last executing test programs: 38.649803291s ago: executing program 4 (id=255): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x91, 0x0, @empty}}}}}, 0x0) 38.428731306s ago: executing program 4 (id=257): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6}]}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000380)={'veth1_to_batadv\x00'}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) lseek(r0, 0x1, 0x7) mknod(&(0x7f0000000180)='./file0\x00', 0x200, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x22052, r0, 0x0) 37.517280407s ago: executing program 4 (id=266): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000003180)={0x2a, 0x2, 0x6, "b43d7000ffff0000000200000000000000000000004000", 0x20363159}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=@bloom_filter={0x1e, 0x1, 0xb64, 0x1, 0x3b02, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x7}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, r3, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000003440)={0x1, &(0x7f0000003480)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) rseq(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x4e, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000034c0)=ANY=[@ANYBLOB="01000000080000"], 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket(0x12, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000003500)={0x0, 0x0, &(0x7f0000003540)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000003580)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000003600)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000108001b00000000001c001a80180002801400018008000f000100000008001c"], 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003680)={&(0x7f00000036c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004098) sendmsg$nl_route(r5, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000037c0)=@newlink={0x4c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003880)={&(0x7f00000038c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003ac0)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x2404000a) 34.642340666s ago: executing program 4 (id=279): mkdirat(0xffffffffffffff9c, &(0x7f0000003800)='./file0\x00', 0x0) mount$bind(&(0x7f0000003840)='.\x00', &(0x7f0000003880)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000038c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000003900)='./file0/../file0\x00', &(0x7f0000003940)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000003980)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000039c0)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000003a40)='.\x00', &(0x7f0000003a80)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000003ac0)='./file0/../file0\x00', 0xa) 34.377198512s ago: executing program 4 (id=284): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89, 0x80000}}, 0x20}}, 0x24040045) r0 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000480)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000680)={0x14, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000780)={0x20, 0x9, 0x6, "68e2f3ff82ba"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) syz_usb_connect$uac1(0x2, 0xb6, &(0x7f00000007c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x15b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x3, 0x1, 0x8, 0x40, 0xf8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x37, 0x1d}, [@selector_unit={0x7, 0x24, 0x5, 0x5, 0x2, "0dbc"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x601, 0x5, 0x7, 0xfc00, 0x7, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8, 0x4, 0x1, "8d5746f88560f033"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x3, 0xa4, 0x6, "8d4641", "b5"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0xfff, 0x72}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0x7, 0x8, {0x7, 0x25, 0x1, 0x8, 0x43, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x6, 0x5, 0x40}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x8, 0x4, {0x7, 0x25, 0x1, 0xc, 0x80, 0x6}}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x110, 0xff, 0x0, 0x4, 0x8, 0x1}, 0x19, &(0x7f00000008c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "0931b80cdbbe7b161d7dd5541a5e8c49"}]}, 0x7, [{0xbe, &(0x7f0000000900)=@string={0xbe, 0x3, "d431a7b6fb0a090a773313e081c9f79fa7051da64034dc2fb2e4ccfa976a4815197173b16a991ce8515110bf9160a1147fb21029682e2663a03d69c7970268be6bf741ae0749faa611829ff5cfb0750a8513bece98137dc29dd34fe11461580e86f61749436482d8fdd88643d1a43d82a96e51be6894731aa084ecf8ae742a930d85be68e6974067a7a27d79ef7fbb44c6fe4f24f3a5cfb8051c198582c1b778e3ce30257d3cd11fe25a91f48373d814fe316f7c1945c58aa81c3576"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x449}}, {0x68, &(0x7f0000000a40)=@string={0x68, 0x3, "d41c52287b70eab153f9e98ad7cf7e7aac98ba5abed5dbb4a997e5935f809ed3a56a65ba3412a57169dbcc9a93b954a39149cde79dbfbbd54415c44ddbf1f811b9d0caa02d0140f05586cc32eebd9ce11d62870f49e10d95cd0a4777daba2085a42680d0bb0a"}}, {0x49, &(0x7f0000000ac0)=@string={0x49, 0x3, "cc4621886dcf8ca053b158a77b4e16144cc816676617270a718be7a656d618bb08bab2c243a9d9733c6f77d072eab57ffbac1662ce22f69a0df5837dff6e18a31452fc472583bd"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x444}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000040)="710d7d00b8024cfae93a602116b517353f4f0ef2f1a9af5d7899126e30dd81217673e1a3bd4624cd4837e8397416fb81", 0x30, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x4c, r4, 0x1, 0x70bd2d, 0x4, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}}]}, 0x4c}}, 0x7eff7ab0d3e52d61) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$UHID_GET_REPORT_REPLY(r5, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, r2) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, 0xffffffffffffffff, 0xec776000) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score\x00') preadv(r6, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) 33.587274741s ago: executing program 4 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setrlimit(0xe, &(0x7f0000000440)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r1 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102) writev(r1, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000640)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, &(0x7f00000019c0), 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000001a00)=[{&(0x7f0000001a40)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff000000020000", 0x56}], 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) shutdown(r3, 0x0) syz_mount_image$udf(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f6164696e6963622c6e6f7374726963742c6d6f64653d30300030303030303030303030b7a130303068303030342c7569643d666f726754742c6e6f6164696e69d4fe2c756d61736b3d30bc3030060000000000000030303034303030323030302c6c617374726c6f636b3d30303030303030303030303030303030303031332c756eb77b6c6574652c70619c746974696f6e3d303030303830303030303030303030303030303505eba6ae15bfbe90e5f5d5d90aea08280068a228214313c7db8efb74a8c7a30e8bc291d6e93e0d40c1272acda59360ccde27abe29c73ed7312b5f838eb8bff0f84bc3c89a8a79e39a8c520544b8a4174c69b98849c74ee0471e33a2648814f53577e6d0437705a40ce8e033f78747cf5e858aec11bb7240a97de01d88a207b4520a7289db7e3cf3170c67cc1af0200000000000000000000006d95d7bea12a20216dfa4d781d77706b0ea701ec4eddc03768663dea20f4a919d93ef79423ec6962eccc48c759cbfd87245403469c72255c2617c320036aa3f6f669e11226503d7707fd3789789fa1a92ab639014cbc78ee03fdb0e0208b2f40e2b90f1627", @ANYRESHEX], 0x47, 0xc2b, &(0x7f00000008c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x101042, 0x15) pwrite64(r4, 0x0, 0x0, 0xe7c) 32.909736027s ago: executing program 32 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setrlimit(0xe, &(0x7f0000000440)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r1 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102) writev(r1, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000640)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, &(0x7f00000019c0), 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000001a00)=[{&(0x7f0000001a40)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff000000020000", 0x56}], 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) shutdown(r3, 0x0) syz_mount_image$udf(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x47, 0xc2b, &(0x7f00000008c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x101042, 0x15) pwrite64(r4, 0x0, 0x0, 0xe7c) 5.776244443s ago: executing program 1 (id=413): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f00000009c0)=ANY=[@ANYRES16, @ANYRES32], 0x67, 0xc54, &(0x7f0000002500)="$eJzs3U9onOl9B/DfMyOtRtp0o80m3qTNbgdSEqPUxv9iK7gEOVbUBhxviKzQPUWjP3aGlSUjyY03bYPakhZ6Cd1L6aWIJksLOfTU7TFKs4WEUighh+RQEDRZ9tCDDoHSll2F951npJEs27Nry5LXn88y+33nnd87ev6M3nkFfmYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIj47OcunDiZDroVAMDDdHn8SydOe/8HgMfKFX//AwAAAAAAAAAAAADAYZeiGkcixcBrG2myvN9Su9Scv3lrYnRs78P6U6SoRLWsL261k6dOn/nU2XPD7bz78Q/aR+KF8SsX6hd/dvzG4uzS0uxMfWK+Ob0wM9v1M7SOX7j+bo/fbagcgPr1l27OXL26VD91/PSOh28NvtH35JHB8+eOnR1u106Mjo2Nd9T09L7rn36bO63weCKq0YgUbw2+mRoRUYn7H4t7vHb2W3/ZiaGyExOjY2VH5pqN+eXiwVTJVZWIesdBI+0xeghzcV9GIlaK5hcNHiq6N36jsdiYmputf7GxuNxcbi7Mp0qrtUV/6lGJ4RSxGhHrfbc/XW9U4/lI8cqJjTQVEdX2OHyyXBh87/ZU9qGPXSjaWe+NWK08AnN2iPVFNS5Hil++fjSmizHLt/h4xBeKfC3i1SI/E5GKF8aZiF/s8Tri0dQT1fj3SLGQNtJMeT5on1cufbn++fmrCx217fPKI//+8DAd8nNTLaoxVZ7xN9K7v9gBAAAAAAAAAAAAAAAA4EHrj2p8O1L82XN/UK4rjnJd+vvPD7/vxd/tXDP+7D2ep6g9HhErle7W5PbmpcOpUvy3Dx2jK7Woxjfy+r8/OejGAAAAAAAAAAAAAAAAAAAAPNaq8WKk+Mqxo2k1Or9TvDl/rX6lMTXX+lbY9nf/tr8zfXNzc7OeWjmSczLnSs7VnGs513NGJR+fcyTnZM6VnKs513Ku54xqPj7nSM7JnCs5V3Ou5VzPGT35+JwjOSdzruRczbmWcz1nHJLv7gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeC+pRDXejhTf+tpGihQRIxGT0cq1voNuHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQqKVqHI8Uay/WyvurlYgrEfH25uZmefvfzc3NiI1i+34ddF8BAAAAAAAAAAAAAAAAAADg0ErV+FikeOb/NlI9Im4NvtH35JHB8+eOnR2uRjVSUdJZ/8L4lQv1iwvXbyzOLi3NztQnLn7nnfy42qXm/M1bE6NjD7wjXem/vf3zzemFmdlun+Ae7e+vXVy48fJi89pXl/d8fKB2YWppebExvffD0R+ViMnOPUNlgydGx8pGzzUb8+WhqXKHBlYiRrrtDAAAAAAAAAAAAAAAAAAAAIfGQKrG5yLFz//zTGqvG+9prfn/tda96lbtq3+0/VkAc7uyrfPzA7rZTt02dKhceF+fGB0bG+/Y3dN7e2nRppSq8Wyk+MQrHy7Xw6cY2HNtfFH3VFF3/UyuG/yNom5lR1VtaGJ0rH55Yf7Yhbm5henGcmNqbrY+fqMxfdsHBzzVbYcAAAAAAAAAAAAAAAAAAABg20Cqxk8ixX//w3+k9vfO5/X/Pa17Hev/f6dcQl+qpZ25pVzb/1S5tr+1/f7zwwPPP3en/fux/r9oU0rV+Ob2xxVsrf+f3FVb1P1FpHjzuY+Wj6WoPFHUNdrdaT3j1ebc7Imi9m8jxW++1a6NsvZarn1mu/ZkUdsfKf56Y2ftV3PtB7drTxW1RyPFD/5r79oPbdeeLmp/Hin++e/r7dqBovYPc+2R7drj0wtzM/ca1mL+vxspvnP591K7z3ec/47Pf1jZlVtum/O7b3c//+127D3/gx37VvK8/nmkOP2TD5dzebf5Pxspvlv7aK5rjf1Ufvzp8v/b8/+JSPGzf9tZezXXfmC79mS33Tpoxfx/O1J8/29+utXnPP95ZLdnqHP+f71nZ269SvZt/u/++/90x77B3K7pdzgWj6Oll7/+UmNubnbxvjdqz0c8iOfpdqN4me77z8qfgRMPsV82bByGjXudOb7Xv/9nJ/Zb8f7/l5Hi/49UU/s6Jr//v691b/v673++sf3+f35Xbjmg9/8PdOw7n69aensiasvXb/Q+G1Fbevnrx5rXG9dmr83Onzp54tOfPnvyxMmzvU+0L+62t7oeu/eCYv5/FCl+/I8/3vo7Zuf1397X/wO7cssBzf8znX3acV3T9VA8lor5/7tI8fRnf7r19+bdrv/bf/8f/djO3Pr9O6D5/2DHvsHcruY7HAsAAAAAAAAAAIBHyUCqxl9Fit//099O7TVE3fz7v5ldueWA/v3XkY59Mw90XcOdN7oeZACAQ6S4/vtQpPje5g+31nLvvP6L32rXdl7/3clh+P5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB41KWoxh9HioHXNtJaX3G/pXapOX/z1sTo2N6H9adIUYlqWV/caidPnT7zqbPnhtt5qe9hduMj8cL4lQv1iwvXbyzOLi3NztQn5pvTCzOzXT/D/R6/21A5gPXrL92cuXp1qX7q+OkdD98afKPvySOD588dOzvcrp0YHRsb76jp6X3XP/026Q77n4hq/DBSvDX4Zvp+X0Ql7n8s7vHa2W/9ZSeGyk5MjI6VHZlrNuaXiwdTJVdVIuodB420x+ghzMV9GYlYKZpfNHio6N74jcZiY2putv7FxuJyc7m5MJ8qrdYW/alHJYZTxGpErO/xK9kb1fhmpHjlxEb6l76IanscPnl5/EsnTt+7PZV96GMXinbWeyNWK4/AnB1ifVGNf4oUv3z9aPygL6InWrf4eMQXinwt4tUiPxORihfGmYhfPNRTO/upJ6pxJlIspI30el9xPmifVy59uf75+asLHbXt88oj//7wMB3yc1MtqvGj8oy/kf519+/1wAE1CgAAAAAAAAAAAAAAAIByJe1qpPjKsaOpXB+8taa4OX+tfqUxNdda1tde+9deM725ublZT60cyTmZcyXnas61nOs5o5KPzzmSczLnSs7VnGs513NGNR+fcyTnZM6VnKtl9m21eD3vj558fM6RnJM5V3Ku5lzLuZ4zDsnaPQAAAAAAAAAAAAAAAAAA4L2lEtXyW9y/9bWNVC6VHomYjFau+Z7f97xfBQAA///sg2Mq") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0)=0x12, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a0304006e22"], 0x54}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240)) rmdir(&(0x7f0000000040)='./bus\x00') 3.480540637s ago: executing program 1 (id=422): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) write(r0, &(0x7f0000000440)='add', 0x3) write(r0, &(0x7f0000000480)='add 6-', 0x6) write(r0, &(0x7f00000004c0)='add 7-', 0x6) 3.061912137s ago: executing program 1 (id=426): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.382238634s ago: executing program 2 (id=434): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_score_adj\x00') write$cgroup_int(r0, &(0x7f0000000500)=0xfff, 0x12) 2.211543298s ago: executing program 2 (id=435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(0x0) r3 = syz_create_resource$futex(&(0x7f0000000200)=0x2) futex(r3, 0x85, 0x3, 0x0, r3, 0x94fffff9) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo/3\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x81, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$eventfd(r4, &(0x7f00000001c0), 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0xd, 0x0, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="430f320f07b083410fdf3f75c462a59a11b8050000b95ea997c00f01c1c7442400d87b0000c74424025b1d82ffc7442406000000000f011c248f4978d1812e4b00006466460f78c7f08a", 0x4a}], 0x1, 0x7d, 0x0, 0x0) 2.023222292s ago: executing program 3 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) write(r0, &(0x7f0000000440)='add', 0x3) write(r0, &(0x7f0000000480)='add 6-', 0x6) write(r0, &(0x7f00000004c0)='add 7-', 0x6) 1.855289146s ago: executing program 3 (id=439): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add ', 0x4) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) write(r0, &(0x7f0000000440)='add', 0x3) write(r0, &(0x7f0000000480)='add 6-', 0x6) write(r0, &(0x7f00000004c0)='add 7-', 0x6) 1.726251919s ago: executing program 3 (id=441): r0 = openat$binfmt_format(0xffffff9c, &(0x7f00000197c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000019800)='-1\x00', 0x2) 1.645956361s ago: executing program 3 (id=443): openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000680), 0x2, 0x141102) r2 = gettid() ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) read$FUSE(r3, 0x0, 0x0) rt_sigqueueinfo(r2, 0x21, &(0x7f0000002840)={0x2c, 0x0, 0xfffffffb}) writev(r1, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='wwnn=0x1000000044001122,wwpn=0x2000000044001122\n', 0x30) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='wwnn=0x1000000044001123,wwpn=0x2000000044001123', 0x2f) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='wwnn=0x1000000044001122,wwpn=0x2000000044001122,lpwwnn=0x1000000044001123,lpwwpn=0x2000000044001123', 0x63) 1.518110124s ago: executing program 0 (id=445): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000575c820490d00702f260102030109021200010000008309040000000e011b"], 0x0) 1.517638254s ago: executing program 5 (id=446): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x10000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40088d1, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x62, 0x6, @broadcast}, 0x14) 1.399953227s ago: executing program 3 (id=447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102) writev(r1, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000001980)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, &(0x7f00000019c0), 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000001a00)=[{&(0x7f0000001a40)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff000000020000", 0x56}], 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) shutdown(r3, 0x0) syz_mount_image$udf(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x47, 0xc2b, &(0x7f00000008c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x101042, 0x15) pwrite64(r4, 0x0, 0x0, 0xe7c) 1.316229739s ago: executing