last executing test programs: 4m4.232227654s ago: executing program 3 (id=1521): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40902, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x9, 0x0, 0x0, "810002ee0900598c44ff00be875f3c00"}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_pts(r1, 0x141601) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x5, 0xff7f, 0x1, 0x9, 0x5, "995e825fc02930cf"}) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) 4m2.083913139s ago: executing program 3 (id=1525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semop(r3, 0x0, 0x0) semop(r3, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) syz_usb_connect(0x3, 0x39, 0x0, 0x0) 3m59.670354521s ago: executing program 3 (id=1530): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x207fe, 0x0, 0x3, 0x1, 0x80}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x2, 0x0, 0x7, 0x80, 0xe7ac}, 0x20) r1 = open(0x0, 0x149040, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) ioctl$KVM_CAP_HYPERV_SEND_IPI(r4, 0x4068aea3, &(0x7f0000000300)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x1d, &(0x7f0000000000)=0x1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x6, 0x597, 0x9, 0xdedb, 0x2, '\v\x00\x00]\x00'}) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000000)=0x8001) r8 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m46.760208885s ago: executing program 3 (id=1550): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 3m45.372295291s ago: executing program 3 (id=1554): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0/../file0\x00') syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1120060, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m43.953409887s ago: executing program 3 (id=1560): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40902, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x9, 0x0, 0x0, "810002ee0900598c44ff00be875f3c00"}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_pts(r1, 0x141601) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x5, 0xff7f, 0x1, 0x9, 0x5, "995e825fc02930cf"}) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) 3m28.761597949s ago: executing program 32 (id=1560): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40902, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x9, 0x0, 0x0, "810002ee0900598c44ff00be875f3c00"}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_pts(r1, 0x141601) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)={0x5, 0xff7f, 0x1, 0x9, 0x5, "995e825fc02930cf"}) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) 2m16.263364912s ago: executing program 4 (id=1742): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60020000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m15.962219529s ago: executing program 4 (id=1745): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, 0x0, 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) 2m14.432536879s ago: executing program 4 (id=1751): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x538, 0x208, 0x3f0, 0x208, 0x2d8, 0x208, 0x668, 0x668, 0x668, 0x668, 0x668, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffffff, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 'vlan0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x5e, 0x65, 0x8, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x81, 0x1}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, @mcast2, [0xffffffff, 0xffffffff, 0xff000000], [0x0, 0xffffffff, 0xff, 0xff000000], 'veth1_to_bond\x00', 'wlan1\x00', {0xff}, {0xff}, 0x0, 0x0, 0x3, 0x40}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x22, 0x0, 0xfff9}}}, {{@ipv6={@empty, @local, [0x0, 0xff000000, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0xffffff00, 0xff000000], 'veth1_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x88, 0x7, 0x2, 0x2}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0xe000, @ipv4=@multicast1, 0x4e23}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [], 'veth0_to_batadv\x00', 'bond0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x7, 0x52}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv4=@multicast1, 0x19, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x2000, 0x103) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) shutdown(r4, 0x2) 2m13.144315832s ago: executing program 4 (id=1752): fsopen(&(0x7f0000000140)='bfs\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x658080, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x210000, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000280)={0x2, 0x0, 0x6, {0xffff8001, 0xe7fffffc, 0xe44, 0xf}}) 2m11.631018421s ago: executing program 4 (id=1757): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 2m10.224673558s ago: executing program 4 (id=1760): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) 1m54.291113169s ago: executing program 33 (id=1760): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) 1m49.2095539s ago: executing program 1 (id=1790): userfaultfd(0x801) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m44.058764653s ago: executing program 1 (id=1797): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) 1m42.912699633s ago: executing program 1 (id=1801): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m41.303208044s ago: executing program 1 (id=1806): userfaultfd(0x801) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m36.337343662s ago: executing program 1 (id=1814): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x5018, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) 1m33.117824756s ago: executing program 1 (id=1819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1m17.794769941s ago: executing program 34 (id=1819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 19.318326211s ago: executing program 5 (id=1952): userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 19.108837847s ago: executing program 2 (id=1953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semop(r3, 0x0, 0x0) semop(r3, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) syz_usb_connect(0x3, 0x39, 0x0, 0x0) 17.697992393s ago: executing program 2 (id=1957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 17.282901164s ago: executing program 5 (id=1959): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x5018, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) 16.856243655s ago: executing program 7 (id=1960): gettid() timer_create(0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) epoll_create(0x7) r0 = socket(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@remote, 0x2f, r2}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 11.21050316s ago: executing program 7 (id=1964): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_sync\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='adaptive\x00', 0x9) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') nanosleep(0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) syz_open_dev$usbfs(0x0, 0x1f, 0x2) 11.086487214s ago: executing program 5 (id=1965): socket$packet(0x11, 0x0, 0x300) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) r1 = dup(r0) read$FUSE(r1, 0x0, 0x600) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 10.888655659s ago: executing program 0 (id=1967): setfsgid(0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabb8, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000500)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x2000, 0x1, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 10.761965562s ago: executing program 7 (id=1968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semop(r3, 0x0, 0x0) semop(r3, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) syz_usb_connect(0x3, 0x39, 0x0, 0x0) 10.118367569s ago: executing program 5 (id=1969): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001d00010028bd7008cddb", @ANYRES32=r1, @ANYBLOB="8000020805000500feff00000a000200ffff"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) syz_usb_connect$uac3(0x6, 0x104, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 9.082660855s ago: executing program 7 (id=1970): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200076a0ec20749380000000a0304004e234e2202000100ffff00000000000100"/56, @ANYRES32=0x0, @ANYBLOB="05000000130600000800000100000000080003"], 0x54}}, 0x20004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, 0x0, 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) 7.404475459s ago: executing program 6 (id=1972): keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) pipe2(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x4, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x4, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffa, 0x0, 0xffffffeb, 0x2004, 0x3, 0x7, 0xf253, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x9537, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x5, 0x2, 0x5, 0x2000000e, 0x2, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x45cb, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x9, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x20002, 0x0, 0x2, 0x9, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x5, 0x6, 0x6, 0x3, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x8001, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x3, 0x5, 0x80000001, 0xffff0000, 0x9, 0x1000, 0x0, 0x7fff, 0x6, 0xfffffff9, 0x0, 0x8001000, 0x80040101, 0x81, 0x8, 0x6, 0x200003, 0xfffffffe, 0x5, 0x80, 0x9, 0x8001, 0x12000, 0x4, 0x7, 0x400004, 0x3, 0x9, 0x3, 0x8, 0xb3d, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x81, 0x6, 0x100dffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x5, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x2, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x8003, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x7, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x481, 0x0, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xffffffa3, 0x136, 0x7]}, 0x45c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f00000001c0)) msgsnd(0x0, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports/1\x00', 0x200) 6.371278045s ago: executing program 5 (id=1973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) epoll_create1(0x80000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648, 0x200, 0x9}]}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237646, 0x0, 0x9}]}) 6.329702986s ago: executing program 6 (id=1974): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60020000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.233834209s ago: executing program 2 (id=1975): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x5018, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, 0x0, &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) 6.232974099s ago: executing program 0 (id=1976): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="31301f31", 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1\x00', 0x2) 6.080606973s ago: executing program 6 (id=1977): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="400e280000002b"], 0x0, 0x0, 0x0, 0x0, 0x0}) 4.743445587s ago: executing program 0 (id=1978): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_sync\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='adaptive\x00', 0x9) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') nanosleep(0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) syz_open_dev$usbfs(0x0, 0x1f, 0x2) 4.416569796s ago: executing program 2 (id=1979): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x83, 0x2, 'W7'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 4.016616706s ago: executing program 0 (id=1980): set_mempolicy(0x3, &(0x7f0000000080)=0x3, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000001000)="fc", 0x1, 0x1000) 2.739493709s ago: executing program 7 (id=1981): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semop(r3, 0x0, 0x0) semop(r3, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) syz_usb_connect(0x3, 0x39, 0x0, 0x0) 2.586061793s ago: executing program 6 (id=1982): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) 2.042627597s ago: executing program 7 (id=1983): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x60}}, 0x200040c0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.792578884s ago: executing program 0 (id=1984): socket(0x1e, 0x4, 0x0) poll(&(0x7f00000004c0), 0x0, 0x7f) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) shutdown(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x9}}}}}}, 0x0) 1.596537019s ago: executing program 6 (id=1985): keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) pipe2(0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x4, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x4, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffa, 0x0, 0xffffffeb, 0x2004, 0x3, 0x7, 0xf253, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x9537, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x5, 0x2, 0x5, 0x2000000e, 0x2, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x45cb, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x9, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x20002, 0x0, 0x2, 0x9, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x5, 0x6, 0x6, 0x3, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x8001, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x3, 0x5, 0x80000001, 0xffff0000, 0x9, 0x1000, 0x0, 0x7fff, 0x6, 0xfffffff9, 0x0, 0x8001000, 0x80040101, 0x81, 0x8, 0x6, 0x200003, 0xfffffffe, 0x5, 0x80, 0x9, 0x8001, 0x12000, 0x4, 0x7, 0x400004, 0x3, 0x9, 0x3, 0x8, 0xb3d, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x81, 0x6, 0x100dffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x5, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x2, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x8003, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x7, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x481, 0x0, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xffffffa3, 0x136, 0x7]}, 0x45c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f00000001c0)) msgsnd(0x0, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/ports/1\x00', 0x200) 355.983391ms ago: executing program 6 (id=1986): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) 353.731961ms ago: executing program 2 (id=1987): r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 259.802043ms ago: executing program 5 (id=1988): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x207fe, 0x0, 0x3, 0x1, 0x80}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x2, 0x0, 0x7, 0x80, 0xe7ac}, 0x20) r1 = open(0x0, 0x149040, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) ioctl$KVM_CAP_HYPERV_SEND_IPI(r3, 0x4068aea3, &(0x7f0000000300)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x10) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x1d, &(0x7f0000000000)=0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x6, 0x597, 0x9, 0xdedb, 0x2, '\v\x00\x00]\x00'}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) socket$netlink(0x10, 0x3, 0xc) 720.94µs ago: executing program 2 (id=1989): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x5018, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) 0s ago: executing program 0 (id=1990): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/max_speed\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_sync\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='adaptive\x00', 0x9) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') nanosleep(0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) syz_open_dev$usbfs(0x0, 0x1f, 0x2) kernel console output (not intermixed with test programs): config 1 has too many interfaces: 66, using maximum allowed: 32 [ 603.396609][ T4326] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 603.450223][ T4326] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 603.465913][ T4326] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 603.499889][ T4326] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 603.542402][ T8954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.560285][ T4326] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 603.588257][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 603.636128][ T8037] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 603.642207][ T4326] usb 