9a/0x500 [ 172.686208][ T6027] smc_release+0x2ca/0x530 [ 172.691126][ T6027] sock_close+0xd5/0x240 [ 172.695878][ T6027] __fput+0x234/0x930 [ 172.700407][ T6027] task_work_run+0x125/0x1a0 [ 172.705596][ T6027] exit_to_user_mode_loop+0x10f/0x130 [ 172.711492][ T6027] exit_to_user_mode_prepare+0xb1/0x140 [ 172.717549][ T6027] syscall_exit_to_user_mode+0x16/0x40 [ 172.723514][ T6027] do_syscall_64+0x58/0xa0 [ 172.728456][ T6027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.734998][ T6027] [ 172.734998][ T6027] other info that might help us debug this: [ 172.734998][ T6027] [ 172.745529][ T6027] Possible unsafe locking scenario: [ 172.745529][ T6027] [ 172.753067][ T6027] CPU0 CPU1 [ 172.758421][ T6027] ---- ---- [ 172.763783][ T6027] lock(sk_lock-AF_SMC/1); [ 172.768276][ T6027] lock((work_completion)(&new_smc->smc_listen_work)); [ 172.777993][ T6027] lock(sk_lock-AF_SMC/1); [ 172.785096][ T6027] lock((work_completion)(&new_smc->smc_listen_work)); [ 172.792019][ T6027] [ 172.792019][ T6027] *** DEADLOCK *** [ 172.792019][ T6027] [ 172.800154][ T6027] 2 locks held by syz.3.457/6027: [ 172.805157][ T6027] #0: ffff8880737bf410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 172.815345][ T6027] #1: ffff888078e497a0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 172.824730][ T6027] [ 172.824730][ T6027] stack backtrace: [ 172.830615][ T6027] CPU: 1 PID: 6027 Comm: syz.3.457 Not tainted 5.15.188-syzkaller #0 [ 172.838832][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.848880][ T6027] Call Trace: [ 172.852163][ T6027] [ 172.855076][ T6027] dump_stack_lvl+0x168/0x230 [ 172.859817][ T6027] ? load_image+0x3b0/0x3b0 [ 172.864301][ T6027] ? show_regs_print_info+0x20/0x20 [ 172.869488][ T6027] ? print_circular_bug+0x12b/0x1a0 [ 172.874667][ T6027] check_noncircular+0x274/0x310 [ 172.879595][ T6027] ? add_chain_block+0x940/0x940 [ 172.884507][ T6027] ? lockdep_lock+0xdc/0x1e0 [ 172.889083][ T6027] ? rcu_lock_release+0x5/0x20 [ 172.893820][ T6027] ? mark_lock+0x94/0x320 [ 172.898124][ T6027] ? mark_lock+0x94/0x320 [ 172.902431][ T6027] __lock_acquire+0x2c33/0x7c60 [ 172.907349][ T6027] ? deref_stack_reg+0xd0/0x120 [ 172.912178][ T6027] ? hlock_conflict+0x59/0x1f0 [ 172.917013][ T6027] ? check_path+0x40/0x40 [ 172.921480][ T6027] ? verify_lock_unused+0x140/0x140 [ 172.926751][ T6027] ? mark_lock+0x94/0x320 [ 172.931074][ T6027] ? __lock_acquire+0x13ad/0x7c60 [ 172.936177][ T6027] ? add_chain_block+0x940/0x940 [ 172.941098][ T6027] lock_acquire+0x197/0x3f0 [ 172.945586][ T6027] ? __flush_work+0xc1/0x1b0 [ 172.950166][ T6027] ? read_lock_is_recursive+0x10/0x10 [ 172.955696][ T6027] __flush_work+0xdd/0x1b0 [ 172.960089][ T6027] ? __flush_work+0xc1/0x1b0 [ 172.964661][ T6027] ? flush_work+0x20/0x20 [ 172.968964][ T6027] ? try_to_grab_pending+0xf3/0x7e0 [ 172.974138][ T6027] ? lockdep_hardirqs_off+0x70/0x100 [ 172.979434][ T6027] ? mark_lock+0x94/0x320 [ 172.983754][ T6027] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 172.989717][ T6027] ? lock_chain_count+0x20/0x20 [ 172.994562][ T6027] ? print_unlock_imbalance_bug+0x160/0x160 [ 173.000501][ T6027] ? __cancel_work_timer+0x331/0x520 [ 173.005777][ T6027] __cancel_work_timer+0x3ac/0x520 [ 173.010873][ T6027] ? cancel_work_sync+0x20/0x20 [ 173.015733][ T6027] ? __local_bh_enable_ip+0x12a/0x1b0 [ 173.021108][ T6027] ? lockdep_hardirqs_on+0x94/0x140 [ 173.026333][ T6027] ? __local_bh_enable_ip+0x12a/0x1b0 [ 173.031701][ T6027] ? _local_bh_enable+0xa0/0xa0 [ 173.036549][ T6027] smc_clcsock_release+0x5c/0xe0 [ 173.041473][ T6027] __smc_release+0x398/0x500 [ 173.046059][ T6027] smc_close_non_accepted+0xd1/0x1f0 [ 173.051328][ T6027] smc_close_active+0x9d3/0xd90 [ 173.056170][ T6027] __smc_release+0x9a/0x500 [ 173.061108][ T6027] smc_release+0x2ca/0x530 [ 173.065511][ T6027] sock_close+0xd5/0x240 [ 173.069938][ T6027] ? sock_mmap+0x90/0x90 [ 173.074346][ T6027] __fput+0x234/0x930 [ 173.078321][ T6027] task_work_run+0x125/0x1a0 [ 173.082898][ T6027] exit_to_user_mode_loop+0x10f/0x130 [ 173.088253][ T6027] exit_to_user_mode_prepare+0xb1/0x140 [ 173.093919][ T6027] syscall_exit_to_user_mode+0x16/0x40 [ 173.099493][ T6027] do_syscall_64+0x58/0xa0 [ 173.103915][ T6027] ? clear_bhb_loop+0x30/0x80 [ 173.108582][ T6027] ? clear_bhb_loop+0x30/0x80 [ 173.113243][ T6027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 173.119120][ T6027] RIP: 0033:0x7f5a83df9929 [ 173.123515][ T6027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.143113][ T6027] RSP: 002b:00007ffd3a01cbb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 173.151509][ T6027] RAX: 0000000000000000 RBX: 000000000002a123 RCX: 00007f5a83df9929 [ 173.159469][ T6027] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 173.167421][ T6027] RBP: 00007f5a84022ba0 R08: 0000000000000001 R09: 0000000c3a01ceaf [ 173.175461][ T6027] R10: 00007f5a83c6b000 R11: 0000000000000246 R12: 00007f5a84020fac [ 173.183411][ T6027] R13: 00007f5a84020fa0 R14: ffffffffffffffff R15: 00007ffd3a01ccd0 [ 173.191393][ T6027] [ 173.198634][ T6012] EXT4-fs (loop2): Remounting filesystem read-only [ 173.227133][ T6012] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 173.249508][ T6012] EXT4-fs (loop2): Remounting filesystem read-only [ 173.264563][ T6012] EXT4-fs error (device loop2): ext4_do_update_inode:5204: inode #16: comm syz.2.453: corrupted inode contents [ 173.279286][ T6012] EXT4-fs (loop2): Remounting filesystem read-only [ 173.293684][ T6012] EXT4-fs error (device loop2): ext4_truncate:4273: inode #16: comm syz.2.453: mark_inode_dirty error [ 173.307120][ T6012] EXT4-fs (loop2): Remounting filesystem read-only [ 173.319504][ T6012] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 173.329204][ T6012] EXT4-fs (loop2): Remounting filesystem read-only [ 173.336283][ T6012] EXT4-fs (loop2): 1 truncate cleaned up [ 173.342194][ T6012] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 173.354069][ T6012] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.628572][ T5517] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 174.636855][ T5517] Bluetooth: hci2: Injecting HCI hardware error event [ 174.644914][ T4200] Bluetooth: hci2: hardware error 0x00 [ 175.748599][ T1108] Bluetooth: hci4: command 0x0406 tx timeout [ 175.754758][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 175.760802][ T1108] Bluetooth: hci3: command 0x0406 tx timeout