program 2 (id=448): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000300)={0x2, {{0xa, 0x1, 0x1, @local, 0x5}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000a004e24000019c3ff0100000000000000000000000000010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009a48034e6148577f72e9b90bc00a00"/144], 0x90) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x10) socket$inet6(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x2, 0x9, 0x3, 0x0, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x20000080) sched_setscheduler(r1, 0x2, &(0x7f0000000880)=0x4) syz_open_dev$MSR(&(0x7f00000008c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019900)=0x410000002) r4 = syz_open_procfs(0x0, &(0x7f0000019940)='smaps\x00') pread64(r4, &(0x7f0000019980)=""/102400, 0x19000, 0xffffffff8) syz_mount_image$hfsplus(&(0x7f0000032980), &(0x7f00000329c0)='./file1\x00', 0xa50010, &(0x7f0000000080)=ANY=[], 0xd, 0x643, &(0x7f0000032c00)="$eJzs3c1rHOcdB/DvrFaK5IKjJHbilkBFDGmpqK0XlFa9xC2l6BBKSA89C1uOhddKkJSihFLUd+iph/wB6UG3ngq9G9Jze8tVx0Chl5x0U5nZZ6WVLSl6iyW1n4959nmeeWaeeea3M7M7sxYT4P/W3Hjaj1Nlbvyttbq+uTHd2dyYfq40d5LU5VbS7maplpLq0+ROuilfryeW+auD1vPx4uw7n32x+Xm31i6pmb912HJHs15SxpIMlPwJQ386Tn+D3ULdz939+zuGamcL64DdLPnAqfqEM7D9lPXjLH7K4xa4CKoDPo9GkytJhsv3gJSzQ+vZju7sHessBwAAAJfU81vZylqunvc4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DIpz/+vSmr1ymOpes//HyrTUsqXTGtP7fG5jQMAAAAAAAAAzs43t7KVtVzt1ber5gfy15rKteb1a/kgK1nIcm5lLfNZzWqWM5lktK+jobX51dXlySMsObXvklPPZnsBAAAAAAAA4H/UbzK3+/s/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcp4GSV91iVdK1Xnk0rXaS4SRD9Xzryb965eTOOY78yKr9Jj5+9uMAAACAUxk+wTLPb2Ura7naq29XzTX/y8318nA+yFJWs5jVdLKQe+Uaur7qb21uTHc2N6Yf1enpfn/4n2MNo+lx5zbEfmu+0cwxkvtZbKbcyt1mMPfSapas3eiNZ/9x/boeU/VmccSR3St5vbI/H3QX4VyMNhEZ3InIRBlbHY0XDo/El7477UPXNJlW785Prn0FMb9S8np7/nAxY95KE4mpvr3v5cMjkXzr73/9+YPO0sMH91fGL84mndCT+8R0XyReudSRaB9z/okmEtd36nP5SX6W8Yzl7SxnMb/IfFazkO3SPl/25/p19PBI7b2v+vaXjWSovC/ds+hRxjSWHzel+bzWLHs1i6nyXu5lIW80/6Yyme9lJjOZ7XuHrx847mbbmqO+dbyj/ua3S2EkyR9Lft66H6l1XF/oi2v/OXe0aeufshulF8/+3Nj+RinU6/htyS+GJyMx2ReJlw6PxF+aY2Ols/Rw+cH8+wf0v/5E/fWS13vc7y/Up0S9v7yY4XIm2bt31G0v7Zxl9sZrqPzi0m1rPdV2vWmrqt6R+tMDj9Sh8h3u6Z6mmrZX9m2bbtpu9LXt+b6V99LZ+T4EwAV25TtXhkb+PfLPkU9GfjfyYOSt4R899/3nXh3K4D8Gf9CeGHi99Wr1t3ySX+1e/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACe38uFHD+c7nYXl/Qutg5uOWaiSHDJPVR7kcybrUrjghd5DBE/d4Z0LsTmXujCQZL+m8had5OGiwKVwe/XR+7dXPvzou4uP5t9deHdhaXBmZnZiduaN6dv3FzsLE93X8x4l8FXY/dDfv726UA/YBAAAAAAAAAAAAHK0v7fZLv//78R/aXDe2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbnPjaT9OlcmJWxN1fXNjulOnXnl3znaSViupfplUnyZ30k0Z7euuevOA9Xy8OPvOZ19sfr7bV7uZv+605KewXlLGkgyU/Kz6u3vq/qqdLawDdrMXODhv/w0AAP//XDb/ZA==") creat(&(0x7f0000033280)='./file1\x00', 0x160) lsetxattr$security_capability(&(0x7f00000332c0)='./file1\x00', &(0x7f0000033300), &(0x7f0000033340)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4800}, 0x10) 933.940458ms ago: executing program 5 (id=449): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) write(r0, &(0x7f0000000440)='add', 0x3) write(r0, &(0x7f0000000480)='add 6-', 0x6) write(r0, &(0x7f00000004c0)='add 7-', 0x6) 852.36748ms ago: executing program 0 (id=450): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) write(r0, &(0x7f0000000440)='add', 0x3) write(r0, &(0x7f0000000480)='add 6-', 0x6) write(r0, &(0x7f00000004c0)='add 7-', 0x6) 850.93952ms ago: executing program 1 (id=451): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) write(r0, &(0x7f0000000440)='add', 0x3) write(r0, &(0x7f0000000480)='add 6-', 0x6) write(r0, &(0x7f00000004c0)='add 7-', 0x6) 695.969344ms ago: executing program 5 (id=452): setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) 605.854416ms ago: executing program 2 (id=453): r0 = openat$binfmt_format(0xffffff9c, &(0x7f00000197c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000019800)='-1\x00', 0x2) 535.280588ms ago: executing program 1 (id=454): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000280)='add ', 0x4) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) write(r0, &(0x7f0000000440)='add', 0x3) write(r0, &(0x7f0000000480)='add 6-', 0x6) write(r0, &(0x7f00000004c0)='add 7-', 0x6) 469.454129ms ago: executing program 0 (id=455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000940)={0x14, r2, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000004209d2515a693185aee7", @ANYBLOB='\x00'/25], 0x50) syz_io_uring_setup(0x328d, &(0x7f0000001340)={0x0, 0xdece, 0x40, 0x1, 0x223}, &(0x7f0000000080), &(0x7f0000000680), &(0x7f0000000240)) syz_ublk_setup_io_uring(0x3574, &(0x7f0000000340)={0x0, 0xfffffffc, 0x40000, 0x1, 0x1e4}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000001300)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) sigaltstack(0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r4, r4, 0x0, 0x20000005) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x320, [0x0, 0x200000000000, 0x200000000250, 0x200000000320], 0x0, 0x0, &(0x7f00000013c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x5, 0x47, 0x865f, 'veth0_macvtap\x00', 'macvlan1\x00', 'xfrm0\x00', 'vlan0\x00', @local, [0xff, 0xff, 0xff, 0x0, 0xff], @random="5c5cd9076c49", [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @common=@dnat={'dnat\x00', 0x10, {{@random="7869af1ff936", 0xffffffffffffffff}}}}, {0x11, 0x8, 0x8906, 'veth0_to_hsr\x00', 'gretap0\x00', 'bond0\x00', 'veth1\x00', @broadcast, [0xc37fe49ef165bbca, 0xff, 0xff, 0x0, 0xff], @local, [0x0, 0x0, 0x0, 0xff, 0xff], 0x0, 0x70, 0x110, 0x148, [], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x40, {0xfffffffffffffffd}}}}, @common=@log={'log\x00', 0x28, {{0x1, "d2a6cb6cd9ec38801666473014699f22492faaf57ed2c5d6de62fc172f26", 0xf}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x11, 0x4d, 0x15, 'veth0_to_hsr\x00', 'vcan0\x00', 'ip6erspan0\x00', 'veth1_to_hsr\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x398) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendto$inet(r6, &(0x7f0000000200)="00112233", 0x4, 0x0, &(0x7f0000000280)={0x2, 0x1234, @local}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 469.309979ms ago: executing program 5 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add ', 0x4) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) write(r0, &(0x7f0000000440)='add', 0x3) write(r0, &(0x7f0000000480)='add 6-', 0x6) write(r0, &(0x7f00000004c0)='add 7-', 0x6) 435.59447ms ago: executing program 2 (id=457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setrlimit(0xe, &(0x7f0000000440)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102) writev(r1, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0x1}], 0x1) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) bind$inet6(r2, &(0x7f0000001980)={0xa, 0xe22}, 0x1c) 351.541702ms ago: executing program 1 (id=458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(0x0) r3 = syz_create_resource$futex(&(0x7f0000000200)=0x2) futex(r3, 0x85, 0x3, 0x0, r3, 0x94fffff9) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo/3\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x81, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$eventfd(r4, &(0x7f00000001c0), 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0xd, 0x0, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="430f320f07b083410fdf3f75c462a59a11b8050000b95ea997c00f01c1c7442400d87b0000c74424025b1d82ffc7442406000000000f011c248f4978d1812e4b00006466460f78c7f08a", 0x4a}], 0x1, 0x7d, 0x0, 0x0) 345.996222ms ago: executing program 5 (id=459): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add ', 0x4) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) write(r0, &(0x7f0000000440)='add', 0x3) write(r0, &(0x7f0000000480)='add 6-', 0x6) write(r0, &(0x7f00000004c0)='add 7-', 0x6) 307.743623ms ago: executing program 0 (id=460): unshare(0x6020400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = landlock_create_ruleset(&(0x7f0000000340)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) listen(r0, 0x3) landlock_restrict_self(r1, 0x0) listen(r0, 0xfffffc01) 244.905244ms ago: executing program 3 (id=461): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x801, 0x0) write$rfkill(r0, &(0x7f00000005c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 227.111005ms ago: executing program 2 (id=462): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f00000000c0)={[{@errors_remount}, {@minixdf}]}, 0x1, 0x531, &(0x7f0000000100)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000940)={0x0, r0}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0c0400c8"], 0xf) 81.615388ms ago: executing program 0 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000280)='add ', 0x4) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) write(r0, &(0x7f0000000440)='add', 0x3) write(r0, &(0x7f0000000480)='add 6-', 0x6) write(r0, &(0x7f00000004c0)='add 7-', 0x6) 51.585359ms ago: executing program 5 (id=464): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000300)={0x2, {{0xa, 0x1, 0x1, @local, 0x5}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000a004e24000019c3ff0100000000000000000000000000010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009a48034e6148577f72e9b90bc00a00"/144], 0x90) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x10) socket$inet6(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x2, 0x9, 0x3, 0x0, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x20000080) sched_setscheduler(r1, 0x2, &(0x7f0000000880)=0x4) syz_open_dev$MSR(&(0x7f00000008c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019900)=0x410000002) r4 = syz_open_procfs(0x0, &(0x7f0000019940)='smaps\x00') pread64(r4, &(0x7f0000019980)=""/102400, 0x19000, 0xffffffff8) syz_mount_image$hfsplus(&(0x7f0000032980), &(0x7f00000329c0)='./file1\x00', 0xa50010, &(0x7f0000000080)=ANY=[], 0xd, 0x643, &(0x7f0000032c00)="$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") creat(&(0x7f0000033280)='./file1\x00', 0x160) lsetxattr$security_capability(&(0x7f00000332c0)='./file1\x00', &(0x7f0000033300), &(0x7f0000033340)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4800}, 0x10) 0s ago: executing program 0 (id=465): r0 = syz_open_dev$swradio(0x0, 0x1, 0x2) pread64(r0, 0x0, 0x0, 0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') syz_open_dev$vbi(0x0, 0x3, 0x2) r2 = syz_usb_connect(0x5, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x39, &(0x7f0000000300)=ANY=[]) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000380)={0x9, @raw_data="97c824ea4ec2792db790a5bc15683a221e7226d6b689a7d2683c93bca95c177f7e9e035ce581d102b402595507cfb2b30fc8ad259b0f2191b24754812a5d1eb955f8013c337b0f1bb4767a153406e249b1bd8e3d3d5e29fcce1a48085cfdbff87df4d84a87dcc6a3e668cd862eba19184c3dfd54267b31d05a7a415716236130bd85004e93b4b28689ef094132c67ea3cff99f360ac231d579da4854d70714593d8007117b34d7dd6df77654e74992469a1ad9a2126acc1d00c5a42a61c0727abbbf3eb451e57a82"}) syz_usb_control_io(r5, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x7}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r8 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r8, 0x40084503, &(0x7f0000ffcffc)) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): 6949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.697317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.706489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.717588][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.733038][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.745367][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.817197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.827451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.836943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.846569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.876658][ T4200] device veth0_vlan entered promiscuous mode [ 68.896862][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.906645][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.917043][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.927479][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.945268][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.957074][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.976272][ T4189] device veth0_vlan entered promiscuous mode [ 68.989244][ T4200] device veth1_vlan entered promiscuous mode [ 68.999823][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.013865][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.027194][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.044639][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.056578][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.070851][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.084778][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.093952][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.102410][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.113309][ T4187] device veth0_vlan entered promiscuous mode [ 69.133678][ T4189] device veth1_vlan entered promiscuous mode [ 69.169866][ T4200] device veth0_macvtap entered promiscuous mode [ 69.182049][ T4187] device veth1_vlan entered promiscuous mode [ 69.208884][ T4186] device veth0_vlan entered promiscuous mode [ 69.216947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.227676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.237484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.246202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.256113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.265178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.274632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.286267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.296623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.305199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.313259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.322046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.330334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.338881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.348090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.358616][ T4200] device veth1_macvtap entered promiscuous mode [ 69.377172][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.397713][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.410391][ T4186] device veth1_vlan entered promiscuous mode [ 69.423362][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.432350][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.444699][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.459947][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.469457][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.481146][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.489869][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.505838][ T4189] device veth0_macvtap entered promiscuous mode [ 69.515565][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.525815][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.535666][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.544355][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.560016][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.570339][ T4189] device veth1_macvtap entered promiscuous mode [ 69.601207][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.609574][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.612591][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 69.620091][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.633348][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 69.645410][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.657335][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.662067][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 69.673101][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.686103][ T4187] device veth0_macvtap entered promiscuous mode [ 69.693591][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 69.699702][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 69.709685][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.719522][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.729689][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.738707][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.747511][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.759173][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.768272][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.779218][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.790053][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.801643][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.817990][ T4187] device veth1_macvtap entered promiscuous mode [ 69.833616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.841944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.850444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.891081][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.899891][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.916418][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.927459][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.946213][ T4186] device veth0_macvtap entered promiscuous mode [ 69.987652][ T4185] device veth0_vlan entered promiscuous mode [ 70.000879][ T4186] device veth1_macvtap entered promiscuous mode [ 70.013588][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.026059][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.037361][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.038383][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.057445][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.067944][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.079141][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.087173][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.096762][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.105146][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.113661][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.122634][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.130606][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.139106][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.148336][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.156541][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.173401][ T4185] device veth1_vlan entered promiscuous mode [ 70.216048][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.227041][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.237580][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.248413][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.263250][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.279146][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.289158][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.298153][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.307028][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.326068][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.339306][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.347448][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.356422][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.368040][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.377504][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.379450][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.397895][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.408960][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.419647][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.430239][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.441716][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.453540][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.487424][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.496033][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.507255][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.516225][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.524923][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.535353][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.546335][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.556458][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.567938][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.578047][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.588940][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.600658][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.619616][ T4185] device veth0_macvtap entered promiscuous mode [ 70.642567][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.655738][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.665320][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.725763][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.738928][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.743860][ T4185] device veth1_macvtap entered promiscuous mode [ 70.758215][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.767350][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.776330][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.785737][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.810259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.823324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.848006][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.859035][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.869349][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.879929][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.891510][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.902255][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.912757][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.923656][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.935952][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.951790][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.959632][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.989807][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.999793][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.017234][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.031655][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.049821][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.060494][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.071557][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.081440][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.091932][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.102081][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.112759][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.127157][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.134068][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.145275][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.164556][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.180002][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.197837][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.206277][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.223760][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.233405][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.247330][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.260769][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.301967][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.327497][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.352572][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.393272][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.496430][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.520471][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.563904][ T4316] FAULT_INJECTION: forcing a failure. [ 71.563904][ T4316] name fail_futex, interval 1, probability 0, space 0, times 1 [ 71.600527][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 71.620524][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 71.630514][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 71.640514][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 71.650518][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 71.660516][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 71.670519][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 71.680523][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 71.690520][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 71.700522][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 71.738326][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 71.744948][ T4316] CPU: 1 PID: 4316 Comm: syz.0.1 Not tainted syzkaller #0 [ 71.752121][ T4316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 71.762244][ T4316] Call Trace: [ 71.765544][ T4316] [ 71.768530][ T4316] dump_stack_lvl+0x188/0x250 [ 71.773260][ T4316] ? show_regs_print_info+0x20/0x20 [ 71.778484][ T4316] ? load_image+0x410/0x410 [ 71.782989][ T4316] ? kmem_cache_free+0x8f/0x210 [ 71.787860][ T4316] ? stack_trace_save+0xa6/0xf0 [ 71.792758][ T4316] ? stack_depot_save+0x41b/0x460 [ 71.797816][ T4316] should_fail+0x383/0x4b0 [ 71.802237][ T4316] get_futex_key+0x1a1/0x12d0 [ 71.806915][ T4316] ? __lock_acquire+0x13b3/0x7d40 [ 71.812174][ T4316] ? futex_wait_restart+0x250/0x250 [ 71.817390][ T4316] futex_wake+0x101/0x540 [ 71.821740][ T4316] ? futex_wait+0x680/0x680 [ 71.826338][ T4316] ? filename_lookup+0xd6/0x550 [ 71.831203][ T4316] ? verify_lock_unused+0x140/0x140 [ 71.836430][ T4316] ? verify_lock_unused+0x140/0x140 [ 71.841661][ T4316] do_futex+0xd83/0x12b0 [ 71.845948][ T4316] ? slab_free_freelist_hook+0xec/0x170 [ 71.851779][ T4316] ? futex_exit_release+0x1c0/0x1c0 [ 71.856984][ T4316] ? __context_tracking_exit+0x4c/0x80 [ 71.862465][ T4316] __se_sys_futex+0x389/0x420 [ 71.867155][ T4316] ? __x64_sys_futex+0xf0/0xf0 [ 71.871936][ T4316] ? __x64_sys_futex+0x1d/0xf0 [ 71.876720][ T4316] do_syscall_64+0x4c/0xa0 [ 71.881138][ T4316] ? clear_bhb_loop+0x30/0x80 [ 71.885818][ T4316] ? clear_bhb_loop+0x30/0x80 [ 71.890511][ T4316] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.896436][ T4316] RIP: 0033:0x7f39c2a93559 [ 71.900855][ T4316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.920463][ T4316] RSP: 002b:00007f39c0ceb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 71.928904][ T4316] RAX: ffffffffffffffda RBX: 00007f39c2d1afa8 RCX: 00007f39c2a93559 [ 71.936901][ T4316] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f39c2d1afac [ 71.944901][ T4316] RBP: 00007f39c2d1afa0 R08: 001e971698e8005e R09: 0000000000000000 [ 71.952891][ T4316] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 71.960885][ T4316] R13: 00007f39c2d1b038 R14: 00007ffc883d2200 R15: 00007ffc883d22e8 [ 71.968925][ T4316] [ 71.980544][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 72.002854][ T556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.011946][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 72.018545][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 72.028982][ T556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.041151][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 72.640800][ T4323] Zero length message leads to an empty skb [ 73.669156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.696775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.226888][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.250554][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.368033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.380874][ T2098] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.400532][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.408379][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.481366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.542838][ T4339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 75.578818][ T4339] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 75.602067][ T4339] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2'. [ 75.762130][ T2098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.790768][ T2098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.816211][ T2098] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 75.846182][ T2098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.884943][ T2098] usb 1-1: config 0 descriptor?? [ 77.221213][ T4364] FAULT_INJECTION: forcing a failure. [ 77.221213][ T4364] name failslab, interval 1, probability 0, space 0, times 1 [ 77.240296][ T2098] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 77.253865][ T4364] CPU: 0 PID: 4364 Comm: syz.4.21 Not tainted syzkaller #0 [ 77.261108][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 77.264135][ T2098] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 77.271186][ T4364] Call Trace: [ 77.271218][ T4364] [ 77.271227][ T4364] dump_stack_lvl+0x188/0x250 [ 77.289369][ T4364] ? show_regs_print_info+0x20/0x20 [ 77.294614][ T4364] ? load_image+0x410/0x410 [ 77.299166][ T4364] ? __lock_acquire+0x7d40/0x7d40 [ 77.304231][ T4364] should_fail+0x383/0x4b0 [ 77.308693][ T4364] should_failslab+0x5/0x20 [ 77.313223][ T4364] slab_pre_alloc_hook+0x51/0xc0 [ 77.318189][ T4364] __kmalloc+0x6b/0x340 [ 77.322376][ T4364] ? apply_wqattrs_prepare+0xb3/0xad0 [ 77.323989][ T2098] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0001/input/input5 [ 77.327810][ T4364] apply_wqattrs_prepare+0xb3/0xad0 [ 77.344308][ T4364] ? mutex_lock_io_nested+0x60/0x60 [ 77.349564][ T4364] apply_workqueue_attrs+0xd0/0x170 [ 77.354794][ T4364] alloc_workqueue+0xf1e/0x1450 [ 77.359675][ T4364] ? vsnprintf+0x1b22/0x1c20 [ 77.364315][ T4364] ? snprintf+0xe5/0x140 [ 77.368598][ T4364] ? apply_workqueue_attrs+0x170/0x170 [ 77.374103][ T4364] nci_register_device+0x3fc/0x9f0 [ 77.379250][ T4364] ? nci_free_device+0x90/0x90 [ 77.384051][ T4364] ? nci_hci_allocate+0x1dd/0x2a0 [ 77.389128][ T4364] ? nci_allocate_device+0x241/0x350 [ 77.394442][ T4364] virtual_ncidev_open+0x55/0xc0 [ 77.399410][ T4364] ? virtual_ncidev_ioctl+0x90/0x90 [ 77.404635][ T4364] misc_open+0x31f/0x390 [ 77.408925][ T4364] chrdev_open+0x585/0x5f0 [ 77.413382][ T4364] ? cd_forget+0x160/0x160 [ 77.417868][ T4364] ? fsnotify_perm+0x3a7/0x560 [ 77.422671][ T4364] ? cd_forget+0x160/0x160 [ 77.427120][ T4364] do_dentry_open+0x7f7/0xf90 [ 77.431828][ T4364] ? vfs_open+0x2b/0x80 [ 77.436034][ T4364] path_openat+0x2718/0x2fb0 [ 77.440690][ T4364] ? __kasan_slab_alloc+0xa9/0xc0 [ 77.445762][ T4364] ? do_filp_open+0x400/0x400 [ 77.446758][ T2098] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 77.450494][ T4364] do_filp_open+0x1df/0x400 [ 77.450529][ T4364] ? vfs_tmpfile+0x300/0x300 [ 77.450576][ T4364] ? _raw_spin_unlock+0x24/0x40 [ 77.450600][ T4364] ? alloc_fd+0x59e/0x650 [ 77.450630][ T4364] do_sys_openat2+0x14b/0x500 [ 77.450652][ T4364] ? __lock_acquire+0x7d40/0x7d40 [ 77.450679][ T4364] ? do_sys_open+0xe0/0xe0 [ 77.450700][ T4364] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 77.450730][ T4364] ? lock_chain_count+0x20/0x20 [ 77.450758][ T4364] __x64_sys_openat+0x135/0x160 [ 77.450785][ T4364] do_syscall_64+0x4c/0xa0 [ 77.516094][ T4364] ? clear_bhb_loop+0x30/0x80 [ 77.520810][ T4364] ? clear_bhb_loop+0x30/0x80 [ 77.525522][ T4364] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.531454][ T4364] RIP: 0033:0x7fcca928a559 [ 77.535921][ T4364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.555579][ T4364] RSP: 002b:00007fcca74e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 77.564035][ T4364] RAX: ffffffffffffffda RBX: 00007fcca9511fa0 RCX: 00007fcca928a559 [ 