2-1: Product: syz [ 603.678748][ T4326] usb 2-1: Manufacturer: syz [ 603.742281][ T4326] cdc_wdm 2-1:1.0: skipping garbage [ 603.755886][ T4326] cdc_wdm 2-1:1.0: skipping garbage [ 603.774713][ T4326] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 603.847056][ T8037] usb 3-1: Using ep0 maxpacket: 32 [ 603.854635][ T8037] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 603.896020][ T8037] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 603.932786][ T8037] usb 3-1: config 0 interface 0 has no altsetting 0 [ 603.952928][ T8037] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 603.980296][ T8037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.009290][ T8037] usb 3-1: Product: syz [ 604.013531][ T8037] usb 3-1: Manufacturer: syz [ 604.035471][ T8037] usb 3-1: SerialNumber: syz [ 604.053555][ T8037] usb 3-1: config 0 descriptor?? [ 604.077712][ T4324] usb 2-1: USB disconnect, device number 39 [ 604.280302][ T4326] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 604.476040][ T4326] usb 4-1: Using ep0 maxpacket: 32 [ 604.483682][ T4326] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 604.496738][ T8037] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 604.506040][ T8037] gs_usb: probe of 3-1:0.0 failed with error -121 [ 604.525902][ T4326] usb 4-1: config 0 has no interface number 0 [ 604.554847][ T4326] usb 4-1: config 0 interface 12 has no altsetting 0 [ 604.578946][ T4326] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 604.608576][ T4326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.649209][ T4326] usb 4-1: Product: syz [ 604.653531][ T4326] usb 4-1: Manufacturer: syz [ 604.668695][ T4326] usb 4-1: SerialNumber: syz [ 604.686451][ T4326] usb 4-1: config 0 descriptor?? [ 604.725467][ T7844] usb 3-1: USB disconnect, device number 45 [ 607.932591][ T4326] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 608.059352][ T4326] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 608.075632][ T4326] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 608.103182][ T4326] f81534: probe of 4-1:0.12 failed with error -71 [ 608.152665][ T4326] usb 4-1: USB disconnect, device number 45 [ 608.282366][ T8979] null_blk: disk nullb1 created [ 608.720682][ T9010] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1379'. [ 608.781239][ T9010] nbd: must specify at least one socket [ 608.876219][ T8037] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 608.906766][ T9014] block nbd2: NBD_DISCONNECT [ 608.986091][ T4262] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 609.178243][ T8037] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 609.187261][ T4262] usb 4-1: Using ep0 maxpacket: 8 [ 609.197865][ T4262] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 609.236013][ T8037] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 609.266829][ T4262] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 609.305604][ T8037] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 609.325857][ T4262] usb 4-1: Product: syz [ 609.430603][ T4262] usb 4-1: Manufacturer: syz [ 609.435929][ T8037] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 609.447074][ T4262] usb 4-1: SerialNumber: syz [ 609.454482][ T4262] usb 4-1: config 0 descriptor?? [ 609.459655][ T8037] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 609.474796][ T4262] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 609.495146][ T8037] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 609.516386][ T8037] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 609.525654][ T8037] usb 1-1: Product: syz [ 609.541031][ T8037] usb 1-1: Manufacturer: syz [ 609.563787][ T8037] cdc_wdm 1-1:1.0: skipping garbage [ 609.572719][ T8037] cdc_wdm 1-1:1.0: skipping garbage [ 609.583058][ T8037] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 609.615990][ T4326] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 609.791081][ T4324] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 609.838457][ T4326] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 609.863265][ T4326] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 609.906261][ T4326] usb 2-1: config 4 has no interface number 0 [ 609.912598][ T4326] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 609.938097][ T7844] usb 1-1: USB disconnect, device number 50 [ 609.967969][ T4326] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 609.985131][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.994402][ T4326] usb 2-1: Product: syz [ 609.999170][ T4324] usb 3-1: Using ep0 maxpacket: 32 [ 610.008552][ T4324] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 610.025971][ T4326] usb 2-1: Manufacturer: syz [ 610.030853][ T4326] usb 2-1: SerialNumber: syz [ 610.036760][ T4324] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 610.068125][ T4324] usb 3-1: config 0 interface 0 has no altsetting 0 [ 610.089063][ T4324] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 610.101587][ T4262] gspca_zc3xx: reg_w_i err -71 [ 610.106252][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.109595][ T4262] gspca_zc3xx: probe of 4-1:0.0 failed with error -71 [ 610.125286][ T4324] usb 3-1: Product: syz [ 610.129759][ T4324] usb 3-1: Manufacturer: syz [ 610.134512][ T4324] usb 3-1: SerialNumber: syz [ 610.153068][ T4324] usb 3-1: config 0 descriptor?? [ 610.162333][ T4262] usb 4-1: USB disconnect, device number 46 [ 610.598979][ T4324] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 610.622766][ T4324] gs_usb: probe of 3-1:0.0 failed with error -121 [ 610.807062][ T4324] usb 3-1: USB disconnect, device number 46 [ 611.300792][ T26] audit: type=1800 audit(1788811092.473:107): pid=9030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1389" name="addr_trtype" dev="configfs" ino=48003 res=0 errno=0 [ 611.409105][ T4326] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 611.450399][ T4326] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 611.477268][ T26] audit: type=1800 audit(1788811092.503:108): pid=9030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1389" name="addr_traddr" dev="configfs" ino=48004 res=0 errno=0 [ 612.054718][ T4326] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 612.076125][ T4326] usb 2-1: media controller created [ 612.083709][ T4326] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 612.277411][ T4326] DVB: Unable to find symbol dib7000p_attach() [ 612.283691][ T4326] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 612.378642][ T9046] loop2: detected capacity change from 0 to 2048 [ 612.620351][ T9046] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 612.793996][ T9046] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 612.867834][ T9046] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 612.883155][ T9046] EXT4-fs (loop2): This should not happen!! Data will be lost [ 612.883155][ T9046] [ 612.893825][ T9046] EXT4-fs (loop2): Total free blocks count 0 [ 612.900859][ T9046] EXT4-fs (loop2): Free/Dirty block details [ 612.907825][ T9046] EXT4-fs (loop2): free_blocks=2415919104 [ 612.915350][ T9046] EXT4-fs (loop2): dirty_blocks=16 [ 612.921090][ T9046] EXT4-fs (loop2): Block reservation details [ 612.927941][ T9046] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 612.965993][ T4326] rc_core: IR keymap rc-dib0700-rc5 not found [ 612.972552][ T4326] Registered IR keymap rc-empty [ 612.986153][ T4326] dvb-usb: could not initialize remote control. [ 613.001875][ T4326] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 613.209609][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 613.569869][ T4324] usb 2-1: USB disconnect, device number 40 [ 613.598531][ T4324] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 613.635986][ T4326] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 613.697657][ T7844] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 613.818546][ T4326] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 613.830941][ T4326] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 613.843130][ T4326] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 613.861508][ T4326] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 613.875191][ T4326] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 613.907407][ T7844] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 613.922782][ T4326] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 613.932204][ T7844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.947806][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 613.956088][ T7844] usb 4-1: Product: syz [ 613.961413][ T7844] usb 4-1: Manufacturer: syz [ 613.966194][ T7844] usb 4-1: SerialNumber: syz [ 613.971884][ T4326] usb 1-1: Product: syz [ 613.976547][ T4326] usb 1-1: Manufacturer: syz [ 613.983811][ T7844] usb 4-1: config 0 descriptor?? [ 614.000638][ T4326] cdc_wdm 1-1:1.0: skipping garbage [ 614.007520][ T4326] cdc_wdm 1-1:1.0: skipping garbage [ 614.023432][ T4326] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 614.061608][ T4363] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 614.222566][ T7844] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 614.298007][ T4326] usb 1-1: USB disconnect, device number 51 [ 614.326031][ T4363] usb 5-1: Using ep0 maxpacket: 8 [ 614.336326][ T4363] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 614.366413][ T4363] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 614.398135][ T4363] usb 5-1: Product: syz [ 614.402451][ T4363] usb 5-1: Manufacturer: syz [ 614.424966][ T4363] usb 5-1: SerialNumber: syz [ 614.443931][ T4363] usb 5-1: config 0 descriptor?? [ 614.469266][ T4363] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 615.552492][ T4363] gspca_zc3xx: reg_r err -71 [ 615.558241][ T4363] gspca_zc3xx: probe of 5-1:0.0 failed with error -71 [ 615.576628][ T4363] usb 5-1: USB disconnect, device number 59 [ 615.587041][ T7844] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 615.840914][ T26] audit: type=1800 audit(1788811097.013:109): pid=9081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1402" name="addr_trtype" dev="configfs" ino=46989 res=0 errno=0 [ 615.941139][ T26] audit: type=1800 audit(1788811097.043:110): pid=9081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1402" name="addr_traddr" dev="configfs" ino=46990 res=0 errno=0 [ 616.036039][ T7844] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 616.052963][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1404'. [ 616.276189][ T7844] usb 3-1: Using ep0 maxpacket: 32 [ 616.291544][ T7844] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 616.397870][ T7844] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 616.498316][ T7844] usb 3-1: config 0 interface 0 has no altsetting 0 [ 616.583904][ T7844] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 616.701710][ T7844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.761107][ T7844] usb 3-1: Product: syz [ 616.765345][ T7844] usb 3-1: Manufacturer: syz [ 616.824755][ T7844] usb 3-1: SerialNumber: syz [ 616.855981][ T4326] usb 4-1: USB disconnect, device number 47 [ 616.895244][ T7844] usb 3-1: config 0 descriptor?? [ 617.364357][ T7844] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 617.380535][ T7844] gs_usb: probe of 3-1:0.0 failed with error -121 [ 617.592975][ T7844] usb 3-1: USB disconnect, device number 47 [ 617.953025][ T9113] using random self ethernet address [ 617.958949][ T9113] using random host ethernet address [ 618.769697][ T9115] kAFS: No cell specified [ 619.636076][ T4363] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 619.681174][ T9122] loop3: detected capacity change from 0 to 128 [ 619.726084][ T4262] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 619.915986][ T4363] usb 5-1: Using ep0 maxpacket: 8 [ 619.929005][ T4363] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 619.941689][ T4363] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 620.654035][ T4363] usb 5-1: Product: syz [ 620.658367][ T4363] usb 5-1: Manufacturer: syz [ 620.663417][ T4363] usb 5-1: SerialNumber: syz [ 620.671106][ T4363] usb 5-1: config 0 descriptor?? [ 620.700011][ T4262] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 620.713964][ T4363] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 620.728343][ T4262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.738141][ T4262] usb 3-1: Product: syz [ 620.742412][ T4262] usb 3-1: Manufacturer: syz [ 620.776254][ T4262] usb 3-1: SerialNumber: syz [ 620.792630][ T4262] usb 3-1: config 0 descriptor?? [ 620.904527][ T26] audit: type=1800 audit(1788811102.073:111): pid=9131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1420" name="addr_trtype" dev="configfs" ino=48211 res=0 errno=0 [ 621.078492][ T4262] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 621.103277][ T26] audit: type=1800 audit(1788811102.123:112): pid=9131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1420" name="addr_traddr" dev="configfs" ino=48212 res=0 errno=0 [ 621.167719][ T4363] gspca_zc3xx: reg_r err -32 [ 621.177156][ T4363] gspca_zc3xx: probe of 5-1:0.0 failed with error -32 [ 621.344500][ T4363] usb 5-1: USB disconnect, device number 60 [ 621.714184][ T4262] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 622.286103][ T9146] autofs4:pid:9146:autofs_fill_super: called with bogus options [ 622.887967][ T7899] usb 3-1: USB disconnect, device number 48 [ 623.310750][ T26] audit: type=1800 audit(1788811104.483:113): pid=9169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1434" name="addr_trtype" dev="configfs" ino=47094 res=0 errno=0 [ 623.520159][ T26] audit: type=1800 audit(1788811104.523:114): pid=9169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1434" name="addr_traddr" dev="configfs" ino=47095 res=0 errno=0 [ 623.636523][ T9167] loop1: detected capacity change from 0 to 512 [ 624.013388][ T9167] EXT4-fs (loop1): Test dummy encryption mode enabled [ 624.183758][ T9167] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 624.328744][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.335383][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.397823][ T9167] EXT4-fs (loop1): 1 truncate cleaned up [ 624.436183][ T9167] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 625.298901][ T9156] loop3: detected capacity change from 0 to 32768 [ 625.334273][ T9156] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1430 (9156) [ 625.402769][ T9156] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 625.443226][ T9156] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 625.526112][ T9156] BTRFS info (device loop3): force clearing of disk cache [ 625.534287][ T9156] BTRFS info (device loop3): enabling auto defrag [ 625.540998][ T9156] BTRFS info (device loop3): max_inline at 0 [ 625.556053][ T9156] BTRFS info (device loop3): enabling disk space caching [ 625.564139][ T9156] BTRFS info (device loop3): disk space caching is enabled [ 627.044474][ T9177] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 627.319405][ T9156] BTRFS error (device loop3): open_ctree failed: -12 [ 627.376834][ T4283] EXT4-fs (loop1): unmounting filesystem. [ 627.736062][ T4399] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4399) [ 628.406076][ T129] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 628.600714][ T129] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 629.430393][ T26] audit: type=1800 audit(1788811110.603:115): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1445" name="addr_trtype" dev="configfs" ino=49177 res=0 errno=0 [ 629.615415][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.624045][ T129] usb 5-1: Product: syz [ 629.629747][ T129] usb 5-1: Manufacturer: syz [ 629.650058][ T129] usb 5-1: SerialNumber: syz [ 629.667111][ T129] usb 5-1: config 0 descriptor?? [ 629.705955][ T26] audit: type=1800 audit(1788811110.633:116): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1445" name="addr_traddr" dev="configfs" ino=49178 res=0 errno=0 [ 629.882946][ T129] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 630.336022][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'. [ 630.345463][ T9238] block nbd0: Unsupported socket: should be TCP or UNIX. [ 630.436434][ T22] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 630.664788][ T129] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 