77.572039][ T4364] RDX: 0000000000000002 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 77.580049][ T4364] RBP: 00007fcca9321ab8 R08: 0000000000000000 R09: 0000000000000000 [ 77.588047][ T4364] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000000 [ 77.596059][ T4364] R13: 00007fcca9512038 R14: 00007fcca9511fa0 R15: 00007ffdb6337528 [ 77.604094][ T4364] [ 77.642171][ T4369] netlink: 'syz.3.20': attribute type 5 has an invalid length. [ 77.658547][ T4360] loop1: detected capacity change from 0 to 4096 [ 77.760434][ T2098] usb 1-1: USB disconnect, device number 2 [ 77.785823][ T4360] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 77.866407][ T4360] ntfs3: loop1: Failed to load $Extend. [ 77.872276][ T4374] ip_tables: iptables: counters copy to user failed while replacing table [ 77.905634][ T4370] fido_id[4370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 78.515022][ T4389] loop3: detected capacity change from 0 to 1024 [ 79.080104][ T4261] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.378778][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.464272][ T4404] sctp: [Deprecated]: syz.4.32 (pid 4404) Use of int in max_burst socket option deprecated. [ 79.464272][ T4404] Use struct sctp_assoc_value instead [ 79.492307][ T4405] tmpfs: Bad value for 'mpol' [ 79.578698][ T4405] FAULT_INJECTION: forcing a failure. [ 79.578698][ T4405] name failslab, interval 1, probability 0, space 0, times 0 [ 79.631034][ T4405] CPU: 0 PID: 4405 Comm: syz.3.31 Not tainted syzkaller #0 [ 79.638301][ T4405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 79.648387][ T4405] Call Trace: [ 79.651695][ T4405] [ 79.654663][ T4405] dump_stack_lvl+0x188/0x250 [ 79.659385][ T4405] ? show_regs_print_info+0x20/0x20 [ 79.664726][ T4405] ? load_image+0x410/0x410 [ 79.669276][ T4405] ? __might_sleep+0xf0/0xf0 [ 79.673898][ T4405] ? __lock_acquire+0x7d40/0x7d40 [ 79.678973][ T4405] should_fail+0x383/0x4b0 [ 79.683531][ T4405] should_failslab+0x5/0x20 [ 79.688078][ T4405] slab_pre_alloc_hook+0x51/0xc0 [ 79.693052][ T4405] __kmalloc+0x6b/0x340 [ 79.697246][ T4405] ? ceph_msg_new2+0x26f/0x4a0 [ 79.702054][ T4405] ceph_msg_new2+0x26f/0x4a0 [ 79.706716][ T4405] msgpool_alloc+0x7c/0x1b0 [ 79.711268][ T4405] ? ceph_msgpool_init+0x180/0x180 [ 79.716415][ T4405] mempool_init_node+0x1e5/0x480 [ 79.721397][ T4405] ? msgpool_alloc+0x1b0/0x1b0 [ 79.726189][ T4405] ? ceph_msgpool_init+0x180/0x180 [ 79.731350][ T4405] mempool_create+0x7d/0xc0 [ 79.735893][ T4405] ceph_msgpool_init+0xa3/0x180 [ 79.740787][ T4405] ceph_osdc_init+0x56e/0x8a0 [ 79.745513][ T4405] ceph_create_client+0x242/0x300 [ 79.750583][ T4405] ceph_get_tree+0xf6/0x1290 [ 79.755211][ T4405] ? bpf_lsm_capable+0x5/0x10 [ 79.759940][ T4405] ? security_capable+0x85/0xb0 [ 79.764827][ T4405] vfs_get_tree+0x88/0x270 [ 79.769286][ T4405] do_new_mount+0x247/0xa40 [ 79.773827][ T4405] __se_sys_mount+0x2e3/0x3d0 [ 79.778541][ T4405] ? __x64_sys_mount+0xc0/0xc0 [ 79.783334][ T4405] ? lockdep_hardirqs_on+0x94/0x140 [ 79.788563][ T4405] ? __x64_sys_mount+0x1c/0xc0 [ 79.793363][ T4405] do_syscall_64+0x4c/0xa0 [ 79.797808][ T4405] ? clear_bhb_loop+0x30/0x80 [ 79.802512][ T4405] ? clear_bhb_loop+0x30/0x80 [ 79.807216][ T4405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.813167][ T4405] RIP: 0033:0x7f6a7dc99559 [ 79.817607][ T4405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.837248][ T4405] RSP: 002b:00007f6a7bef1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.845702][ T4405] RAX: ffffffffffffffda RBX: 00007f6a7df20fa0 RCX: 00007f6a7dc99559 [ 79.853702][ T4405] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840 [ 79.861696][ T4405] RBP: 00007f6a7dd30ab8 R08: 0000000000000000 R09: 0000000000000000 [ 79.869692][ T4405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.877686][ T4405] R13: 00007f6a7df21038 R14: 00007f6a7df20fa0 R15: 00007ffdc1b55c28 [ 79.885712][ T4405] [ 80.084108][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 80.200888][ T13] usb 2-1: config index 0 descriptor too short (expected 526, got 367) [ 80.220610][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.410791][ T13] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=a4.96 [ 80.423699][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.457132][ T13] usb 2-1: Product: syz [ 80.467330][ T13] usb 2-1: Manufacturer: syz [ 80.485740][ T13] usb 2-1: SerialNumber: syz [ 80.529609][ T13] usb 2-1: config 0 descriptor?? [ 80.559228][ T4432] loop3: detected capacity change from 0 to 512 [ 80.840051][ T4432] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.871377][ T13] usb 2-1: USB disconnect, device number 2 [ 81.154424][ T4432] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.38: bg 0: block 184: padding at end of block bitmap is not set [ 81.221925][ T4432] EXT4-fs (loop3): Remounting filesystem read-only [ 81.257040][ T4432] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 81.301201][ T4432] EXT4-fs (loop3): Remounting filesystem read-only [ 81.331413][ T4432] EXT4-fs (loop3): 1 truncate cleaned up [ 81.337124][ T4432] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,minixdf,. Quota mode: writeback. [ 81.413092][ T4432] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.043605][ T4492] loop0: detected capacity change from 0 to 512 [ 86.100608][ T4188] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.263485][ T4492] EXT4-fs (loop0): 1 orphan inode deleted [ 86.269295][ T4492] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 86.291274][ T4492] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.495714][ T23] cfg80211: failed to load regulatory.db [ 86.591239][ T4188] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.646211][ T4188] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 86.667212][ T4188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.712417][ T4188] usb 4-1: config 0 descriptor?? [ 86.753459][ T4188] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 87.020132][ T4512] loop1: detected capacity change from 0 to 1024 [ 87.771088][ T4518] FAULT_INJECTION: forcing a failure. [ 87.771088][ T4518] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.816774][ T4518] CPU: 1 PID: 4518 Comm: syz.0.57 Not tainted syzkaller #0 [ 87.824060][ T4518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 87.834414][ T4518] Call Trace: [ 87.837720][ T4518] [ 87.840679][ T4518] dump_stack_lvl+0x188/0x250 [ 87.845400][ T4518] ? show_regs_print_info+0x20/0x20 [ 87.850634][ T4518] ? load_image+0x410/0x410 [ 87.855192][ T4518] ? __lock_acquire+0x7d40/0x7d40 [ 87.860255][ T4518] should_fail+0x383/0x4b0 [ 87.864755][ T4518] _copy_from_user+0x2e/0x170 [ 87.869476][ T4518] copy_clone_args_from_user+0x1d8/0x6d0 [ 87.875150][ T4518] ? verify_lock_unused+0x140/0x140 [ 87.880388][ T4518] ? verify_lock_unused+0x140/0x140 [ 87.885633][ T4518] ? __delayed_free_task+0x20/0x20 [ 87.890788][ T4518] ? vfs_write+0xaa6/0xd70 [ 87.895252][ T4518] __se_sys_clone3+0x132/0x3d0 [ 87.900044][ T4518] ? __x64_sys_clone3+0x60/0x60 [ 87.904918][ T4518] ? __lock_acquire+0x7d40/0x7d40 [ 87.909961][ T4518] ? lockdep_hardirqs_on+0x94/0x140 [ 87.915163][ T4518] do_syscall_64+0x4c/0xa0 [ 87.919596][ T4518] ? clear_bhb_loop+0x30/0x80 [ 87.924278][ T4518] ? clear_bhb_loop+0x30/0x80 [ 87.928982][ T4518] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.934874][ T4518] RIP: 0033:0x7f39c2a93559 [ 87.939288][ T4518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.958908][ T4518] RSP: 002b:00007f39c0ceaef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 87.967326][ T4518] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f39c2a93559 [ 87.975300][ T4518] RDX: 00007f39c0ceaf10 RSI: 0000000000000058 RDI: 00007f39c0ceaf10 [ 87.983269][ T4518] RBP: 00007f39c2b2aab8 R08: 0000000000000000 R09: 0000000000000058 [ 87.991244][ T4518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.999222][ T4518] R13: 00007f39c2d1b038 R14: 00007f39c2d1afa0 R15: 00007ffc883d22e8 [ 88.007206][ T4518] [ 88.170567][ T4188] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.420624][ T4188] usb 3-1: Using ep0 maxpacket: 32 [ 88.540778][ T4188] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 88.548915][ T4188] usb 3-1: config 0 has no interface number 0 [ 89.830408][ T4264] usb 4-1: USB disconnect, device number 2 [ 89.910818][ T4188] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 89.956275][ T4188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.017282][ T4188] usb 3-1: Product: syz [ 90.030213][ T4188] usb 3-1: Manufacturer: syz [ 90.053028][ T4188] usb 3-1: SerialNumber: syz [ 90.117776][ T4188] usb 3-1: config 0 descriptor?? [ 90.169592][ T4529] loop3: detected capacity change from 0 to 2048 [ 90.187025][ T4188] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 90.413202][ T4188] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 90.450930][ T4529] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.486604][ T4188] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 90.859849][ T4534] netlink: 44 bytes leftover after parsing attributes in process `syz.0.64'. [ 90.874826][ T23] usb 3-1: USB disconnect, device number 2 [ 90.890588][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 90.928556][ T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 90.973669][ T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 90.999686][ T23] quatech2 3-1:0.51: device disconnected [ 91.082810][ T4542] 9pnet_virtio: no channels available for device syz [ 91.103231][ T4542] input: syz0 as /devices/virtual/input/input7 [ 91.343488][ T4538] loop4: detected capacity change from 0 to 32768 [ 91.357340][ T4538] ======================================================= [ 91.357340][ T4538] WARNING: The mand mount option has been deprecated and [ 91.357340][ T4538] and is ignored by this kernel. Remove the mand [ 91.357340][ T4538] option from the mount to silence this warning. [ 91.357340][ T4538] ======================================================= [ 91.605383][ T4538] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 92.241410][ T4186] ocfs2: Unmounting device (7,4) on (node local) [ 92.661225][ T4580] loop3: detected capacity change from 0 to 128 [ 92.770600][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.876345][ T4585] loop0: detected capacity change from 0 to 1024 [ 93.780720][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 93.950642][ T13] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 93.959813][ T13] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 93.968499][ T13] usb 3-1: config 166 has no interface number 0 [ 93.975065][ T13] usb 3-1: config 166 has no interface number 1 [ 94.002749][ T13] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 94.020807][ T13] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 94.037839][ T13] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 94.049272][ T13] usb 3-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 94.066337][ T13] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 94.086473][ T13] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 94.120530][ T13] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 94.149829][ T13] usb 3-1: config 166 interface 177 has no altsetting 0 [ 94.212490][ T13] usb 3-1: config 166 interface 34 has no altsetting 0 [ 94.249776][ T4604] loop0: detected capacity change from 0 to 16 [ 94.421897][ T13] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 94.560617][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.591644][ T13] usb 3-1: Product: syz [ 94.595875][ T13] usb 3-1: Manufacturer: syz [ 94.614681][ T13] usb 3-1: SerialNumber: syz [ 94.720852][ T13] usb 3-1: can't set config #166, error -71 [ 94.753457][ T13] usb 3-1: USB disconnect, device number 3 [ 94.914506][ T4604] erofs: (device loop0): mounted with root inode @ nid 36. [ 95.210584][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.985622][ T4619] loop4: detected capacity change from 0 to 1024 [ 96.159596][ T4622] device syzkaller0 entered promiscuous mode [ 96.171259][ T4622] tipc: Started in network mode [ 96.176325][ T4622] tipc: Node identity de6425ffc834, cluster identity 4711 [ 96.185169][ T4622] tipc: Enabled bearer , priority 0 [ 96.204756][ T4622] tipc: Resetting bearer [ 96.214605][ T4621] tipc: Resetting bearer [ 96.239060][ T4625] FAULT_INJECTION: forcing a failure. [ 96.239060][ T4625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.245696][ T4621] tipc: Disabling bearer [ 96.258845][ T4188] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.268750][ T4625] CPU: 0 PID: 4625 Comm: syz.4.91 Not tainted syzkaller #0 [ 96.275989][ T4625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.286086][ T4625] Call Trace: [ 96.289390][ T4625] [ 96.292357][ T4625] dump_stack_lvl+0x188/0x250 [ 96.297069][ T4625] ? show_regs_print_info+0x20/0x20 [ 96.302298][ T4625] ? load_image+0x410/0x410 [ 96.306837][ T4625] ? __lock_acquire+0x7d40/0x7d40 [ 96.311904][ T4625] should_fail+0x383/0x4b0 [ 96.316360][ T4625] _copy_from_user+0x2e/0x170 [ 96.321069][ T4625] do_handle_open+0x1d2/0x880 [ 96.325777][ T4625] ? __ia32_compat_sys_open_by_handle_at+0x80/0x80 [ 96.332331][ T4625] ? lockdep_hardirqs_on+0x94/0x140 [ 96.337591][ T4625] do_syscall_64+0x4c/0xa0 [ 96.342060][ T4625] ? clear_bhb_loop+0x30/0x80 [ 96.346774][ T4625] ? clear_bhb_loop+0x30/0x80 [ 96.351483][ T4625] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.357406][ T4625] RIP: 0033:0x7fcca928a559 [ 96.361848][ T4625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.381574][ T4625] RSP: 002b:00007fcca74e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 96.390018][ T4625] RAX: ffffffffffffffda RBX: 00007fcca9511fa0 RCX: 00007fcca928a559 [ 96.398019][ T4625] RDX: 0000000000121101 RSI: 0000200000000a00 RDI: 0000000000000003 [ 96.406023][ T4625] RBP: 00007fcca9321ab8 R08: 0000000000000000 R09: 0000000000000000 [ 96.414165][ T4625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.424182][ T4625] R13: 00007fcca9512038 R14: 00007fcca9511fa0 R15: 00007ffdb6337528 [ 96.432220][ T4625] [ 96.470792][ T4188] usb 1-1: device descriptor read/64, error -71 [ 96.640619][ T13] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 96.649709][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.669665][ T13] usb 3-1: config 0 descriptor?? [ 96.740632][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.750994][ T4188] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.820627][ T1108] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.940576][ T4188] usb 1-1: device descriptor read/64, error -71 [ 96.980631][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 97.061223][ T4188] usb usb1-port1: attempt power cycle [ 97.080602][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 97.103500][ T23] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 97.116742][ T23] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 97.128531][ T23] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 97.141013][ T23] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 97.153055][ T23] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 97.168424][ T23] usb 2-1: config 168 interface 0 has no altsetting 0 [ 97.188313][ T13] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 97.198508][ T13] [drm] Initialized udl on minor 2 [ 97.210927][ T1108] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 97.219305][ T1108] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 97.236179][ T1108] usb 4-1: config 166 has no interface number 0 [ 97.242773][ T1108] usb 4-1: config 166 has no interface number 1 [ 97.249068][ T1108] usb 4-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 97.251290][ T23] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 97.268660][ T1108] usb 4-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 97.279842][ T1108] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 97.284863][ T23] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 97.291768][ T1108] usb 4-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 97.313253][ T1108] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 97.316630][ T23] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 97.324915][ T1108] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 97.346460][ T1108] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 97.354159][ T23] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 97.360682][ T1108] usb 4-1: config 166 interface 177 has no altsetting 0 [ 97.380185][ T1108] usb 4-1: config 166 interface 34 has no altsetting 0 [ 97.391159][ T23] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 97.405088][ T23] usb 2-1: config 168 interface 0 has no altsetting 0 [ 97.420784][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 97.430805][ T13] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 97.458934][ T13] usb 3-1: USB disconnect, device number 4 [ 97.466801][ T4261] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 97.480587][ T4188] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.490795][ T23] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 97.491835][ T4261] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 97.508446][ T23] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 97.520448][ T4261] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 97.533980][ T23] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 97.548118][ T23] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 97.566966][ T23] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 97.571543][ T1108] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 97.591568][ T23] usb 2-1: config 168 interface 0 has no altsetting 0 [ 97.598854][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.602242][ T4188] usb 1-1: device descriptor read/8, error -71 [ 97.609008][ T1108] usb 4-1: Product: syz [ 97.617523][ T1108] usb 4-1: Manufacturer: syz [ 97.623165][ T1108] usb 4-1: SerialNumber: syz [ 97.860677][ T23] usb 2-1: string descriptor 0 read error: -22 [ 97.866988][ T23] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 97.890567][ T4188] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 97.898188][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.911653][ T1108] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 97.962446][ T23] adutux 2-1:168.0: interrupt endpoints not found [ 97.980802][ T4188] usb 1-1: device descriptor read/8, error -71 [ 98.076202][ T4649] loop2: detected capacity change from 0 to 1024 [ 98.100831][ T4188] usb usb1-port1: unable to enumerate USB device [ 98.126848][ T1108] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 98.168283][ T4188] usb 2-1: USB disconnect, device number 3 [ 100.790778][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.540752][ T1108] usb 4-1: Found UVC 0.00 device syz (0bda:0138) [ 101.547210][ T1108] usb 4-1: No valid video chain found. [ 101.561405][ T1108] usb 4-1: USB disconnect, device number 3 [ 101.648809][ T4687] device syzkaller0 entered promiscuous mode [ 101.667740][ T4687] tipc: Enabled bearer , priority 0 [ 101.690820][ T21] usb 3-1: device descriptor read/64, error -71 [ 101.698048][ T4687] tipc: Resetting bearer [ 101.732178][ T4684] tipc: Resetting bearer [ 101.909150][ T4684] tipc: Disabling bearer [ 101.960952][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.181900][ T21] usb 3-1: device descriptor read/64, error -71 [ 102.311444][ T21] usb usb3-port1: attempt power cycle [ 102.531767][ T4711] mmap: syz.4.127 (4711) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 102.557142][ T26] audit: type=1326 audit(1792227911.633:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.4.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 102.653399][ T26] audit: type=1326 audit(1792227911.733:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.4.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 102.687990][ T26] audit: type=1326 audit(1792227911.763:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.4.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 102.717942][ T26] audit: type=1326 audit(1792227911.763:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.4.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 102.742984][ T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 102.840794][ T4264] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 103.149252][ T21] usb 3-1: device descriptor read/8, error -71 [ 103.456656][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.477714][ T26] audit: type=1326 audit(1792227911.763:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.4.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 103.505161][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.520813][ T26] audit: type=1326 audit(1792227911.763:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.4.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 103.588300][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.607509][ T4264] usb 1-1: Using ep0 maxpacket: 16 [ 103.635013][ T26] audit: type=1326 audit(1792227911.763:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.4.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 103.685396][ T26] audit: type=1326 audit(1792227911.773:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.4.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 103.750867][ T4264] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 103.778882][ T4264] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 103.787431][ T26] audit: type=1326 audit(1792227911.773:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.4.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 103.799617][ T4264] usb 1-1: config 166 has no interface number 0 [ 103.828368][ T4264] usb 1-1: config 166 has no interface number 1 [ 103.838555][ T4264] usb 1-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 103.855733][ T4264] usb 1-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 103.876148][ T4264] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 103.893000][ T4264] usb 1-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 103.908137][ T4264] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 103.918556][ T26] audit: type=1326 audit(1792227911.773:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4710 comm="syz.4.127" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 103.924410][ T4264] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 103.969400][ T4264] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 103.982845][ T4264] usb 1-1: config 166 interface 177 has no altsetting 0 [ 103.989821][ T4264] usb 1-1: config 166 interface 34 has no altsetting 0 [ 104.276361][ T4264] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 104.738899][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.747323][ T4264] usb 1-1: Product: syz [ 104.751572][ T4264] usb 1-1: Manufacturer: syz [ 104.756182][ T4264] usb 1-1: SerialNumber: syz [ 105.412170][ T4264] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 105.826827][ T4753] loop4: detected capacity change from 0 to 2048 [ 106.478210][ T4753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.354484][ T4261] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.570732][ T4261] usb 4-1: device descriptor read/64, error -71 [ 109.209439][ T4788] sched: RT throttling activated [ 110.870560][ T4261] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.947093][ T4264] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 111.831932][ T4819] tipc: Enabling of bearer rejected, failed to enable media [ 111.950877][ T4264] usb 1-1: Found UVC 0.00 device syz (0bda:0138) [ 111.961929][ T4264] usb 1-1: No valid video chain found. [ 112.008314][ T4264] usb 1-1: USB disconnect, device number 7 [ 112.053690][ T4823] loop2: detected capacity change from 0 to 2048 [ 112.168294][ T4823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.720605][ T4261] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 112.820595][ T13] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 112.860636][ T1108] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 112.990610][ T4261] usb 3-1: Using ep0 maxpacket: 16 [ 113.050993][ T1108] usb 4-1: device descriptor read/64, error -71 [ 113.111028][ T4261] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 113.130106][ T4261] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 113.159081][ T4261] usb 3-1: config 166 has no interface number 0 [ 113.250779][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.261618][ T4261] usb 3-1: config 166 has no interface number 1 [ 113.267977][ T4261] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 113.323730][ T13] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.333853][ T1108] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.346842][ T13] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 113.360395][ T4261] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 113.378417][ T4261] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 113.389855][ T4261] usb 3-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 113.407342][ T4261] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 114.181028][ T4261] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 114.191194][ T4261] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 114.205510][ T4261] usb 3-1: config 166 interface 177 has no altsetting 0 [ 114.212748][ T4261] usb 3-1: config 166 interface 34 has no altsetting 0 [ 114.241042][ T1108] usb 4-1: device descriptor read/64, error -71 [ 114.290758][ T13] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 114.323548][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.334756][ T13] usb 2-1: Product: syz [ 114.339047][ T13] usb 2-1: Manufacturer: syz [ 114.346504][ T13] usb 2-1: SerialNumber: syz [ 114.363094][ T1108] usb usb4-port1: attempt power cycle [ 114.380702][ T4261] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 114.390009][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.403045][ T4261] usb 3-1: Product: syz [ 114.407571][ T4261] usb 3-1: Manufacturer: syz [ 114.412262][ T4261] usb 3-1: SerialNumber: syz [ 114.621406][ T13] snd-usb-caiaq 2-1:1.0: invalid EPs [ 114.626835][ T13] usb 2-1: unable to init card! (ret=-22) [ 114.634112][ T13] snd-usb-caiaq: probe of 2-1:1.0 failed with error -22 [ 114.672486][ T4261] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 114.770796][ T1108] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 114.830038][ T21] usb 2-1: USB disconnect, device number 4 [ 114.860635][ T1108] usb 4-1: device descriptor read/8, error -71 [ 114.891507][ T4261] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 115.130837][ T1108] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 115.230801][ T1108] usb 4-1: device descriptor read/8, error -71 [ 115.280331][ T4866] tipc: Enabling of bearer rejected, failed to enable media [ 115.366477][ T1108] usb usb4-port1: unable to enumerate USB device [ 116.467069][ T4877] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.507036][ T4881] loop3: detected capacity change from 0 to 2048 [ 116.557466][ T4881] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.591780][ T4884] futex_wake_op: syz.4.164 tries to shift op by -1; fix this program [ 116.660810][ T4261] usb 3-1: Found UVC 0.00 device syz (0bda:0138) [ 116.695381][ T4261] usb 3-1: No valid video chain found. [ 116.740724][ T4261] usb 3-1: USB disconnect, device number 9 [ 116.755285][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 116.755297][ T26] audit: type=1326 audit(1792227925.833:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4875 comm="syz.4.164" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcca928a559 code=0x0 [ 116.800635][ T1108] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.878248][ T26] audit: type=1326 audit(1792227925.913:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.169" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 116.990329][ T4896] loop2: detected capacity change from 0 to 136 [ 117.001543][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.030789][ T26] audit: type=1326 audit(1792227925.913:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.169" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 117.054845][ T26] audit: type=1326 audit(1792227925.913:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.169" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 117.079753][ T26] audit: type=1326 audit(1792227925.913:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.169" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 117.104205][ T26] audit: type=1326 audit(1792227925.993:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.169" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 117.173211][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.183015][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.448009][ T26] audit: type=1326 audit(1792227925.993:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.169" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 117.474252][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.608887][ T1108] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 117.830558][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.893610][ T1108] usb 1-1: config 0 descriptor?? [ 117.908011][ T26] audit: type=1326 audit(1792227926.023:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.169" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 117.962630][ T26] audit: type=1326 audit(1792227926.023:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.169" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 117.992324][ T1108] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 118.000570][ T26] audit: type=1326 audit(1792227926.023:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.169" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 118.102387][ T4908] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.110346][ T4908] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.282829][ T4915] ip_tables: iptables: counters copy to user failed while replacing table [ 119.270361][ T4927] tipc: Enabling of bearer rejected, failed to enable media [ 119.479078][ T4939] futex_wake_op: syz.2.182 tries to shift op by -1; fix this program [ 119.540705][ T2098] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 119.543207][ T4261] usb 1-1: USB disconnect, device number 8 [ 119.650605][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.880771][ T2098] usb 4-1: Using ep0 maxpacket: 16 [ 120.110981][ T2098] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 120.156674][ T2098] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 120.221257][ T2098] usb 4-1: config 166 has no interface number 0 [ 120.258264][ T2098] usb 4-1: config 166 has no interface number 1 [ 120.366735][ T2098] usb 4-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 120.509535][ T2098] usb 4-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 120.527799][ T2098] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 120.539268][ T2098] usb 4-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 120.556280][ T2098] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 120.568075][ T2098] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 120.584341][ T2098] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 120.599206][ T2098] usb 4-1: config 166 interface 177 has no altsetting 0 [ 120.611299][ T2098] usb 4-1: config 166 interface 34 has no altsetting 0 [ 120.750582][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 120.870664][ T13] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 120.917015][ T2098] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 120.933821][ T2098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.943791][ T2098] usb 4-1: Product: syz [ 120.947986][ T2098] usb 4-1: Manufacturer: syz [ 120.953167][ T2098] usb 4-1: SerialNumber: syz [ 120.966663][ T13] usb 2-1: config 0 has no interface number 0 [ 122.101504][ T2098] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 122.125020][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 122.125051][ T26] audit: type=1326 audit(1792227931.203:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.4.