630.676186][ T9203] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 630.786006][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 630.850120][ T22] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 630.930455][ T22] usb 2-1: config 0 has no interface number 0 [ 630.968565][ T22] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 631.002186][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.016564][ T9203] usb 3-1: unable to get BOS descriptor or descriptor too short [ 631.034559][ T9203] usb 3-1: config 2 has an invalid interface number: 8 but max is 0 [ 631.064222][ T22] usb 2-1: Product: syz [ 631.074112][ T9203] usb 3-1: config 2 has no interface number 0 [ 631.083895][ T22] usb 2-1: Manufacturer: syz [ 631.097713][ T9203] usb 3-1: config 2 interface 8 has no altsetting 0 [ 631.104768][ T22] usb 2-1: SerialNumber: syz [ 631.130814][ T22] usb 2-1: config 0 descriptor?? [ 631.146518][ T9203] usb 3-1: string descriptor 0 read error: -22 [ 631.163474][ T9203] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 631.179691][ T22] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 631.195376][ T9203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.224719][ T9203] usbtest 3-1:2.8: Linux user mode ISO test driver [ 631.231791][ T9203] usbtest 3-1:2.8: low-speed {control} tests [ 631.490160][ T9230] loop3: detected capacity change from 0 to 32768 [ 631.542123][ T9230] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1446 (9230) [ 631.591754][ T9230] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 631.621630][ T9230] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 631.650422][ T9230] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 631.681673][ T9230] BTRFS info (device loop3): use lzo compression, level 0 [ 631.713149][ T9230] BTRFS info (device loop3): using free space tree [ 631.827335][ T2171] usb 5-1: USB disconnect, device number 61 [ 631.946792][ T9230] BTRFS info (device loop3): enabling ssd optimizations [ 632.456128][ T22] gspca_spca1528: reg_w err -110 [ 632.487950][ T22] spca1528: probe of 2-1:0.1 failed with error -110 [ 633.114144][ T2171] usb 3-1: USB disconnect, device number 49 [ 633.646129][ T2171] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 633.884195][ T2171] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.915316][ T2171] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 633.977620][ T2171] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 634.029538][ T2171] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.065847][ T2171] usb 3-1: Product: syz [ 634.070092][ T2171] usb 3-1: Manufacturer: syz [ 634.074732][ T2171] usb 3-1: SerialNumber: syz [ 634.127956][ T2171] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 634.135187][ T2171] gspca_mr97310a: reg write [21] error -22 [ 634.182141][ T2171] mr97310a: probe of 3-1:1.0 failed with error -22 [ 634.496016][ T9203] usb 2-1: USB disconnect, device number 41 [ 634.778738][ T9288] netlink: 'syz.0.1456': attribute type 13 has an invalid length. [ 634.925547][ T9288] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 635.026571][ T9288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 635.050864][ T9288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 635.063042][ T4281] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 635.234969][ T26] audit: type=1800 audit(1788811116.403:117): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1459" name="addr_trtype" dev="configfs" ino=48402 res=0 errno=0 [ 636.030922][ T26] audit: type=1800 audit(1788811116.443:118): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1459" name="addr_traddr" dev="configfs" ino=48403 res=0 errno=0 [ 636.351756][ T4746] usb 3-1: USB disconnect, device number 50 [ 636.436309][ T2171] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 636.746424][ T2171] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 636.836116][ T2171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.845033][ T2171] usb 2-1: Product: syz [ 636.854532][ T2171] usb 2-1: Manufacturer: syz [ 636.862427][ T2171] usb 2-1: SerialNumber: syz [ 636.892741][ T2171] usb 2-1: config 0 descriptor?? [ 637.973480][ T2171] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 637.995265][ T9319] FAULT_INJECTION: forcing a failure. [ 637.995265][ T9319] name failslab, interval 1, probability 1, space 0, times 0 [ 638.295313][ T9319] CPU: 0 PID: 9319 Comm: syz.4.1464 Not tainted syzkaller #0 [ 638.302772][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 638.312861][ T9319] Call Trace: [ 638.316167][ T9319] [ 638.319140][ T9319] dump_stack_lvl+0x188/0x24e [ 638.323882][ T9319] ? show_regs_print_info+0x12/0x12 [ 638.329153][ T9319] ? load_image+0x410/0x410 [ 638.333715][ T9319] ? __lock_acquire+0x7c40/0x7c40 [ 638.338896][ T9319] should_fail_ex+0x390/0x4c0 [ 638.343629][ T9319] should_failslab+0x5/0x20 [ 638.348172][ T9319] slab_pre_alloc_hook+0x59/0x300 [ 638.353249][ T9319] kmem_cache_alloc_lru+0x49/0x2e0 [ 638.358394][ T9319] ? sock_alloc_inode+0x24/0xc0 [ 638.363365][ T9319] sock_alloc_inode+0x24/0xc0 [ 638.368091][ T9319] ? sockfs_init_fs_context+0xa0/0xa0 [ 638.373497][ T9319] new_inode_pseudo+0x5f/0x1c0 [ 638.378336][ T9319] __sock_create+0x129/0x940 [ 638.383028][ T9319] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 638.389147][ T9319] __sys_socket+0xc4/0x190 [ 638.393623][ T9319] __x64_sys_socket+0x76/0x80 [ 638.398341][ T9319] do_syscall_64+0x4c/0xa0 [ 638.402803][ T9319] ? clear_bhb_loop+0x60/0xb0 [ 638.407517][ T9319] ? clear_bhb_loop+0x60/0xb0 [ 638.412237][ T9319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 638.418170][ T9319] RIP: 0033:0x7ff39079e159 [ 638.422616][ T9319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.442266][ T9319] RSP: 002b:00007ff391613028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 638.450724][ T9319] RAX: ffffffffffffffda RBX: 00007ff390a25fa0 RCX: 00007ff39079e159 [ 638.458742][ T9319] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 638.466752][ T9319] RBP: 00007ff390835024 R08: 0000000000000000 R09: 0000000000000000 [ 638.474761][ T9319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.482766][ T9319] R13: 00007ff390a26038 R14: 00007ff390a25fa0 R15: 00007ffee58646d8 [ 638.490877][ T9319] [ 638.822565][ T2171] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 639.312356][ T9319] socket: no more sockets [ 640.989769][ T9336] kAFS: No cell specified [ 641.376533][ T9303] usb 2-1: USB disconnect, device number 42 [ 641.838487][ T9345] block nbd0: NBD_DISCONNECT [ 642.699384][ T26] audit: type=1804 audit(1788811123.873:119): pid=9344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1471" name="bus" dev="ramfs" ino=49295 res=1 errno=0 [ 642.850227][ T26] audit: type=1804 audit(1788811124.013:120): pid=9344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1471" name="bus" dev="ramfs" ino=49295 res=1 errno=0 [ 642.890021][ T9356] FAULT_INJECTION: forcing a failure. [ 642.890021][ T9356] name failslab, interval 1, probability 1, space 0, times 0 [ 642.948221][ T9356] CPU: 1 PID: 9356 Comm: syz.4.1478 Not tainted syzkaller #0 [ 642.955674][ T9356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 642.965768][ T9356] Call Trace: [ 642.969077][ T9356] [ 642.972052][ T9356] dump_stack_lvl+0x188/0x24e [ 642.976782][ T9356] ? show_regs_print_info+0x12/0x12 [ 642.982028][ T9356] ? load_image+0x410/0x410 [ 642.986585][ T9356] ? __lock_acquire+0x7c40/0x7c40 [ 642.991669][ T9356] should_fail_ex+0x390/0x4c0 [ 642.996413][ T9356] should_failslab+0x5/0x20 [ 643.000947][ T9356] slab_pre_alloc_hook+0x59/0x300 [ 643.006026][ T9356] kmem_cache_alloc_lru+0x49/0x2e0 [ 643.011178][ T9356] ? sock_alloc_inode+0x24/0xc0 [ 643.016080][ T9356] sock_alloc_inode+0x24/0xc0 [ 643.020812][ T9356] ? sockfs_init_fs_context+0xa0/0xa0 [ 643.026203][ T9356] new_inode_pseudo+0x5f/0x1c0 [ 643.030996][ T9356] __sock_create+0x129/0x940 [ 643.035613][ T9356] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 643.041620][ T9356] __sys_socket+0xc4/0x190 [ 643.046064][ T9356] __x64_sys_socket+0x76/0x80 [ 643.050761][ T9356] do_syscall_64+0x4c/0xa0 [ 643.055193][ T9356] ? clear_bhb_loop+0x60/0xb0 [ 643.059886][ T9356] ? clear_bhb_loop+0x60/0xb0 [ 643.064602][ T9356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.070512][ T9356] RIP: 0033:0x7ff39079e159 [ 643.074941][ T9356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.094578][ T9356] RSP: 002b:00007ff391613028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 643.103012][ T9356] RAX: ffffffffffffffda RBX: 00007ff390a25fa0 RCX: 00007ff39079e159 [ 643.110999][ T9356] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 643.118983][ T9356] RBP: 00007ff390835024 R08: 0000000000000000 R09: 0000000000000000 [ 643.126968][ T9356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.134955][ T9356] R13: 00007ff390a26038 R14: 00007ff390a25fa0 R15: 00007ffee58646d8 [ 643.142960][ T9356] [ 643.206472][ T9356] socket: no more sockets [ 643.325891][ T4606] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 643.522093][ T4606] usb 3-1: Using ep0 maxpacket: 32 [ 643.529911][ T4606] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 643.575477][ T4606] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 643.646096][ T4606] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 643.654934][ T4606] usb 3-1: Product: syz [ 643.716040][ T4606] usb 3-1: Manufacturer: syz [ 643.720710][ T4606] usb 3-1: SerialNumber: syz [ 643.773024][ T4606] usb 3-1: config 0 descriptor?? [ 643.783156][ T26] audit: type=1326 audit(1788811124.953:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9369 comm="syz.3.1474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa28a59e159 code=0x0 [ 643.857228][ T9357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 644.275370][ T9379] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1486'. [ 644.342678][ T2171] usb 3-1: USB disconnect, device number 51 [ 644.750384][ T9392] block nbd4: NBD_DISCONNECT [ 645.540942][ T9401] size and base must be multiples of 4 kiB [ 645.576144][ T9401] CPU: 1 PID: 9401 Comm: syz.4.1491 Not tainted syzkaller #0 [ 645.583598][ T9401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 645.593690][ T9401] Call Trace: [ 645.596997][ T9401] [ 645.600137][ T9401] dump_stack_lvl+0x188/0x24e [ 645.604858][ T9401] ? __might_fault+0xa6/0x120 [ 645.609636][ T9401] ? show_regs_print_info+0x12/0x12 [ 645.614884][ T9401] ? load_image+0x410/0x410 [ 645.619424][ T9401] ? tomoyo_path_number_perm+0x5a4/0x650 [ 645.625133][ T9401] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 645.630625][ T9401] ? __might_fault+0xa6/0x120 [ 645.635334][ T9401] ? __might_fault+0xc2/0x120 [ 645.640038][ T9401] ? __might_fault+0xa6/0x120 [ 645.644748][ T9401] mtrr_add+0x8e/0xc0 [ 645.648793][ T9401] mtrr_ioctl+0x9bf/0x1140 [ 645.653259][ T9401] ? mtrr_close+0x1f0/0x1f0 [ 645.657808][ T9401] ? __fget_files+0x28/0x460 [ 645.662450][ T9401] ? mtrr_close+0x1f0/0x1f0 [ 645.666987][ T9401] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 645.672489][ T9401] ? proc_reg_poll+0x280/0x280 [ 645.677292][ T9401] __se_sys_ioctl+0xfa/0x170 [ 645.681920][ T9401] do_syscall_64+0x4c/0xa0 [ 645.686376][ T9401] ? clear_bhb_loop+0x60/0xb0 [ 645.691092][ T9401] ? clear_bhb_loop+0x60/0xb0 [ 645.695808][ T9401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.701733][ T9401] RIP: 0033:0x7ff39079e159 [ 645.706177][ T9401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.725814][ T9401] RSP: 002b:00007ff391613028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 645.734263][ T9401] RAX: ffffffffffffffda RBX: 00007ff390a25fa0 RCX: 00007ff39079e159 [ 645.742260][ T9401] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000003 [ 645.750260][ T9401] RBP: 00007ff390835024 R08: 0000000000000000 R09: 0000000000000000 [ 645.758255][ T9401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.766261][ T9401] R13: 00007ff390a26038 R14: 00007ff390a25fa0 R15: 00007ffee58646d8 [ 645.774280][ T9401] [ 648.524182][ T9407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.619143][ T9408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.702550][ T9413] FAULT_INJECTION: forcing a failure. [ 648.702550][ T9413] name failslab, interval 1, probability 1, space 0, times 0 [ 648.785982][ T9413] CPU: 1 PID: 9413 Comm: syz.3.1496 Not tainted syzkaller #0 [ 648.793441][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 648.803528][ T9413] Call Trace: [ 648.806806][ T9413] [ 648.809732][ T9413] dump_stack_lvl+0x188/0x24e [ 648.814432][ T9413] ? show_regs_print_info+0x12/0x12 [ 648.819669][ T9413] ? load_image+0x410/0x410 [ 648.824207][ T9413] ? __lock_acquire+0x7c40/0x7c40 [ 648.829257][ T9413] should_fail_ex+0x390/0x4c0 [ 648.833940][ T9413] should_failslab+0x5/0x20 [ 648.838445][ T9413] slab_pre_alloc_hook+0x59/0x300 [ 648.843471][ T9413] kmem_cache_alloc_lru+0x49/0x2e0 [ 648.848585][ T9413] ? sock_alloc_inode+0x24/0xc0 [ 648.853449][ T9413] sock_alloc_inode+0x24/0xc0 [ 648.858122][ T9413] ? sockfs_init_fs_context+0xa0/0xa0 [ 648.863487][ T9413] new_inode_pseudo+0x5f/0x1c0 [ 648.868258][ T9413] __sock_create+0x129/0x940 [ 648.872860][ T9413] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 648.878858][ T9413] __sys_socket+0xc4/0x190 [ 648.883300][ T9413] __x64_sys_socket+0x76/0x80 [ 648.888003][ T9413] do_syscall_64+0x4c/0xa0 [ 648.892422][ T9413] ? clear_bhb_loop+0x60/0xb0 [ 648.897188][ T9413] ? clear_bhb_loop+0x60/0xb0 [ 648.901883][ T9413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.907779][ T9413] RIP: 0033:0x7fa28a59e159 [ 648.912193][ T9413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.931888][ T9413] RSP: 002b:00007fa28b511028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 648.940306][ T9413] RAX: ffffffffffffffda RBX: 00007fa28a825fa0 RCX: 00007fa28a59e159 [ 648.945950][ T2171] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 648.948275][ T9413] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 648.948293][ T9413] RBP: 00007fa28a635024 R08: 0000000000000000 R09: 0000000000000000 [ 648.948306][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.979782][ T9413] R13: 00007fa28a826038 R14: 00007fa28a825fa0 R15: 00007fffcbc13b48 [ 648.987785][ T9413] [ 649.066850][ T9413] socket: no more sockets [ 649.204314][ T9422] kAFS: No cell specified [ 649.213772][ T2171] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.429426][ T2171] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 652.367421][ T2171] usb 5-1: string descriptor 0 read error: -71 [ 652.373741][ T2171] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 652.449158][ T2171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.512570][ T2171] usb 5-1: can't set config #1, error -71 [ 652.580907][ T2171] usb 5-1: USB disconnect, device number 62 [ 652.983746][ T9440] block nbd3: NBD_DISCONNECT [ 659.888867][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'. [ 659.933238][ T9472] nbd: must specify at least one socket [ 660.185661][ T9476] FAULT_INJECTION: forcing a failure. [ 660.185661][ T9476] name failslab, interval 1, probability 1, space 0, times 0 [ 660.201390][ T9476] CPU: 1 PID: 9476 Comm: syz.0.1512 Not tainted syzkaller #0 [ 660.208831][ T9476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 660.218966][ T9476] Call Trace: [ 660.222293][ T9476] [ 660.225263][ T9476] dump_stack_lvl+0x188/0x24e [ 660.230087][ T9476] ? show_regs_print_info+0x12/0x12 [ 660.235421][ T9476] ? load_image+0x410/0x410 [ 660.239978][ T9476] ? __lock_acquire+0x7c40/0x7c40 [ 660.245064][ T9476] should_fail_ex+0x390/0x4c0 [ 660.249793][ T9476] should_failslab+0x5/0x20 [ 660.254336][ T9476] slab_pre_alloc_hook+0x59/0x300 [ 660.259405][ T9476] kmem_cache_alloc_lru+0x49/0x2e0 [ 660.264726][ T9476] ? sock_alloc_inode+0x24/0xc0 [ 660.269634][ T9476] sock_alloc_inode+0x24/0xc0 [ 660.274349][ T9476] ? sockfs_init_fs_context+0xa0/0xa0 [ 660.279763][ T9476] new_inode_pseudo+0x5f/0x1c0 [ 660.284550][ T9476] __sock_create+0x129/0x940 [ 660.289161][ T9476] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 660.295175][ T9476] __sys_socket+0xc4/0x190 [ 660.299609][ T9476] __x64_sys_socket+0x76/0x80 [ 660.304306][ T9476] do_syscall_64+0x4c/0xa0 [ 660.308746][ T9476] ? clear_bhb_loop+0x60/0xb0 [ 660.313441][ T9476] ? clear_bhb_loop+0x60/0xb0 [ 660.318132][ T9476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.324038][ T9476] RIP: 0033:0x7f4acf39e159 [ 660.328474][ T9476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.348097][ T9476] RSP: 002b:00007f4ad01d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 660.356529][ T9476] RAX: ffffffffffffffda RBX: 00007f4acf625fa0 RCX: 00007f4acf39e159 [ 660.364511][ T9476] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 660.372494][ T9476] RBP: 00007f4acf435024 R08: 0000000000000000 R09: 0000000000000000 [ 660.380562][ T9476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.388543][ T9476] R13: 00007f4acf626038 R14: 00007f4acf625fa0 R15: 00007ffc8a6e77f8 [ 660.396540][ T9476] [ 660.466082][ T9476] socket: no more sockets [ 660.776030][ T2171] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 660.783742][ T4475] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 660.922715][ T9494] block nbd4: NBD_DISCONNECT [ 661.422846][ T4475] usb 4-1: not running at top speed; connect to a high speed hub [ 661.454399][ T4475] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.472871][ T9492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.510525][ T4475] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 661.555550][ T2171] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.586175][ T2171] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 661.602309][ T4475] usb 4-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 663.043483][ T4475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.068605][ T2171] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 663.096077][ T4475] usb 4-1: Product: syz [ 663.106278][ T2171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.127098][ T4475] usb 4-1: Manufacturer: syz [ 663.151854][ T4475] usb 4-1: SerialNumber: syz [ 663.157322][ T2171] usb 2-1: Product: syz [ 663.182590][ T2171] usb 2-1: Manufacturer: syz [ 663.202763][ T2171] usb 2-1: SerialNumber: syz [ 664.357352][ T4475] usb 4-1: invalid UAC_HEADER (v1) [ 664.602950][ T4475] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 664.687148][ T4475] usb 4-1: USB disconnect, device number 48 [ 665.007128][ T9459] udevd[9459]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.088533][ T2171] usb 2-1: can't set config #1, error -71 [ 665.108699][ T2171] usb 2-1: USB disconnect, device number 43 [ 669.868077][ T9547] block nbd0: NBD_DISCONNECT [ 676.714981][ T9586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.765091][ T9588] loop0: detected capacity change from 0 to 128 [ 678.246502][ T9602] block nbd0: NBD_DISCONNECT [ 678.817764][ T9606] overlayfs: missing 'lowerdir' [ 678.940425][ T9609] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 678.949778][ T9609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 678.957299][ T9609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 683.454838][ T9631] xt_CT: No such helper "pptp" [ 683.708189][ T26] audit: type=1800 audit(1788811164.883:122): pid=9639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1553" name="max_speed" dev="configfs" ino=49653 res=0 errno=0 [ 683.797360][ T26] audit: type=1800 audit(1788811164.913:123): pid=9639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1553" name="c_sync" dev="configfs" ino=49657 res=0 errno=0 [ 684.250920][ T9645] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 684.424985][ T9649] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.791748][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.798223][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.196558][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1564'. [ 687.568957][ T26] audit: type=1800 audit(1788811168.743:124): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1568" name="max_speed" dev="configfs" ino=48983 res=0 errno=0 [ 687.643416][ T26] audit: type=1800 audit(1788811168.743:125): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1568" name="c_sync" dev="configfs" ino=48984 res=0 errno=0 [ 687.873839][ T9681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.125948][ T9303] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 688.336412][ T9303] usb 2-1: Using ep0 maxpacket: 8 [ 688.346236][ T9303] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.389584][ T9303] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 688.436693][ T9303] usb 2-1: config 0 interface 0 has no altsetting 0 [ 688.443434][ T9303] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 688.504398][ T9303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.576339][ T9303] usb 2-1: config 0 descriptor?? [ 690.019076][ T9303] input: HID 1a34:f705 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1A34:F705.0004/input/input12 [ 690.218782][ T9303] acrux 0003:1A34:F705.0004: input,hidraw0: USB HID v0.00 Joystick [HID 1a34:f705] on usb-dummy_hcd.1-1/input0 [ 690.258349][ T9303] acrux 0003:1A34:F705.0004: no output reports found [ 690.302039][ T9303] acrux 0003:1A34:F705.0004: Failed to enable force feedback support, error: -19 [ 690.503381][ T4606] usb 2-1: USB disconnect, device number 44 [ 690.696018][ T9303] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 690.911077][ T9303] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 690.961854][ T9303] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 691.062142][ T9303] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 691.134538][ T9702] udevd[9702]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 691.193462][ T9303] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 691.399375][ T9303] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 691.562308][ T9303] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 691.702338][ T9303] usb 1-1: Product: syz [ 691.760681][ T9303] usb 1-1: Manufacturer: syz [ 691.941493][ T9303] cdc_wdm 1-1:1.0: skipping garbage [ 691.996241][ T9303] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 692.148394][ T4475] usb 1-1: USB disconnect, device number 52 [ 693.402739][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1579'. [ 696.816132][ T9745] FAULT_INJECTION: forcing a failure. [ 696.816132][ T9745] name failslab, interval 1, probability 1, space 0, times 0 [ 696.887523][ T9745] CPU: 0 PID: 9745 Comm: syz.2.1585 Not tainted syzkaller #0 [ 696.894986][ T9745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 696.905089][ T9745] Call Trace: [ 696.908412][ T9745] [ 696.911465][ T9745] dump_stack_lvl+0x188/0x24e [ 696.916205][ T9745] ? show_regs_print_info+0x12/0x12 [ 696.921453][ T9745] ? load_image+0x410/0x410 [ 696.926001][ T9745] ? __lock_acquire+0x7c40/0x7c40 [ 696.931061][ T9745] should_fail_ex+0x390/0x4c0 [ 696.935775][ T9745] should_failslab+0x5/0x20 [ 696.940301][ T9745] slab_pre_alloc_hook+0x59/0x300 [ 696.945348][ T9745] kmem_cache_alloc_lru+0x49/0x2e0 [ 696.950486][ T9745] ? sock_alloc_inode+0x24/0xc0 [ 696.955377][ T9745] sock_alloc_inode+0x24/0xc0 [ 696.960096][ T9745] ? sockfs_init_fs_context+0xa0/0xa0 [ 696.965512][ T9745] new_inode_pseudo+0x5f/0x1c0 [ 696.970315][ T9745] __sock_create+0x129/0x940 [ 696.975017][ T9745] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 696.981023][ T9745] __sys_socket+0xc4/0x190 [ 696.985465][ T9745] __x64_sys_socket+0x76/0x80 [ 696.990162][ T9745] do_syscall_64+0x4c/0xa0 [ 696.994602][ T9745] ? clear_bhb_loop+0x60/0xb0 [ 696.999301][ T9745] ? clear_bhb_loop+0x60/0xb0 [ 697.004000][ T9745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 697.009919][ T9745] RIP: 0033:0x7fa6ac59e159 [ 697.014355][ T9745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.033995][ T9745] RSP: 002b:00007fa6ad397028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 697.042454][ T9745] RAX: ffffffffffffffda RBX: 00007fa6ac825fa0 RCX: 00007fa6ac59e159 [ 697.050451][ T9745] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 697.058438][ T9745] RBP: 00007fa6ac635024 R08: 0000000000000000 R09: 0000000000000000 [ 697.066422][ T9745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.074508][ T9745] R13: 00007fa6ac826038 R14: 00007fa6ac825fa0 R15: 00007ffc49bf2188 [ 697.082521][ T9745] [ 697.739205][ T9745] socket: no more sockets [ 698.255896][ T4606] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 698.285676][ T9760] netlink: 'syz.4.1590': attribute type 13 has an invalid length. [ 698.341632][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 698.386592][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 698.415466][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 698.426833][ T9766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.484185][ T4606] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 698.512049][ T4606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.524917][ T4606] usb 2-1: Product: syz [ 698.531127][ T4606] usb 2-1: Manufacturer: syz [ 698.542178][ T4606] usb 2-1: SerialNumber: syz [ 698.549081][ T4606] usb 2-1: config 0 descriptor?? [ 698.576072][ T4475] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 698.700119][ T9767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.787897][ T4475] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 698.803951][ T4475] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 698.842432][ T4606] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 698.895560][ T4475] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 698.939339][ T4475] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 699.027603][ T4475] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 699.077433][ T4475] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 699.108160][ T4475] usb 3-1: Product: syz [ 699.119266][ T4475] usb 3-1: Manufacturer: syz [ 699.191168][ T4475] cdc_wdm 3-1:1.0: skipping garbage [ 699.214598][ T4475] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 699.386825][ T4323] usb 3-1: USB disconnect, device number 52 [ 700.116019][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1591'. [ 701.504649][ T4606] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 701.710294][ T4606] usb 2-1: USB disconnect, device number 45 [ 704.008372][ T9785] FAULT_INJECTION: forcing a failure. [ 704.008372][ T9785] name failslab, interval 1, probability 1, space 0, times 0 [ 704.038409][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 704.046063][ T9785] CPU: 0 PID: 9785 Comm: syz.0.1598 Not tainted syzkaller #0 [ 704.053580][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 704.063683][ T9785] Call Trace: [ 704.066998][ T9785] [ 704.069970][ T9785] dump_stack_lvl+0x188/0x24e [ 704.074704][ T9785] ? show_regs_print_info+0x12/0x12 [ 704.080038][ T9785] ? load_image+0x410/0x410 [ 704.084587][ T9785] ? __lock_acquire+0x7c40/0x7c40 [ 704.089678][ T9785] should_fail_ex+0x390/0x4c0 [ 704.094401][ T9785] should_failslab+0x5/0x20 [ 704.098939][ T9785] slab_pre_alloc_hook+0x59/0x300 [ 704.104024][ T9785] kmem_cache_alloc_lru+0x49/0x2e0 [ 704.109179][ T9785] ? sock_alloc_inode+0x24/0xc0 [ 704.114081][ T9785] sock_alloc_inode+0x24/0xc0 [ 704.117416][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 704.118771][ T9785] ? sockfs_init_fs_context+0xa0/0xa0 [ 704.128332][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 704.131082][ T9785] new_inode_pseudo+0x5f/0x1c0 [ 704.139423][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 704.142789][ T9785] __sock_create+0x129/0x940 [ 704.154392][ T9785] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 704.155947][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 704.160410][ T9785] __sys_socket+0xc4/0x190 [ 704.168006][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 704.171755][ T9785] __x64_sys_socket+0x76/0x80 [ 704.183409][ T9785] do_syscall_64+0x4c/0xa0 [ 704.187873][ T9785] ? clear_bhb_loop+0x60/0xb0 [ 704.192610][ T9785] ? clear_bhb_loop+0x60/0xb0 [ 704.197332][ T9785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 704.203355][ T9785] RIP: 0033:0x7f4acf39e159 [ 704.207811][ T9785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.227466][ T9785] RSP: 002b:00007f4ad01d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 704.236194][ T9785] RAX: ffffffffffffffda RBX: 00007f4acf625fa0 RCX: 00007f4acf39e159 [ 704.244207][ T9785] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 704.252231][ T9785] RBP: 00007f4acf435024 R08: 0000000000000000 R09: 0000000000000000 [ 704.260248][ T9785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.268260][ T9785] R13: 00007f4acf626038 R14: 00007f4acf625fa0 R15: 00007ffc8a6e77f8 [ 704.276294][ T9785] [ 704.279568][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.294271][ T9785] socket: no more sockets [ 705.004509][ T9786] chnl_net:caif_netlink_parms(): no params data found [ 705.215911][ T4747] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 705.238378][ T9786] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.248104][ T9786] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.284876][ T9786] device bridge_slave_0 entered promiscuous mode [ 705.325417][ T9786] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.350824][ T9786] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.400875][ T9786] device bridge_slave_1 entered promiscuous mode [ 705.416160][ T4747] usb 3-1: Using ep0 maxpacket: 32 [ 705.423673][ T4747] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 705.431741][ T9786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.446808][ T9786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.466342][ T4747] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 705.500549][ T4747] usb 3-1: config 0 interface 0 has no altsetting 0 [ 705.529452][ T4747] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 705.530587][ T9786] team0: Port device team_slave_0 added [ 705.545075][ T4747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.563540][ T4747] usb 3-1: Product: syz [ 705.573706][ T4747] usb 3-1: Manufacturer: syz [ 705.583880][ T4747] usb 3-1: SerialNumber: syz [ 705.597885][ T9786] team0: Port device team_slave_1 added [ 705.613776][ T4747] usb 3-1: config 0 descriptor?? [ 705.676290][ T9786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.695644][ T9786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.011061][ T9786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.174049][ T9786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.204721][ T4747] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 706.227991][ T9786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.265159][ T9788] Bluetooth: hci3: command 0x0409 tx timeout [ 706.455247][ T9786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.579856][ T9786] device hsr_slave_0 entered promiscuous mode [ 706.587476][ T9786] device hsr_slave_1 entered promiscuous mode [ 706.696252][ T9304] usb 3-1: USB disconnect, device number 53 [ 706.749267][ T4841] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.869320][ T2171] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 706.893181][ T4841] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.052715][ T4841] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.066251][ T2171] usb 2-1: Using ep0 maxpacket: 32 [ 707.074961][ T2171] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 707.115898][ T2171] usb 2-1: config 0 has no interface number 0 [ 707.135232][ T2171] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 707.174847][ T2171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.208688][ T4841] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.220240][ T2171] usb 2-1: Product: syz [ 707.241776][ T2171] usb 2-1: Manufacturer: syz [ 707.272023][ T2171] usb 2-1: SerialNumber: syz [ 708.405905][ T9788] Bluetooth: hci3: command 0x041b tx timeout [ 708.781488][ T2171] usb 2-1: config 0 descriptor?? [ 708.791148][ T2171] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 708.800150][ T2171] usb 2-1: selecting invalid altsetting 1 [ 708.806091][ T2171] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 708.820051][ T2171] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 708.831264][ T2171] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 708.876819][ T2171] usb 2-1: media controller created [ 709.433522][ T2171] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 709.788799][ T9786] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 710.088870][ T2171] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 710.151379][ T2171] zl10353_read_register: readreg error (reg=127, ret==-71) [ 710.189989][ T2171] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 710.350237][ T9786] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 710.456848][ T2171] usb 2-1: USB disconnect, device number 46 [ 710.459000][ T9786] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 710.485851][ T9788] Bluetooth: hci3: command 0x040f tx timeout [ 710.520162][ T9831] loop2: detected capacity change from 0 to 2048 [ 710.567532][ T9786] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 710.639829][ T9831] NILFS (loop2): invalid segment: Magic number mismatch [ 710.640965][ T4841] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 710.766673][ T26] audit: type=1800 audit(1788811191.943:126): pid=9844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1611" name="addr_trtype" dev="configfs" ino=51218 res=0 errno=0 [ 710.806826][ T9831] NILFS (loop2): trying rollback from an earlier position [ 711.004776][ T26] audit: type=1800 audit(1788811191.973:127): pid=9844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1611" name="addr_traddr" dev="configfs" ino=51219 res=0 errno=0 [ 711.560220][ T9831] NILFS (loop2): recovery complete [ 711.578112][ T4841] batman_adv: batadv0: Removing interface: ip6gretap1 [ 711.611182][ T9847] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 713.049031][ T9788] Bluetooth: hci3: command 0x0419 tx timeout [ 713.247306][ T9786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.425389][ T9862] device geneve1 entered promiscuous mode [ 713.496588][ T9786] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.877164][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 713.898464][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 713.948945][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 713.976728][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 713.996440][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.003606][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.032579][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 714.057878][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 714.093229][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 714.124014][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.131283][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.250120][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 714.297799][ T9882] Driver unsupported XDP return value 0 on prog (id 133) dev N/A, expect packet loss! [ 714.397276][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 714.511377][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 714.546003][ T4747] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 714.583278][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 714.634648][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 714.663771][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 714.705937][ T4747] usb 1-1: device descriptor read/64, error -71 [ 714.785344][ T9786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 714.813159][ T9786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 714.853510][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 714.870083][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 714.887778][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 714.897948][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 714.942737][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 714.976046][ T4747] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 715.050475][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 715.156138][ T4747] usb 1-1: device descriptor read/64, error -71 [ 715.445478][ T4747] usb usb1-port1: attempt power cycle [ 715.969729][ T4747] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 716.306767][ T4747] usb 1-1: device descriptor read/8, error -71 [ 716.510557][ T9901] loop2: detected capacity change from 0 to 2048 [ 716.576193][ T4747] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 716.617391][ T9901] NILFS (loop2): invalid segment: Magic number mismatch [ 716.634002][ T4747] usb 1-1: device descriptor read/8, error -71 [ 716.681173][ T9901] NILFS (loop2): trying rollback from an earlier position [ 716.777760][ T4747] usb usb1-port1: unable to enumerate USB device [ 716.793876][ T9901] NILFS (loop2): recovery complete [ 716.846221][ T9911] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 717.083887][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 717.113909][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 717.143102][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1624'. [ 717.228620][ T9786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.413339][ T4841] device hsr_slave_0 left promiscuous mode [ 717.423184][ T4841] device hsr_slave_1 left promiscuous mode [ 717.526195][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.533750][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.576853][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.615975][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.672331][ T4841] device veth1_macvtap left promiscuous mode [ 717.701918][ T4841] device veth0_macvtap left promiscuous mode [ 717.736291][ T4841] device veth1_vlan left promiscuous mode [ 717.742197][ T4841] device veth0_vlan left promiscuous mode [ 721.140778][ T4841] team0 (unregistering): Port device team_slave_1 removed [ 721.237240][ T4841] team0 (unregistering): Port device team_slave_0 removed [ 721.352062][ T4841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.439982][ T4841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.117751][ T4841] bond0 (unregistering): Released all slaves [ 722.442277][ T9972] netlink: 'syz.1.1634': attribute type 13 has an invalid length. [ 722.646196][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 722.728317][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 722.783935][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 722.923968][T10010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1637'. [ 722.936118][ T7899] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 723.116126][ T7899] usb 5-1: device descriptor read/64, error -71 [ 723.475910][ T7899] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 723.756409][ T7899] usb 5-1: device descriptor read/64, error -71 [ 723.976097][ T7899] usb usb5-port1: attempt power cycle [ 724.323486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 724.358069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 724.442819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 724.476790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 724.514759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 724.539024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 724.582087][ T9786] device veth0_vlan entered promiscuous mode [ 724.616915][ T7899] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 724.651336][T10007] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1636'. [ 724.656867][ T9786] device veth1_vlan entered promiscuous mode [ 724.679900][ T7899] usb 5-1: device descriptor read/8, error -71 [ 724.809892][ T9786] device veth0_macvtap entered promiscuous mode [ 724.853124][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 724.878808][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 724.928866][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 724.955989][ T7899] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 724.957187][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 725.008998][ T9786] device veth1_macvtap entered promiscuous mode [ 725.016095][ T7899] usb 5-1: device descriptor read/8, error -71 [ 725.037198][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 725.058601][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 725.120560][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.136417][ T7899] usb usb5-port1: unable to enumerate USB device [ 725.151990][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.189956][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.236056][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.275808][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.332517][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.361777][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.405983][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.447979][ T9786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.459380][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 725.476788][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 725.509878][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.541107][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.573379][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.705947][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.716418][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.727647][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.738524][ T9786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.749936][ T9786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.762018][ T9786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.771743][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 725.948011][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 726.037123][T10047] device geneve1 entered promiscuous mode [ 726.089214][ T9786] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.121981][ T9786] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.146836][ T9786] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.183296][ T9786] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.435946][T10057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1647'. [ 726.476775][ T4841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.505164][ T4841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.556682][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 726.665873][ T4819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.683026][ T4819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.738670][ T4841] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 727.364406][T10067] netlink: 'syz.1.1648': attribute type 13 has an invalid length. [ 727.524853][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 727.591345][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 727.681471][T10067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 727.697545][ T2171] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 727.769479][T10052] loop4: detected capacity change from 0 to 32768 [ 727.808088][T10052] XFS: noikeep mount option is deprecated. [ 727.888128][ T2171] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 727.905440][ T2171] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 727.971235][ T2171] usb 3-1: config 4 has no interface number 0 [ 728.022982][ T2171] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 728.115651][T10052] XFS (loop4): Mounting V5 Filesystem [ 728.119878][ T2171] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 729.023031][ T2171] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.035940][ T2171] usb 3-1: Product: syz [ 729.040160][ T2171] usb 3-1: Manufacturer: syz [ 729.044896][ T2171] usb 3-1: SerialNumber: syz [ 729.207674][T10052] XFS (loop4): Ending clean mount [ 729.333911][T10052] XFS (loop4): Quotacheck needed: Please wait. [ 729.472181][ T2171] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 729.501979][ T2171] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 729.531321][ T2171] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 729.547966][ T2171] usb 3-1: media controller created [ 729.576356][T10052] XFS (loop4): Quotacheck: Done. [ 729.592204][ T2171] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 729.601152][ T7899] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 729.748401][T10109] block nbd0: NBD_DISCONNECT [ 730.095885][ T7899] usb 6-1: Using ep0 maxpacket: 8 [ 730.102189][ T7899] usb 6-1: no configurations [ 730.110380][ T4280] XFS (loop4): Unmounting Filesystem [ 730.125829][ T7899] usb 6-1: can't read configurations, error -22 [ 730.251053][T10112] syz.2.1657 uses obsolete (PF_INET,SOCK_PACKET) [ 730.275996][ T7899] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 730.324910][ T2171] DVB: Unable to find symbol dib7000p_attach() [ 730.339708][ T2171] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 730.482613][ T7899] usb 6-1: Using ep0 maxpacket: 8 [ 730.499047][ T2171] rc_core: IR keymap rc-dib0700-rc5 not found [ 730.505195][ T2171] Registered IR keymap rc-empty [ 730.511808][ T7899] usb 6-1: no configurations [ 730.525997][ T7899] usb 6-1: can't read configurations, error -22 [ 730.532643][ T2171] dvb-usb: could not initialize remote control. [ 730.549295][ T7899] usb usb6-port1: attempt power cycle [ 730.554877][ T2171] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 730.615663][ T2171] usb 3-1: USB disconnect, device number 54 [ 730.697113][ T2171] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 730.965949][ T7899] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 731.006841][ T7899] usb 6-1: Using ep0 maxpacket: 8 [ 731.012744][ T7899] usb 6-1: no configurations [ 731.037959][ T7899] usb 6-1: can't read configurations, error -22 [ 731.206725][ T7899] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 731.336566][ T7899] usb 6-1: Using ep0 maxpacket: 8 [ 731.342518][ T7899] usb 6-1: no configurations [ 731.396624][ T7899] usb 6-1: can't read configurations, error -22 [ 731.429918][ T7899] usb usb6-port1: unable to enumerate USB device [ 731.583813][T10129] loop2: detected capacity change from 0 to 512 [ 732.090625][T10129] EXT4-fs (loop2): Test dummy encryption mode enabled [ 732.125826][T10129] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 732.268442][T10129] EXT4-fs (loop2): 1 truncate cleaned up [ 732.287032][T10129] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 732.438670][T10143] netlink: 'syz.2.1662': attribute type 13 has an invalid length. [ 732.480240][T10143] netlink: 'syz.2.1662': attribute type 27 has an invalid length. [ 732.671228][T10129] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 732.725612][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 733.979408][T10164] kAFS: No cell specified [ 735.082454][T10169] block nbd5: NBD_DISCONNECT [ 736.153290][T10180] loop4: detected capacity change from 0 to 2048 [ 736.177719][ T7844] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 736.333652][T10180] NILFS (loop4): invalid segment: Magic number mismatch [ 736.419783][T10180] NILFS (loop4): trying rollback from an earlier position [ 736.445919][ T7844] usb 6-1: Using ep0 maxpacket: 8 [ 736.455548][ T7844] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 736.484412][T10180] NILFS (loop4): recovery complete [ 736.525911][ T7844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.562682][ T7844] usb 6-1: Product: syz [ 736.564872][T10190] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 736.603755][ T7844] usb 6-1: Manufacturer: syz [ 736.661480][ T7844] usb 6-1: SerialNumber: syz [ 736.704647][ T7844] usb 6-1: config 0 descriptor?? [ 736.720881][ T26] audit: type=1800 audit(1788811217.893:128): pid=10180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1675" name="bus" dev="loop4" ino=12 res=0 errno=0 [ 736.792450][ T7844] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 736.966000][ T2171] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 737.185992][ T2171] usb 1-1: Using ep0 maxpacket: 8 [ 737.192758][ T2171] usb 1-1: no configurations [ 737.226001][ T2171] usb 1-1: can't read configurations, error -22 [ 737.416127][ T2171] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 737.636172][ T2171] usb 1-1: Using ep0 maxpacket: 8 [ 737.806217][ T4323] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 737.918577][ T2171] usb 1-1: no configurations [ 738.442646][ T2171] usb 1-1: can't read configurations, error -22 [ 738.535859][ T7844] gspca_sonixj: i2c_w8 err -71 [ 738.619866][ T2171] usb usb1-port1: attempt power cycle [ 738.686034][ T7844] sonixj: probe of 6-1:0.0 failed with error -71 [ 738.988957][ T4323] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 738.990156][ T7844] usb 6-1: USB disconnect, device number 6 [ 738.997919][ T4323] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 739.014221][ T4323] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 739.023788][ T4323] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 739.048796][ T4323] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 739.058151][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 739.058324][ T4323] usb 2-1: Product: syz [ 739.058505][ T4323] usb 2-1: Manufacturer: syz [ 739.176233][ T2171] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 739.204979][ T4323] cdc_wdm 2-1:1.0: skipping garbage [ 739.210562][ T4323] cdc_wdm 2-1:1.0: skipping garbage [ 739.221637][ T4323] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 739.362269][ T2171] usb 1-1: Using ep0 maxpacket: 8 [ 740.055235][ T2171] usb 1-1: device descriptor read/all, error -71 [ 740.078322][ T4326] usb 2-1: USB disconnect, device number 47 [ 743.865577][T10213] kAFS: No cell specified [ 743.876882][ T26] audit: type=1800 audit(1788811225.053:129): pid=10224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1685" name="max_speed" dev="configfs" ino=51016 res=0 errno=0 [ 743.915870][ T26] audit: type=1800 audit(1788811225.073:130): pid=10224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1685" name="c_sync" dev="configfs" ino=51017 res=0 errno=0 [ 744.249626][T10227] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 744.286650][T10227] batman_adv: batadv0: Adding interface: ip6gretap1 [ 744.293475][T10227] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.319838][T10227] batman_adv: batadv0: Interface activated: ip6gretap1 [ 745.653377][T10241] Invalid ELF header magic: != ELF [ 747.207647][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.214114][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.236002][ T8037] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 747.425993][ T7844] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 748.026789][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 748.566348][ T7844] usb 1-1: device descriptor read/64, error -32 [ 748.890788][ T8037] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 748.914997][ T8037] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 748.937354][ T7844] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 748.957561][ T8037] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 749.011765][ T8037] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 749.052752][ T8037] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.145891][ T7844] usb 1-1: Using ep0 maxpacket: 8 [ 749.162199][ T7844] usb 1-1: no configurations [ 749.267529][ T7844] usb 1-1: can't read configurations, error -22 [ 749.312693][ T7844] usb usb1-port1: attempt power cycle [ 749.580728][T10274] loop4: detected capacity change from 0 to 512 [ 749.675485][T10274] EXT4-fs (loop4): Test dummy encryption mode enabled [ 749.703697][T10274] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 749.707984][ T8037] cxacru 2-1:1.0: invalid response length to cm 0x90: 56 [ 749.754865][T10274] EXT4-fs (loop4): 1 truncate cleaned up [ 749.760857][ T7844] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 749.768944][T10274] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 749.827298][ T7844] usb 1-1: Using ep0 maxpacket: 8 [ 750.056139][ T7844] usb 1-1: no configurations [ 750.060808][ T7844] usb 1-1: can't read configurations, error -22 [ 750.069617][T10279] cxacru 2-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 750.078919][T10279] cxacru 2-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 750.225925][ T7844] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 750.456473][T10274] netlink: 'syz.4.1698': attribute type 13 has an invalid length. [ 750.554437][ T7844] usb 1-1: device descriptor read/8, error -71 [ 751.427990][T10274] netlink: 'syz.4.1698': attribute type 27 has an invalid length. [ 751.543491][T10293] kAFS: No cell specified [ 751.549317][ T7844] usb usb1-port1: unable to enumerate USB device [ 752.183370][T10280] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 752.492837][ T7844] usb 2-1: USB disconnect, device number 48 [ 752.578528][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 752.815949][ T8037] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 753.849829][ T8037] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 753.907867][ T8037] usb 1-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 753.961929][ T8037] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 753.975670][ T8037] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 754.054784][ T8037] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 754.125688][ T8037] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 754.156004][ T8037] usb 1-1: Product: syz [ 754.160348][ T8037] usb 1-1: Manufacturer: syz [ 754.255841][ T8037] cdc_wdm 1-1:1.0: skipping garbage [ 754.261792][ T8037] cdc_wdm 1-1:1.0: skipping garbage [ 754.267441][ T8037] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 754.926575][ T4326] usb 1-1: USB disconnect, device number 65 [ 759.372664][T10364] loop4: detected capacity change from 0 to 512 [ 759.426498][T10364] EXT4-fs (loop4): Test dummy encryption mode enabled [ 759.433318][T10364] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 759.461562][T10347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.545919][ T4606] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 759.693243][T10364] EXT4-fs (loop4): 1 truncate cleaned up [ 759.699484][T10364] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 759.738569][ T4606] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.791437][ T4606] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 759.802750][ T4606] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 759.820622][ T4606] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 759.830233][ T4606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.199293][T10384] netlink: 'syz.4.1714': attribute type 13 has an invalid length. [ 760.208937][ T4606] cxacru 3-1:1.0: invalid response length to cm 0x90: 60 [ 760.251327][T10384] netlink: 'syz.4.1714': attribute type 27 has an invalid length. [ 760.427929][T10382] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 760.556782][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 763.306948][ T8037] usb 3-1: USB disconnect, device number 55 [ 763.636220][ T4606] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 765.515869][ T4606] usb 5-1: Using ep0 maxpacket: 16 [ 766.229482][ T4606] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 766.240263][ T4606] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 766.472884][ T4606] usb 5-1: string descriptor 0 read error: -71 [ 766.487681][ T4606] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 766.518195][ T4606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 766.620610][ T4606] usb 5-1: can't set config #1, error -71 [ 766.638743][ T4606] usb 5-1: USB disconnect, device number 67 [ 766.753866][T10447] loop2: detected capacity change from 0 to 512 [ 766.804019][T10447] EXT4-fs (loop2): Test dummy encryption mode enabled [ 766.835558][T10447] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 766.928486][T10447] EXT4-fs (loop2): 1 truncate cleaned up [ 766.963738][T10447] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 768.882604][T10447] netlink: 'syz.2.1731': attribute type 13 has an invalid length. [ 768.906365][T10447] netlink: 'syz.2.1731': attribute type 27 has an invalid length. [ 769.041213][T10460] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 769.079905][T10474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.283359][T10474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.297609][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 769.466074][ T4747] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 769.667887][ T4747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.795982][ T4747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.640518][ T4747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 770.817746][ T4747] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 770.856288][ T4747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.905070][ T4747] usb 1-1: config 0 descriptor?? [ 771.328701][ T4747] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 771.389729][ T4747] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 771.593749][T10499] using random self ethernet address [ 771.623966][T10499] using random host ethernet address [ 772.644918][T10501] udevd[10501]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 773.413444][T10522] device geneve1 entered promiscuous mode [ 773.682830][ T4747] usb 1-1: USB disconnect, device number 66 [ 775.190114][T10540] netlink: 'syz.0.1748': attribute type 13 has an invalid length. [ 775.206011][T10540] netlink: 'syz.0.1748': attribute type 27 has an invalid length. [ 775.895546][T10548] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 775.922003][T10548] batman_adv: batadv0: Adding interface: ip6gretap1 [ 775.928787][T10548] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.963785][T10548] batman_adv: batadv0: Interface activated: ip6gretap1 [ 778.658259][T10565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.739577][T10575] loop1: detected capacity change from 0 to 1024 [ 778.746559][T10575] hfsplus: unable to parse mount options [ 778.811552][T10256] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 778.874942][T10569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.352968][T10593] comedi comedi3: aio_iiro_16: I/O port conflict (0x100,8) [ 784.032746][T10601] loop5: detected capacity change from 0 to 512 [ 784.460773][T10601] EXT4-fs (loop5): Test dummy encryption mode enabled [ 784.476296][T10601] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 785.471341][T10601] EXT4-fs (loop5): 1 truncate cleaned up [ 785.501428][T10601] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 785.602208][T10610] netlink: 'syz.5.1765': attribute type 13 has an invalid length. [ 785.652259][T10610] netlink: 'syz.5.1765': attribute type 27 has an invalid length. [ 785.770377][T10601] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 785.863832][ T9786] EXT4-fs (loop5): unmounting filesystem. [ 786.275845][T10623] x_tables: duplicate underflow at hook 3 [ 795.166611][T10678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.511737][ T4521] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.493818][T10711] 9pnet_fd: Insufficient options for proto=fd [ 799.657398][ T4521] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.766738][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 799.785289][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 799.795007][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 799.844859][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 799.853062][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 799.860757][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 800.149377][ T4521] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.378612][ T4521] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.017734][ T9788] Bluetooth: hci2: command 0x0409 tx timeout [ 804.085869][ T9788] Bluetooth: hci2: command 0x041b tx timeout [ 805.079196][T10715] chnl_net:caif_netlink_parms(): no params data found [ 805.420144][T10772] Mass Storage Function, version: 2009/09/11 [ 805.516650][T10772] LUN: removable file: (no medium) [ 806.165889][ T9788] Bluetooth: hci2: command 0x040f tx timeout [ 807.528850][T10715] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.572500][T10715] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.586726][T10715] device bridge_slave_0 entered promiscuous mode [ 807.685312][T10715] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.929923][T10715] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.245920][ T9788] Bluetooth: hci2: command 0x0419 tx timeout [ 808.269832][T10715] device bridge_slave_1 entered promiscuous mode [ 808.718469][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.725387][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.770866][T10797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.836485][T10715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.809868][T10802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.858314][T10715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.069553][T10715] team0: Port device team_slave_0 added [ 810.368016][T10715] team0: Port device team_slave_1 added [ 811.653092][T10715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.665469][T10715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.829259][T10715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.212150][T10715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.231316][T10715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.257291][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.321756][T10715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.416131][ T4323] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 812.629047][ T4323] usb 1-1: not running at top speed; connect to a high speed hub [ 812.669420][ T4323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.706592][ T4323] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 812.771409][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.810976][ T4323] usb 1-1: Found UVC 1.00 device (046d:0825) [ 812.823299][T10715] device hsr_slave_0 entered promiscuous mode [ 812.839965][T10715] device hsr_slave_1 entered promiscuous mode [ 812.857858][T10715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 812.875001][T10715] Cannot create hsr debugfs directory [ 812.974348][ T4521] device hsr_slave_0 left promiscuous mode [ 813.036205][ T4521] device hsr_slave_1 left promiscuous mode [ 813.056547][ T4521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.139912][ T4521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.246350][ T4521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.262442][ T4521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.698430][ T4521] device veth1_macvtap left promiscuous mode [ 814.201393][T10387] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 814.240749][ T4521] device veth0_macvtap left promiscuous mode [ 814.255600][T10279] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 814.263666][ T4521] device veth1_vlan left promiscuous mode [ 814.430192][ T4323] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 814.444755][ T4323] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 814.483736][ T4521] device veth0_vlan left promiscuous mode [ 814.509560][ T4323] usb 1-1: USB disconnect, device number 67 [ 816.653776][ T4521] bond1 (unregistering): Released all slaves [ 818.400072][T10864] loop5: detected capacity change from 0 to 32768 [ 818.661598][T10875] kAFS: No cell specified [ 819.444362][T10864] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 819.553844][T10864] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 819.791779][T10864] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 819.844883][ T7844] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 819.855510][ T7844] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 819.973011][ T7844] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 117ms [ 820.001263][ T7844] gfs2: fsid=syz:syz.0: jid=0: Done [ 820.012761][T10864] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 820.068194][T10864] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 820.576990][ T4521] team0 (unregistering): Port device team_slave_1 removed [ 820.786907][ T4521] team0 (unregistering): Port device team_slave_0 removed [ 821.162751][ T4521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.378700][ T4521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.210245][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 831.892139][ T4521] bond0 (unregistering): Released all slaves [ 832.216677][ T9788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 832.226717][ T9788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 832.235661][ T9788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 832.254453][ T9788] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 832.264104][ T9788] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 832.285548][ T9788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 832.620799][T10715] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 832.693502][T10715] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 833.355586][T10715] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 835.266074][ T4275] Bluetooth: hci5: command 0x0409 tx timeout [ 835.366229][T10947] batman_adv: batadv0: Adding interface: ip6gretap2 [ 835.372897][T10947] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.398679][T10947] batman_adv: batadv0: Interface activated: ip6gretap2 [ 835.407206][T10715] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 837.046911][T10928] chnl_net:caif_netlink_parms(): no params data found [ 837.286000][ T4275] Bluetooth: hci5: command 0x041b tx timeout [ 837.904235][T10715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.012293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 838.021859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 838.081807][T10715] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.126271][T10928] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.134168][T10928] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.197144][T10928] device bridge_slave_0 entered promiscuous mode [ 838.234598][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 838.257381][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 838.286759][ T4819] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.293913][ T4819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.438329][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 838.569030][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 838.679507][ T4819] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.686755][ T4819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.883573][T10928] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.937985][T10928] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.010564][T10928] device bridge_slave_1 entered promiscuous mode [ 839.047633][T10928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.059649][T10928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.090537][T10928] team0: Port device team_slave_0 added [ 839.106606][T10928] team0: Port device team_slave_1 added [ 839.242064][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 839.367427][ T4275] Bluetooth: hci5: command 0x040f tx timeout [ 839.373868][ T4328] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 839.555961][ T4328] usb 6-1: device descriptor read/64, error -71 [ 839.566923][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 839.644141][T10928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.703971][T10928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.876360][ T4328] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 839.938023][T10928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.046058][ T4328] usb 6-1: device descriptor read/64, error -71 [ 840.116898][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 840.147712][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 840.186352][ T4328] usb usb6-port1: attempt power cycle [ 840.243065][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 840.361220][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 840.423509][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 840.519262][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 840.553649][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 840.595859][ T4328] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 840.704129][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 840.844671][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 841.050305][T10928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.279935][T10928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 841.321899][T10928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.349314][ T4328] usb 6-1: device descriptor read/8, error -71 [ 841.382946][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 841.446284][ T4275] Bluetooth: hci5: command 0x0419 tx timeout [ 841.583897][T10928] device hsr_slave_0 entered promiscuous mode [ 841.625949][ T4328] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 841.637712][T10928] device hsr_slave_1 entered promiscuous mode [ 841.673589][T10928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 841.676624][ T4328] usb 6-1: device descriptor read/8, error -71 [ 841.711108][T10928] Cannot create hsr debugfs directory [ 841.836300][ T4328] usb usb6-port1: unable to enumerate USB device [ 842.331753][T11039] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 842.331957][T10928] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 842.400366][T11040] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1855'. [ 842.832399][T10928] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 842.874256][T10928] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 843.484274][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 843.558681][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 843.647666][T10928] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 843.711237][T10715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.315554][T10928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.145803][T10928] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.717300][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 845.725243][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 845.934569][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 846.109032][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 846.274473][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.281779][ T9732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.343152][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 846.352377][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 846.362166][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.369372][ T9732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.378795][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 846.388561][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 846.527510][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 846.597813][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 846.654478][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 846.677573][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 846.698693][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 846.743371][T10928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 846.823995][T10928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 846.879168][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 846.899199][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 846.940566][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 846.967130][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 846.993603][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 847.021050][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 847.046122][ T7844] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 847.206189][ T7844] usb 6-1: device descriptor read/64, error -71 [ 847.475879][ T7844] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 847.615242][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 847.637139][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 847.666003][ T7844] usb 6-1: device descriptor read/64, error -71 [ 847.733197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 847.757190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 847.779293][T10715] device veth0_vlan entered promiscuous mode [ 847.789253][ T7844] usb usb6-port1: attempt power cycle [ 847.809963][T10715] device veth1_vlan entered promiscuous mode [ 847.840992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 847.861687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 847.902710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 848.003054][T10715] device veth0_macvtap entered promiscuous mode [ 848.180183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 848.206073][ T7844] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 848.240134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 848.385532][T10715] device veth1_macvtap entered promiscuous mode [ 848.514352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 848.595506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 848.867282][ T7844] usb 6-1: device descriptor read/8, error -71 [ 848.867765][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 849.043777][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 849.100032][T10715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.185930][ T7844] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 849.196441][T10715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.217651][T10715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.231859][T10715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.246616][ T7844] usb 6-1: device descriptor read/8, error -71 [ 849.263346][T10715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.278691][T10715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.291436][T10715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 849.305849][T10715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.327900][T10715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.361637][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 849.386280][ T7844] usb usb6-port1: unable to enumerate USB device [ 849.386936][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 849.433613][T10928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.455125][T10715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.478486][T11126] Trying to write to read-only block-device nullb0 [ 849.507994][T10715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.527786][T10715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.549290][T10715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.571021][T10715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.585927][T10715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.607568][T10715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 849.634640][T10715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 849.685135][T10715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.730620][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 849.755303][ T1063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 849.791516][T10715] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.824996][T10715] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.883177][T10715] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.911110][T10715] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.163282][ T4819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.181945][ T4819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.242689][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 850.356556][ T4806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.364465][ T4806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.447486][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 850.724314][T11132] Trying to write to read-only block-device nullb0 [ 850.763164][T11132] Trying to write to read-only block-device nullb0 [ 850.772438][T11132] Trying to write to read-only block-device nullb0 [ 850.828130][T11132] Trying to write to read-only block-device nullb0 [ 850.834795][T11132] Trying to write to read-only block-device nullb0 [ 850.859857][T11132] Trying to write to read-only block-device nullb0 [ 850.890311][T11132] Trying to write to read-only block-device nullb0 [ 850.926108][T11132] Trying to write to read-only block-device nullb0 [ 850.960303][T11132] Trying to write to read-only block-device nullb0 [ 850.986017][ T8037] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 851.081240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 851.100525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 851.179205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 851.187125][ T8037] usb 3-1: Using ep0 maxpacket: 16 [ 851.195116][ T8037] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 851.314467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 851.509390][T10928] device veth0_vlan entered promiscuous mode [ 851.599032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 851.668242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 851.943919][T10928] device veth1_vlan entered promiscuous mode [ 851.960859][ T8037] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.971095][ T8037] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 851.993793][ T8037] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 852.003070][ T8037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.011979][ T8037] usb 3-1: Product: syz [ 852.016302][ T8037] usb 3-1: Manufacturer: syz [ 852.020929][ T8037] usb 3-1: SerialNumber: syz [ 852.179662][T10294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 852.207405][T10294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 852.248400][T10928] device veth0_macvtap entered promiscuous mode [ 852.264772][ T8037] usb 3-1: 0:2 : does not exist [ 852.299354][T10928] device veth1_macvtap entered promiscuous mode [ 852.304997][ T8037] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 852.385048][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.392104][ T8037] usb 3-1: USB disconnect, device number 56 [ 852.443359][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.496157][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.527211][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.546175][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.599798][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.632070][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.695748][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.733856][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.757668][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.787807][T10928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.797358][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 852.882678][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 853.004853][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 853.162768][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 853.358305][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.499526][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.651528][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.837169][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.017164][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.212386][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.404233][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.589593][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.788765][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.941167][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.095070][T10928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.104942][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 855.188712][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 856.360744][T10928] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.456891][T10928] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.605559][T10928] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.743977][T10928] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.096167][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.160792][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.198936][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 859.217775][ T9732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.252513][ T9732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.412939][T11222] loop5: detected capacity change from 0 to 512 [ 859.448737][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 859.871232][T11222] EXT4-fs (loop5): Test dummy encryption mode enabled [ 860.069570][T11222] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 860.358220][T11228] overlayfs: overlapping lowerdir path [ 860.372169][T11222] EXT4-fs (loop5): 1 truncate cleaned up [ 860.391307][T11222] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 860.557692][T11245] netlink: 'syz.5.1891': attribute type 13 has an invalid length. [ 861.214321][T11245] netlink: 'syz.5.1891': attribute type 27 has an invalid length. [ 861.389709][T11249] kAFS: No cell specified [ 862.967918][T11222] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 863.057611][ T9786] EXT4-fs (loop5): unmounting filesystem. [ 864.966528][ T7844] libceph: connect (1)[c::]:6789 error -101 [ 865.824535][ T7844] libceph: mon0 (1)[c::]:6789 connect error [ 865.911726][T11262] ceph: No mds server is up or the cluster is laggy [ 867.315966][ T4329] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 867.648334][ T4329] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 867.695300][ T4329] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 867.737026][ T4329] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 867.803506][ T4329] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 867.858802][ T4329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.059332][T11308] loop6: detected capacity change from 0 to 512 [ 869.117615][ T4329] cxacru 6-1:1.0: invalid response length to cm 0x91: 0 [ 869.124642][ T4329] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 869.146689][ T4329] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 869.154462][ T4329] cxacru: probe of 6-1:1.0 failed with error -5 [ 869.171860][T11308] EXT4-fs (loop6): Test dummy encryption mode enabled [ 869.229728][T11308] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 869.246106][ T4329] usb 6-1: USB disconnect, device number 15 [ 869.311319][T11308] EXT4-fs (loop6): 1 truncate cleaned up [ 869.362258][T11308] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 869.434545][T11316] kAFS: No cell specified [ 870.178227][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.184569][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.250201][T11318] netlink: 'syz.6.1907': attribute type 13 has an invalid length. [ 870.276020][T11318] netlink: 'syz.6.1907': attribute type 27 has an invalid length. [ 870.464782][T11308] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 870.549567][T10715] EXT4-fs (loop6): unmounting filesystem. [ 877.443196][T11369] loop6: detected capacity change from 0 to 512 [ 877.517113][T11369] EXT4-fs (loop6): Test dummy encryption mode enabled [ 877.549064][T11369] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 877.695642][T11369] EXT4-fs (loop6): 1 truncate cleaned up [ 877.702165][T11369] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 877.881645][T11381] netlink: 'syz.6.1920': attribute type 13 has an invalid length. [ 877.931607][T11381] netlink: 'syz.6.1920': attribute type 27 has an invalid length. [ 878.653139][T11369] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 878.739944][T10715] EXT4-fs (loop6): unmounting filesystem. [ 878.796741][T11390] FAULT_INJECTION: forcing a failure. [ 878.796741][T11390] name failslab, interval 1, probability 1, space 0, times 0 [ 878.886004][T11390] CPU: 1 PID: 11390 Comm: syz.5.1923 Not tainted syzkaller #0 [ 878.893547][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 878.903645][T11390] Call Trace: [ 878.906961][T11390] [ 878.909931][T11390] dump_stack_lvl+0x188/0x24e [ 878.914667][T11390] ? show_regs_print_info+0x12/0x12 [ 878.919920][T11390] ? load_image+0x410/0x410 [ 878.924482][T11390] ? __might_sleep+0xd0/0xd0 [ 878.929112][T11390] ? __lock_acquire+0x7c40/0x7c40 [ 878.934179][T11390] should_fail_ex+0x390/0x4c0 [ 878.938908][T11390] should_failslab+0x5/0x20 [ 878.943447][T11390] slab_pre_alloc_hook+0x59/0x300 [ 878.948517][T11390] kmem_cache_alloc_lru+0x49/0x2e0 [ 878.953667][T11390] ? new_inode_pseudo+0x7e/0x1c0 [ 878.958736][T11390] new_inode_pseudo+0x7e/0x1c0 [ 878.963544][T11390] ? __ns_get_path+0x2c/0x650 [ 878.968405][T11390] __ns_get_path+0x252/0x650 [ 878.973045][T11390] ns_get_path+0x50/0x90 [ 878.977330][T11390] proc_ns_get_link+0x168/0x290 [ 878.982230][T11390] ? proc_ns_instantiate+0xf0/0xf0 [ 878.987485][T11390] ? try_to_unlazy+0x33e/0x5c0 [ 878.992306][T11390] ? proc_ns_instantiate+0xf0/0xf0 [ 878.997461][T11390] pick_link+0x6ad/0xe20 [ 879.001752][T11390] step_into+0xc14/0xee0 [ 879.006218][T11390] ? pid_revalidate+0x1e/0x250 [ 879.011017][T11390] ? set_root+0x3a0/0x3a0 [ 879.015380][T11390] ? pid_revalidate+0x209/0x250 [ 879.020352][T11390] ? lookup_fast+0x494/0x4c0 [ 879.024984][T11390] path_openat+0x15dd/0x2f10 [ 879.029635][T11390] ? verify_lock_unused+0x140/0x140 [ 879.034867][T11390] ? do_sys_openat2+0xdd/0x4f0 [ 879.039653][T11390] ? do_filp_open+0x420/0x420 [ 879.044362][T11390] do_filp_open+0x1ee/0x420 [ 879.048884][T11390] ? vfs_tmpfile+0x470/0x470 [ 879.053505][T11390] ? _raw_spin_unlock+0x24/0x40 [ 879.058377][T11390] ? alloc_fd+0x590/0x640 [ 879.062732][T11390] do_sys_openat2+0x14b/0x4f0 [ 879.067428][T11390] ? do_sys_open+0xe0/0xe0 [ 879.071859][T11390] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 879.077860][T11390] ? lock_chain_count+0x20/0x20 [ 879.082731][T11390] __x64_sys_openat+0x135/0x160 [ 879.087597][T11390] do_syscall_64+0x4c/0xa0 [ 879.092029][T11390] ? clear_bhb_loop+0x60/0xb0 [ 879.096730][T11390] ? clear_bhb_loop+0x60/0xb0 [ 879.101425][T11390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 879.107332][T11390] RIP: 0033:0x7fe68055e98e [ 879.111759][T11390] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 879.131468][T11390] RSP: 002b:00007fe681516ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 879.139896][T11390] RAX: ffffffffffffffda RBX: 00007fe6815176c0 RCX: 00007fe68055e98e [ 879.147876][T11390] RDX: 0000000000000000 RSI: 00007fe681516f90 RDI: ffffffffffffff9c [ 879.155863][T11390] RBP: 00007fe680635024 R08: 0000000000000000 R09: 0000000000000000 [ 879.163843][T11390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.171824][T11390] R13: 00007fe680826038 R14: 00007fe680825fa0 R15: 00007fff868719c8 [ 879.179825][T11390] [ 884.776056][ T4746] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 885.045469][ T4746] usb 8-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 885.096319][ T4746] usb 8-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 885.111511][ T4746] usb 8-1: config 0 interface 0 has no altsetting 0 [ 885.121393][ T4746] usb 8-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 885.131052][ T4746] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.149983][ T4746] usb 8-1: config 0 descriptor?? [ 885.156110][T11436] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 885.525919][ T8037] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 885.785352][ T4746] elecom 0003:056E:00FC.0006: unknown main item tag 0x2 [ 885.832066][ T4746] elecom 0003:056E:00FC.0006: unknown global tag 0xd [ 885.858542][ T4746] elecom 0003:056E:00FC.0006: item 0 2 1 13 parsing failed [ 886.212721][ T4746] elecom: probe of 0003:056E:00FC.0006 failed with error -22 [ 886.707570][ T4746] usb 8-1: USB disconnect, device number 2 [ 886.728570][ T8037] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.743374][ T8037] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.812979][ T8037] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 886.856044][ T8037] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 886.895749][ T8037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.907354][ T8037] usb 3-1: config 0 descriptor?? [ 887.332328][ T8037] usbhid 3-1:0.0: can't add hid device: -71 [ 887.362727][ T8037] usbhid: probe of 3-1:0.0 failed with error -71 [ 887.554808][ T8037] usb 3-1: USB disconnect, device number 57 [ 898.327874][T11553] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 901.663626][T11579] device syzkaller0 entered promiscuous mode [ 903.786075][ T4746] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 904.032154][ T4746] usb 7-1: Using ep0 maxpacket: 32 [ 904.180374][ T4746] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.341291][ T4746] usb 7-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 904.505733][ T4746] usb 7-1: config 0 interface 0 has no altsetting 0 [ 904.548190][ T4746] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 904.600591][ T4746] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.659758][ T4746] usb 7-1: Product: syz [ 904.670286][ T4746] usb 7-1: Manufacturer: syz [ 904.691330][ T4746] usb 7-1: SerialNumber: syz [ 904.756551][ T4746] usb 7-1: config 0 descriptor?? [ 904.788764][ T4746] gs_usb 7-1:0.0: Required endpoints not found [ 905.550187][ T4747] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 906.585215][ T4747] usb 3-1: Using ep0 maxpacket: 16 [ 906.593188][ T4747] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 907.174458][ T4747] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.204568][ T4747] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 907.294404][ T8037] usb 7-1: USB disconnect, device number 2 [ 907.302015][ T4747] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 907.346719][ T4747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.406144][ T4747] usb 3-1: Product: syz [ 907.412168][ T4747] usb 3-1: Manufacturer: syz [ 907.464654][ T4747] usb 3-1: SerialNumber: syz [ 907.725286][ T4747] usb 3-1: 0:2 : does not exist [ 907.748191][ T4747] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 908.704595][ T4747] usb 3-1: USB disconnect, device number 58 [ 909.212421][T11643] [ 909.214817][T11643] ====================================================== [ 909.221858][T11643] WARNING: possible circular locking dependency detected [ 909.228908][T11643] syzkaller #0 Not tainted [ 909.233355][T11643] ------------------------------------------------------ [ 909.240426][T11643] syz.6.1986/11643 is trying to acquire lock: [ 909.246516][T11643] ffff8880178564c0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 909.258078][T11643] [ 909.258078][T11643] but task is already holding lock: [ 909.265468][T11643] ffff888074e83520 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 909.274639][T11643] [ 909.274639][T11643] which lock already depends on the new lock. [ 909.274639][T11643] [ 909.285066][T11643] [ 909.285066][T11643] the existing dependency chain (in reverse order) is: [ 909.294212][T11643] [ 909.294212][T11643] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 909.301902][T11643] __mutex_lock+0x12d/0xae0 [ 909.306964][T11643] tcm_set_name+0x26/0x90 [ 909.311861][T11643] function_make+0x195/0x350 [ 909.317070][T11643] configfs_mkdir+0x511/0x9e0 [ 909.322316][T11643] vfs_mkdir+0x386/0x570 [ 909.327115][T11643] do_mkdirat+0x1d8/0x440 [ 909.332003][T11643] __x64_sys_mkdir+0x6a/0x80 [ 909.337153][T11643] do_syscall_64+0x4c/0xa0 [ 909.342135][T11643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.348597][T11643] [ 909.348597][T11643] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 909.356896][T11643] __mutex_lock+0x12d/0xae0 [ 909.361958][T11643] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 909.368777][T11643] configfs_symlink+0x5a4/0x13c0 [ 909.374277][T11643] vfs_symlink+0x245/0x3d0 [ 909.379250][T11643] do_symlinkat+0x1b6/0x400 [ 909.384314][T11643] __x64_sys_symlinkat+0x95/0xa0 [ 909.389812][T11643] do_syscall_64+0x4c/0xa0 [ 909.394793][T11643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.401250][T11643] [ 909.401250][T11643] -> #0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 909.410002][T11643] __lock_acquire+0x2d18/0x7c40 [ 909.415429][T11643] lock_acquire+0x1bb/0x4a0 [ 909.420496][T11643] down_write+0x36/0x60 [ 909.425211][T11643] configfs_depend_item_unlocked+0x14f/0x430 [ 909.431851][T11643] usbg_make_tpg+0x1f3/0x580 [ 909.437003][T11643] target_fabric_make_tpg+0xa0/0x6d0 [ 909.442919][T11643] configfs_mkdir+0x511/0x9e0 [ 909.448157][T11643] vfs_mkdir+0x386/0x570 [ 909.452956][T11643] do_mkdirat+0x1d8/0x440 [ 909.457841][T11643] __x64_sys_mkdir+0x6a/0x80 [ 909.462982][T11643] do_syscall_64+0x4c/0xa0 [ 909.467960][T11643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.474414][T11643] [ 909.474414][T11643] other info that might help us debug this: [ 909.474414][T11643] [ 909.484661][T11643] Chain exists of: [ 909.484661][T11643] &sb->s_type->i_mutex_key#23 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 909.484661][T11643] [ 909.499385][T11643] Possible unsafe locking scenario: [ 909.499385][T11643] [ 909.506881][T11643] CPU0 CPU1 [ 909.512250][T11643] ---- ---- [ 909.517623][T11643] lock(&opts->dep_lock); [ 909.522067][T11643] lock(gadget_subsys.su_mutex); [ 909.529625][T11643] lock(&opts->dep_lock); [ 909.536570][T11643] lock(&sb->s_type->i_mutex_key#23); [ 909.542042][T11643] [ 909.542042][T11643] *** DEADLOCK *** [ 909.542042][T11643] [ 909.550188][T11643] 5 locks held by syz.6.1986/11643: [ 909.555383][T11643] #0: ffff8881432e4460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 909.564627][T11643] #1: ffff888071d45590 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 909.575434][T11643] #2: ffffffff8d4e9df0 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 909.585198][T11643] #3: ffffffff8d809448 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 909.594875][T11643] #4: ffff888074e83520 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 909.604368][T11643] [ 909.604368][T11643] stack backtrace: [ 909.610260][T11643] CPU: 0 PID: 11643 Comm: syz.6.1986 Not tainted syzkaller #0 [ 909.617720][T11643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 909.627811][T11643] Call Trace: [ 909.631101][T11643] [ 909.634083][T11643] dump_stack_lvl+0x188/0x24e [ 909.638778][T11643] ? load_image+0x410/0x410 [ 909.643300][T11643] ? show_regs_print_info+0x12/0x12 [ 909.648603][T11643] ? print_circular_bug+0x12b/0x1a0 [ 909.653816][T11643] check_noncircular+0x296/0x330 [ 909.658762][T11643] ? look_up_lock_class+0x75/0x140 [ 909.663879][T11643] ? add_chain_block+0x9b0/0x9b0 [ 909.668843][T11643] ? lockdep_lock+0xf1/0x1f0 [ 909.673450][T11643] ? _find_first_zero_bit+0xd2/0x100 [ 909.678791][T11643] __lock_acquire+0x2d18/0x7c40 [ 909.683659][T11643] ? __kernel_text_address+0x9/0x30 [ 909.688914][T11643] ? verify_lock_unused+0x140/0x140 [ 909.694140][T11643] ? __mutex_trylock_common+0x15c/0x260 [ 909.699695][T11643] lock_acquire+0x1bb/0x4a0 [ 909.704212][T11643] ? configfs_depend_item_unlocked+0x14f/0x430 [ 909.710379][T11643] ? __might_sleep+0xd0/0xd0 [ 909.714974][T11643] ? read_lock_is_recursive+0x10/0x10 [ 909.720353][T11643] ? __mutex_trylock_common+0x15c/0x260 [ 909.725905][T11643] ? usbg_make_tpg+0x144/0x580 [ 909.730677][T11643] ? mutex_lock_nested+0x10/0x10 [ 909.735619][T11643] down_write+0x36/0x60 [ 909.739802][T11643] ? configfs_depend_item_unlocked+0x14f/0x430 [ 909.745967][T11643] configfs_depend_item_unlocked+0x14f/0x430 [ 909.751960][T11643] usbg_make_tpg+0x1f3/0x580 [ 909.756557][T11643] ? configfs_mkdir+0x4b5/0x9e0 [ 909.761423][T11643] ? usbg_drop_tport+0x20/0x20 [ 909.766196][T11643] ? vscnprintf+0x80/0x80 [ 909.770531][T11643] ? __kmem_cache_alloc_node+0x19d/0x270 [ 909.776174][T11643] target_fabric_make_tpg+0xa0/0x6d0 [ 909.781488][T11643] ? target_fabric_release_wwn+0xa0/0xa0 [ 909.787129][T11643] configfs_mkdir+0x511/0x9e0 [ 909.791818][T11643] vfs_mkdir+0x386/0x570 [ 909.796067][T11643] do_mkdirat+0x1d8/0x440 [ 909.800407][T11643] ? vfs_mkdir+0x570/0x570 [ 909.804829][T11643] ? getname_flags+0x206/0x500 [ 909.809597][T11643] __x64_sys_mkdir+0x6a/0x80 [ 909.814204][T11643] do_syscall_64+0x4c/0xa0 [ 909.818635][T11643] ? clear_bhb_loop+0x60/0xb0 [ 909.823320][T11643] ? clear_bhb_loop+0x60/0xb0 [ 909.828005][T11643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.833918][T11643] RIP: 0033:0x7f13baf9e159 [ 909.838337][T11643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.858040][T11643] RSP: 002b:00007f13bbf59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 909.866470][T11643] RAX: ffffffffffffffda RBX: 00007f13bb225fa0 RCX: 00007f13baf9e159 [ 909.874465][T11643] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 909.882439][T11643] RBP: 00007f13bb035024 R08: 0000000000000000 R09: 0000000000000000 [ 909.890414][T11643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.898388][T11643] R13: 00007f13bb226038 R14: 00007f13bb225fa0 R15: 00007ffdfe0ca958 [ 909.906380][T11643]