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 122.190679][ T13] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 122.210564][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.218618][ T13] usb 2-1: Product: syz [ 122.220310][ T4966] tipc: Enabling of bearer rejected, failed to enable media [ 122.223244][ T13] usb 2-1: Manufacturer: syz [ 122.237656][ T13] usb 2-1: SerialNumber: syz [ 122.252147][ T13] usb 2-1: config 0 descriptor?? [ 122.272742][ T26] audit: type=1326 audit(1792227931.253:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.4.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 122.300993][ T13] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 122.319035][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.327606][ T2098] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 122.330692][ T26] audit: type=1326 audit(1792227931.253:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.4.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 122.360027][ T13] usb 2-1: selecting invalid altsetting 1 [ 122.374311][ T13] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 122.455192][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.463432][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.489586][ T26] audit: type=1326 audit(1792227931.253:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.4.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 122.577049][ T26] audit: type=1326 audit(1792227931.253:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.4.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 122.636345][ T13] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 122.647497][ T13] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 122.656305][ T13] usb 2-1: media controller created [ 122.672589][ T4925] udc-core: couldn't find an available UDC or it's busy [ 122.679576][ T4925] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 122.747940][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.760822][ T4991] futex_wake_op: syz.1.194 tries to shift op by -1; fix this program [ 122.769742][ T26] audit: type=1326 audit(1792227931.253:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.4.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 122.771463][ T4988] loop0: detected capacity change from 0 to 512 [ 122.926496][ T26] audit: type=1326 audit(1792227931.253:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.4.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 122.980629][ T13] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 122.990593][ T13] zl10353_read_register: readreg error (reg=127, ret==-71) [ 123.166244][ T13] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 123.421903][ T13] usb 2-1: USB disconnect, device number 5 [ 123.434558][ T26] audit: type=1326 audit(1792227931.253:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.4.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 123.750655][ T26] audit: type=1326 audit(1792227931.253:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.4.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 123.777233][ T4988] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.193: bg 0: block 5: invalid block bitmap [ 123.793794][ T4988] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 123.802890][ T4988] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.193: invalid indirect mapped block 3 (level 2) [ 123.816376][ T4988] EXT4-fs (loop0): 1 orphan inode deleted [ 123.822455][ T4988] EXT4-fs (loop0): 1 truncate cleaned up [ 123.828433][ T4988] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 123.843188][ T4988] EXT4-fs warning (device loop0): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 125.058625][ T26] audit: type=1326 audit(1792227931.253:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz.4.190" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 125.810563][ T4264] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 126.080914][ T2098] usb 4-1: Found UVC 0.00 device syz (0bda:0138) [ 126.090648][ T2098] usb 4-1: No valid video chain found. [ 126.109743][ T2098] usb 4-1: USB disconnect, device number 10 [ 126.135570][ T5043] tipc: Enabling of bearer rejected, failed to enable media [ 126.260729][ T4264] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.280674][ T4264] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 126.410691][ T4264] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 127.019384][ T4264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 127.027941][ T4264] usb 3-1: Product: syz [ 127.032631][ T4264] usb 3-1: Manufacturer: syz [ 127.038900][ T2098] Bluetooth: hci5: command 0x1003 tx timeout [ 127.046996][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 127.100646][ T4264] usb 3-1: can't set config #1, error -71 [ 127.111580][ T4264] usb 3-1: USB disconnect, device number 10 [ 127.132316][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 127.132329][ T26] audit: type=1326 audit(1792227936.213:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5051 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7dc99559 code=0x7ffc0000 [ 127.167555][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.187222][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.217222][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.230819][ T5056] futex_wake_op: syz.1.209 tries to shift op by -1; fix this program [ 127.258392][ T26] audit: type=1326 audit(1792227936.213:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5051 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a7dc99559 code=0x7ffc0000 [ 127.360203][ T26] audit: type=1326 audit(1792227936.213:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5051 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7dc99559 code=0x7ffc0000 [ 127.425894][ T26] audit: type=1326 audit(1792227936.213:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5051 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6a7dc99559 code=0x7ffc0000 [ 127.480594][ T26] audit: type=1326 audit(1792227936.213:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5051 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7dc99559 code=0x7ffc0000 [ 127.545207][ T26] audit: type=1326 audit(1792227936.243:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5051 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a7dc99559 code=0x7ffc0000 [ 127.623156][ T26] audit: type=1326 audit(1792227936.243:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5051 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7dc99559 code=0x7ffc0000 [ 127.658932][ T26] audit: type=1326 audit(1792227936.243:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5051 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6a7dc99559 code=0x7ffc0000 [ 127.693113][ T26] audit: type=1326 audit(1792227936.323:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5055 comm="syz.1.209" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39afbcc559 code=0x0 [ 127.737450][ T26] audit: type=1326 audit(1792227936.443:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5051 comm="syz.3.207" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7dc99559 code=0x7ffc0000 [ 128.949105][ T5085] device syzkaller0 entered promiscuous mode [ 128.959168][ T5085] tipc: Started in network mode [ 128.965732][ T5085] tipc: Node identity beabd78de89, cluster identity 4711 [ 128.974076][ T5085] tipc: Enabled bearer , priority 0 [ 129.000268][ T5085] tipc: Resetting bearer [ 129.013932][ T5084] tipc: Resetting bearer [ 129.037800][ T5084] tipc: Disabling bearer [ 129.116359][ T5094] syz.0.220 uses obsolete (PF_INET,SOCK_PACKET) [ 129.120870][ T4264] Bluetooth: hci5: command 0x1001 tx timeout [ 129.134738][ T4203] Bluetooth: hci5: sending frame failed (-49) [ 129.260643][ T4261] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.771928][ T4261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.782357][ T4261] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 130.800995][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.827171][ T4261] usb 2-1: config 0 descriptor?? [ 130.897894][ T5120] futex_wake_op: syz.0.228 tries to shift op by -1; fix this program [ 130.926842][ T4261] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 131.351092][ T4312] Bluetooth: hci5: command 0x1009 tx timeout [ 131.753963][ T5129] loop0: detected capacity change from 0 to 128 [ 132.563451][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.570189][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.743476][ T2098] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 132.766077][ T4188] usb 2-1: USB disconnect, device number 6 [ 132.818715][ T5132] ip_tables: iptables: counters copy to user failed while replacing table [ 132.990572][ T2098] usb 3-1: Using ep0 maxpacket: 32 [ 133.005959][ T5140] netlink: 56 bytes leftover after parsing attributes in process `syz.1.235'. [ 133.097251][ T5144] loop0: detected capacity change from 0 to 2048 [ 133.110685][ T2098] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 133.124900][ T2098] usb 3-1: config 0 has no interface number 0 [ 133.131304][ T2098] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 133.141498][ T2098] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.151502][ T2098] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 133.161563][ T2098] usb 3-1: config 0 interface 196 has no altsetting 0 [ 133.298793][ T5144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.180868][ T2098] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 134.189970][ T2098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.251490][ T5156] futex_wake_op: syz.1.241 tries to shift op by -1; fix this program [ 134.832453][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 134.832512][ T26] audit: type=1326 audit(1792227943.903:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5149 comm="syz.1.241" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39afbcc559 code=0x0 [ 135.052570][ T2098] usb 3-1: Product: syz [ 135.056795][ T2098] usb 3-1: Manufacturer: syz [ 135.061545][ T2098] usb 3-1: SerialNumber: syz [ 135.069367][ T2098] usb 3-1: config 0 descriptor?? [ 135.150985][ T2098] usb 3-1: can't set config #0, error -71 [ 135.186863][ T2098] usb 3-1: USB disconnect, device number 11 [ 135.287947][ T5175] loop0: detected capacity change from 0 to 128 [ 135.320217][ T26] audit: type=1326 audit(1792227944.393:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5169 comm="syz.4.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 135.403678][ T26] audit: type=1326 audit(1792227944.433:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5169 comm="syz.4.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 135.458677][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.487609][ T26] audit: type=1326 audit(1792227944.433:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5169 comm="syz.4.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 135.516436][ T5184] loop2: detected capacity change from 0 to 1024 [ 135.535460][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.675384][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.759897][ T5191] loop3: detected capacity change from 0 to 2048 [ 136.511406][ T5191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.893064][ T26] audit: type=1326 audit(1792227944.433:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5169 comm="syz.4.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 137.067998][ T26] audit: type=1326 audit(1792227944.433:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5169 comm="syz.4.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 137.092827][ T26] audit: type=1326 audit(1792227944.433:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5169 comm="syz.4.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 137.117334][ T26] audit: type=1326 audit(1792227944.433:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5169 comm="syz.4.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 137.141488][ T26] audit: type=1326 audit(1792227944.433:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5169 comm="syz.4.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 137.253550][ T26] audit: type=1326 audit(1792227944.433:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5169 comm="syz.4.244" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 139.038229][ T5219] futex_wake_op: syz.2.258 tries to shift op by -1; fix this program [ 139.421789][ T5241] loop3: detected capacity change from 0 to 128 [ 139.563284][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.656284][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.470866][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.637113][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 140.637164][ T26] audit: type=1326 audit(1792227949.713:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 141.219193][ T26] audit: type=1326 audit(1792227949.713:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 141.304539][ T5272] futex_wake_op: syz.2.278 tries to shift op by -1; fix this program [ 141.447840][ T26] audit: type=1326 audit(1792227949.783:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 141.476825][ T26] audit: type=1326 audit(1792227949.803:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 141.510735][ T26] audit: type=1326 audit(1792227949.813:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 142.076491][ T26] audit: type=1326 audit(1792227950.013:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 142.336393][ T26] audit: type=1326 audit(1792227950.013:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 142.361010][ T26] audit: type=1326 audit(1792227950.013:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 142.385697][ T26] audit: type=1326 audit(1792227950.013:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 142.409710][ T26] audit: type=1326 audit(1792227950.013:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.4.266" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca928a559 code=0x7ffc0000 [ 142.479095][ T5285] device syzkaller0 entered promiscuous mode [ 142.520283][ T5285] tipc: Enabled bearer , priority 0 [ 142.574879][ T5285] tipc: Resetting bearer [ 142.911790][ T5284] tipc: Resetting bearer [ 142.943283][ T5298] loop0: detected capacity change from 0 to 128 [ 142.950735][ T5284] tipc: Disabling bearer [ 143.073379][ T5301] netlink: 'syz.1.286': attribute type 5 has an invalid length. [ 143.140019][ T5303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 143.256690][ T5304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 143.269026][ T5304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 143.293539][ T4186] syz-executor (4186) used greatest stack depth: 20784 bytes left [ 143.849322][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.893668][ T5303] syz.2.288 (5303) used greatest stack depth: 20560 bytes left [ 144.172567][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.653525][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.848437][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.856090][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.972571][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.084336][ T5332] device syzkaller0 entered promiscuous mode [ 145.132197][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.146265][ T5325] rxe_eth0 speed is unknown, defaulting to 1000 [ 145.148427][ T5332] tipc: Started in network mode [ 145.158268][ T5332] tipc: Node identity 1aa5babd16c8, cluster identity 4711 [ 145.166576][ T5332] tipc: Enabled bearer , priority 0 [ 145.208707][ T5332] tipc: Resetting bearer [ 145.221101][ T5338] netlink: 'syz.3.300': attribute type 5 has an invalid length. [ 145.239478][ T5331] tipc: Resetting bearer [ 145.265562][ T5331] tipc: Disabling bearer [ 145.335535][ T2098] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 145.580559][ T2098] usb 1-1: Using ep0 maxpacket: 16 [ 145.723141][ T5325] chnl_net:caif_netlink_parms(): no params data found [ 145.741613][ T2098] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 145.777447][ T2098] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 145.802318][ T2098] usb 1-1: config 166 has no interface number 0 [ 145.826931][ T2098] usb 1-1: config 166 has no interface number 1 [ 145.860705][ T2098] usb 1-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 145.913065][ T2098] usb 1-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 145.981342][ T2098] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 146.019438][ T5357] loop2: detected capacity change from 0 to 128 [ 146.033418][ T2098] usb 1-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 146.089720][ T2098] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 146.107232][ T2098] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 146.119463][ T2098] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 146.158269][ T2098] usb 1-1: config 166 interface 177 has no altsetting 0 [ 146.184973][ T2098] usb 1-1: config 166 interface 34 has no altsetting 0 [ 146.362139][ T2098] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 146.411784][ T2098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.430745][ T2098] usb 1-1: Product: syz [ 146.434971][ T2098] usb 1-1: Manufacturer: syz [ 146.439589][ T2098] usb 1-1: SerialNumber: syz [ 146.660594][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 146.910117][ T5325] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.940361][ T5325] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.948819][ T2098] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 146.997489][ T5325] device bridge_slave_0 entered promiscuous mode [ 147.033558][ T5325] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.044721][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 147.070676][ T23] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 147.110875][ T5325] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.119073][ T5325] device bridge_slave_1 entered promiscuous mode [ 147.145613][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.223118][ T23] usb 4-1: config 0 descriptor?? [ 147.259771][ T2098] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 147.323302][ T23] cp210x 4-1:0.0: cp210x converter detected [ 147.467417][ T5334] udc-core: couldn't find an available UDC or it's busy [ 147.521529][ T5334] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 147.542836][ T23] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: 0 [ 147.594742][ T23] cp210x 4-1:0.0: querying part number failed [ 147.900749][ T23] usb 4-1: cp210x converter now attached to ttyUSB0 [ 147.951466][ T23] usb 4-1: USB disconnect, device number 11 [ 148.050904][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 148.178705][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 148.178719][ T26] audit: type=1326 audit(1792227957.253:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5382 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 148.210896][ T23] cp210x 4-1:0.0: device disconnected [ 148.275315][ T5325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.331398][ T5381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.307'. [ 148.335627][ T26] audit: type=1326 audit(1792227957.293:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5382 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 148.388710][ T5383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.307'. [ 148.440780][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.486061][ T26] audit: type=1326 audit(1792227957.293:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5382 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 148.489163][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.560103][ T26] audit: type=1326 audit(1792227957.293:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5382 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 148.617771][ T26] audit: type=1326 audit(1792227957.303:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5382 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 148.701463][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.733732][ T26] audit: type=1326 audit(1792227957.313:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5382 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 148.746673][ T5394] loop0: detected capacity change from 0 to 2048 [ 148.805744][ T5325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.855307][ T26] audit: type=1326 audit(1792227957.313:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5382 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 148.973087][ T26] audit: type=1326 audit(1792227957.313:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5382 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 149.028297][ T5325] team0: Port device team_slave_0 added [ 149.117086][ T5403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.312'. [ 149.128811][ T5325] team0: Port device team_slave_1 added [ 149.132644][ T4188] Bluetooth: hci0: command 0x041b tx timeout [ 149.142248][ T5408] netlink: 'syz.3.313': attribute type 5 has an invalid length. [ 149.163186][ T26] audit: type=1326 audit(1792227957.313:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5382 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 149.254690][ T5394] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,dioread_nolock,grpid,noload,data_err=ignore,,errors=continue. Quota mode: writeback. [ 149.301180][ T26] audit: type=1326 audit(1792227957.313:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5382 comm="syz.1.308" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39afbcc559 code=0x7ffc0000 [ 149.404648][ T5394] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.769007][ T5325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.783934][ T5417] vivid-004: ================= START STATUS ================= [ 149.832795][ T5325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.875711][ T5417] vivid-004: Radio HW Seek Mode: Bounded [ 149.919469][ T5417] vivid-004: Radio Programmable HW Seek: false [ 149.940868][ T5325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.962003][ T5417] vivid-004: RDS Rx I/O Mode: Block I/O [ 149.968736][ T5417] vivid-004: Generate RBDS Instead of RDS: false [ 149.975637][ T5417] vivid-004: RDS Reception: true [ 149.981197][ T5417] vivid-004: RDS Program Type: 0 inactive [ 149.987095][ T5417] vivid-004: RDS PS Name: inactive [ 149.992860][ T5417] vivid-004: RDS Radio Text: inactive [ 149.998498][ T5417] vivid-004: RDS Traffic Announcement: false inactive [ 150.022276][ T5417] vivid-004: RDS Traffic Program: false inactive [ 150.028746][ T5417] vivid-004: RDS Music: false inactive [ 150.035450][ T5417] vivid-004: ================== END STATUS ================== [ 150.119082][ T5325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.141268][ T5325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.392190][ T5325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.200713][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 151.340863][ T4312] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 151.348700][ T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 151.820665][ T4261] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 152.004503][ T5325] device hsr_slave_0 entered promiscuous mode [ 152.024194][ T5325] device hsr_slave_1 entered promiscuous mode [ 152.046302][ T5325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.067414][ T5325] Cannot create hsr debugfs directory [ 152.121246][ T4261] usb 2-1: Using ep0 maxpacket: 32 [ 152.210616][ T4312] usb 3-1: Using ep0 maxpacket: 16 [ 152.215955][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 152.257727][ T4261] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.280265][ T4261] usb 2-1: config 0 has no interface number 0 [ 152.331082][ T4312] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 152.340994][ T23] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 152.352192][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.362833][ T4312] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 152.393118][ T4312] usb 3-1: config 166 has no interface number 0 [ 152.413566][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.435642][ T4312] usb 3-1: config 166 has no interface number 1 [ 152.457723][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.471088][ T4261] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 152.471354][ T4312] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 152.491096][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.491121][ T4261] usb 2-1: Product: syz [ 152.491137][ T4261] usb 2-1: Manufacturer: syz [ 152.517236][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.537621][ T4312] usb 3-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 152.539245][ T4261] usb 2-1: SerialNumber: syz [ 152.549801][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 152.564705][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.576674][ T4312] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 152.596068][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.601221][ T4261] usb 2-1: config 0 descriptor?? [ 152.608012][ T4312] usb 3-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 152.622961][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.641855][ T4312] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 152.660216][ T2098] usb 1-1: Found UVC 0.00 device syz (0bda:0138) [ 152.667544][ T4312] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 152.676745][ T4261] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 152.678752][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.702241][ T2098] usb 1-1: No valid video chain found. [ 152.709988][ T4261] usb 2-1: selecting invalid altsetting 1 [ 152.726151][ T4261] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 152.736257][ T4312] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 152.769608][ T4261] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 152.785150][ T4312] usb 3-1: config 166 interface 177 has no altsetting 0 [ 152.794200][ T4312] usb 3-1: config 166 interface 34 has no altsetting 0 [ 152.821451][ T4261] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 152.829775][ T4261] usb 2-1: media controller created [ 152.960879][ T4312] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 152.969114][ T4261] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.007601][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.066738][ T4312] usb 3-1: Product: syz [ 153.082286][ T4312] usb 3-1: Manufacturer: syz [ 153.086946][ T4312] usb 3-1: SerialNumber: syz [ 153.200845][ T4261] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 153.207896][ T4261] zl10353_read_register: readreg error (reg=127, ret==-71) [ 153.265029][ T4261] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 153.280811][ T2098] Bluetooth: hci0: command 0x0419 tx timeout [ 153.301268][ T4312] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 153.338072][ T154] device hsr_slave_0 left promiscuous mode [ 153.358494][ T154] device hsr_slave_1 left promiscuous mode [ 153.405605][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.413122][ T4312] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 153.454271][ T4261] usb 2-1: USB disconnect, device number 7 [ 153.500866][ T4312] usb 3-1: Found UVC 0.00 device syz (0bda:0138) [ 153.510795][ T5474] usbtmc 4-1:16.0: simple usb_control_msg returned 0 [ 153.516235][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.534645][ T4312] usb 3-1: No valid video chain found. [ 153.559918][ T13] usb 1-1: USB disconnect, device number 9 [ 153.569067][ T4312] usb 3-1: USB disconnect, device number 12 [ 153.584557][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.598427][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.623007][ T154] device bridge_slave_1 left promiscuous mode [ 153.630600][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.715033][ T4188] usb 4-1: USB disconnect, device number 12 [ 153.718863][ T154] device bridge_slave_0 left promiscuous mode [ 153.727769][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.823968][ T154] device veth1_macvtap left promiscuous mode [ 153.837744][ T154] device veth0_macvtap left promiscuous mode [ 153.846735][ T154] device veth1_vlan left promiscuous mode [ 153.859850][ T154] device veth0_vlan left promiscuous mode [ 153.947611][ T5488] netlink: 'syz.0.325': attribute type 5 has an invalid length. [ 154.098349][ T154] team0 (unregistering): Port device team_slave_1 removed [ 154.114803][ T154] team0 (unregistering): Port device team_slave_0 removed [ 154.131018][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.148242][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.226297][ T154] bond0 (unregistering): Released all slaves [ 154.259890][ T5325] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.272529][ T5325] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.331230][ T5325] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.374163][ T5325] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.505324][ T5325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.531979][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.612157][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.665074][ T5325] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.699993][ T5503] netlink: 52 bytes leftover after parsing attributes in process `syz.1.330'. [ 154.767794][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.798299][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.037398][ T4578] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.044605][ T4578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.056774][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.074875][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.090376][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.105611][ T5510] loop0: detected capacity change from 0 to 512 [ 155.115536][ T4578] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.122667][ T4578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.141661][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.192004][ T5510] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 155.204006][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.236480][ T5510] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 155.272646][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.305283][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.401458][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.445122][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.467264][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.563065][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.587091][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.626242][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.657261][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.681365][ T4261] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 155.708695][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.898022][ T1108] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 155.933644][ T5538] device syzkaller0 entered promiscuous mode [ 156.023649][ T5545] process 'syz.0.340' launched './file1' with NULL argv: empty string added [ 156.040566][ T4261] usb 4-1: Using ep0 maxpacket: 16 [ 156.054701][ T5531] tipc: Enabled bearer , priority 0 [ 156.310984][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 156.370937][ T4261] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 156.404034][ T4261] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 156.460784][ T1108] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.470642][ T1108] usb 3-1: config 0 has no interface number 0 [ 156.476882][ T4261] usb 4-1: config 166 has no interface number 0 [ 156.513951][ T4261] usb 4-1: config 166 has no interface number 1 [ 156.550507][ T4261] usb 4-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 156.603523][ T4261] usb 4-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 156.645160][ T4261] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 156.666692][ T4261] usb 4-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 156.680848][ T1108] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 156.698744][ T4261] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 156.716583][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.725216][ T1108] usb 3-1: Product: syz [ 156.729411][ T1108] usb 3-1: Manufacturer: syz [ 156.740672][ T4261] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 156.756594][ T1108] usb 3-1: SerialNumber: syz [ 156.763203][ T4261] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 156.784425][ T1108] usb 3-1: config 0 descriptor?? [ 156.789754][ T4261] usb 4-1: config 166 interface 177 has no altsetting 0 [ 156.800727][ T4261] usb 4-1: config 166 interface 34 has no altsetting 0 [ 156.818682][ T5531] tipc: Resetting bearer [ 156.832709][ T1108] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 156.860022][ T1108] usb 3-1: selecting invalid altsetting 1 [ 156.877995][ T1108] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 156.975672][ T1108] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 157.001531][ T4261] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 157.016603][ T1108] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 157.030487][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.048956][ T1108] usb 3-1: media controller created [ 157.054504][ T4261] usb 4-1: Product: syz [ 157.058698][ T4261] usb 4-1: Manufacturer: syz [ 157.062467][ T5528] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 157.083924][ T4261] usb 4-1: SerialNumber: syz [ 157.096105][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.161114][ T5531] tipc: Disabling bearer [ 157.167374][ T1108] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 157.176525][ T1108] zl10353_read_register: readreg error (reg=127, ret==-71) [ 157.210146][ T1324] tipc: Node number set to 208517821 [ 157.216362][ T1108] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 157.261851][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.276191][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.310912][ T1108] usb 3-1: USB disconnect, device number 13 [ 157.317232][ T5325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.351481][ T4261] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 157.365513][ T5560] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.372942][ T5560] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.425097][ T5563] ip_tables: iptables: counters copy to user failed while replacing table [ 157.574951][ T4261] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 157.803227][ T5522] udc-core: couldn't find an available UDC or it's busy [ 157.830801][ T5522] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 158.157833][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 158.199851][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.332486][ T5609] loop2: detected capacity change from 0 to 2048 [ 158.505945][ T5609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.171930][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.213296][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.273019][ T5325] device veth0_vlan entered promiscuous mode [ 159.290944][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.328964][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.120955][ T5325] device veth1_vlan entered promiscuous mode [ 160.230674][ T4261] usb 4-1: Found UVC 0.00 device syz (0bda:0138) [ 160.240484][ T4261] usb 4-1: No valid video chain found. [ 160.279444][ T5325] device veth0_macvtap entered promiscuous mode [ 160.295700][ T4261] usb 4-1: USB disconnect, device number 13 [ 160.342758][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.390607][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.420623][ T5325] device veth1_macvtap entered promiscuous mode [ 160.441824][ T5624] ip_tables: iptables: counters copy to user failed while replacing table [ 160.474031][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.491268][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.527445][ T5325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.569136][ T5638] netlink: 'syz.1.364': attribute type 5 has an invalid length. [ 160.587853][ T5325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.611683][ T1324] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 160.634765][ T5325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.656575][ T5640] sctp: [Deprecated]: syz.0.365 (pid 5640) Use of int in max_burst socket option deprecated. [ 160.656575][ T5640] Use struct sctp_assoc_value instead [ 160.679734][ T5325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.694871][ T5325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.712093][ T5325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.727012][ T5325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.738168][ T5325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.785515][ T5325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.812173][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.838310][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.890588][ T5325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.930569][ T5325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.947897][ T5325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.158942][ T5325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.170763][ T5325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.182645][ T5325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.193746][ T1324] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.219282][ T1324] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 161.257685][ T5325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.527135][ T1324] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 161.539621][ T5325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.567971][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.585466][ T5325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.639548][ T5325] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.666276][ T1324] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 161.681819][ T5325] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.722628][ T5325] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.754462][ T5325] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.908394][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.919980][ T2098] usb 3-1: USB disconnect, device number 14 [ 161.940194][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.985093][ T5655] loop3: detected capacity change from 0 to 128 [ 162.070704][ T1324] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 162.095993][ T5660] tipc: Enabling of bearer rejected, failed to enable media [ 162.126495][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.160674][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.196071][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.227602][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.262578][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.282859][ T5192] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.335840][ T1324] usb 2-1: Using ep0 maxpacket: 16 [ 162.470912][ T1324] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 162.529312][ T1324] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 162.690103][ T5670] futex_wake_op: syz.5.290 tries to shift op by -1; fix this program [ 162.776755][ T1324] usb 2-1: config 166 has no interface number 0 [ 162.861659][ T1324] usb 2-1: config 166 has no interface number 1 [ 162.909778][ T1324] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 162.942946][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 162.942961][ T26] audit: type=1326 audit(1792227972.023:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5666 comm="syz.5.290" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94e8c21559 code=0x0 [ 163.003621][ T1324] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 163.070549][ T1324] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 163.129219][ T1324] usb 2-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 163.158512][ T1324] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 163.182731][ T1324] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 163.208229][ T1324] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 163.233512][ T1324] usb 2-1: config 166 interface 177 has no altsetting 0 [ 163.246757][ T1324] usb 2-1: config 166 interface 34 has no altsetting 0 [ 163.261458][ T5687] netlink: 'syz.0.377': attribute type 5 has an invalid length. [ 163.445855][ T1324] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 163.654887][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.663048][ T1324] usb 2-1: Product: syz [ 163.667237][ T1324] usb 2-1: Manufacturer: syz [ 163.680499][ T1324] usb 2-1: SerialNumber: syz [ 165.288960][ T5715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.382'. [ 165.332604][ T1324] usb 2-1: can't set config #166, error -71 [ 165.339848][ T1324] usb 2-1: USB disconnect, device number 8 [ 165.547923][ T5726] loop1: detected capacity change from 0 to 1024 [ 166.103073][ T5735] futex_wake_op: syz.2.389 tries to shift op by -1; fix this program [ 166.176786][ T26] audit: type=1326 audit(1792227975.253:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.2.389" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f521dfcb559 code=0x0 [ 166.213676][ T5744] ip_tables: iptables: counters copy to user failed while replacing table [ 166.258293][ T5747] netlink: 'syz.5.391': attribute type 5 has an invalid length. [ 166.490899][ T2098] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 166.860728][ T2098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.876309][ T2098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.895057][ T2098] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 166.911454][ T2098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.935588][ T2098] usb 2-1: config 0 descriptor?? [ 167.491047][ T2098] usbhid 2-1:0.0: can't add hid device: -71 [ 167.523978][ T2098] usbhid: probe of 2-1:0.0 failed with error -71 [ 167.685384][ T2098] usb 2-1: USB disconnect, device number 9 [ 168.074867][ T5777] loop3: detected capacity change from 0 to 128 [ 168.240803][ T4188] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 169.149367][ T23] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 169.270544][ T4188] usb 6-1: Using ep0 maxpacket: 16 [ 169.363636][ T5803] futex_wake_op: syz.3.403 tries to shift op by -1; fix this program [ 169.379449][ T26] audit: type=1326 audit(1792227978.453:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.3.403" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a7dc99559 code=0x0 [ 169.391102][ T4188] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 169.456613][ T4188] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 169.485760][ T4188] usb 6-1: config 166 has no interface number 0 [ 169.508302][ T4188] usb 6-1: config 166 has no interface number 1 [ 169.521410][ T4188] usb 6-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 169.532786][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.550552][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 169.570527][ T4188] usb 6-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 169.581668][ T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 169.600581][ T4188] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 169.611703][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.635004][ T4188] usb 6-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 169.656248][ T4188] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 169.689532][ T4188] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 169.711389][ T4188] usb 6-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 169.745155][ T4188] usb 6-1: config 166 interface 177 has no altsetting 0 [ 169.752792][ T4188] usb 6-1: config 166 interface 34 has no altsetting 0 [ 169.770604][ T23] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 169.779671][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 169.792551][ T23] usb 3-1: Product: syz [ 169.796744][ T23] usb 3-1: Manufacturer: syz [ 169.852107][ T23] mos7840 3-1:1.0: required endpoints missing [ 169.876664][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.884237][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.950818][ T4188] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 169.980659][ T4188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.994327][ T5821] ip_tables: iptables: counters copy to user failed while replacing table [ 170.003163][ T4188] usb 6-1: Product: syz [ 170.007376][ T4188] usb 6-1: Manufacturer: syz [ 170.015935][ T4188] usb 6-1: SerialNumber: syz [ 170.311519][ T4188] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 170.534857][ T4188] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 170.796649][ T5769] udc-core: couldn't find an available UDC or it's busy [ 170.809618][ T5769] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 171.165179][ T5857] loop1: detected capacity change from 0 to 128 [ 171.253381][ T23] usb 3-1: USB disconnect, device number 15 [ 172.298375][ T5865] futex_wake_op: syz.0.416 tries to shift op by -1; fix this program [ 172.308677][ T26] audit: type=1326 audit(1792227981.393:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.0.416" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39c2a93559 code=0x0 [ 173.841299][ T5896] netlink: 'syz.3.423': attribute type 5 has an invalid length. [ 174.171453][ T1324] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 174.570781][ T1324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.591919][ T5929] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 174.610881][ T1324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.642013][ T1324] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 174.680817][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.703929][ T1324] usb 2-1: config 0 descriptor?? [ 174.778847][ T5932] futex_wake_op: syz.2.435 tries to shift op by -1; fix this program [ 174.807976][ T26] audit: type=1326 audit(1792227983.883:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.2.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f521dfcb559 code=0x0 [ 175.441917][ T1324] usbhid 2-1:0.0: can't add hid device: -71 [ 175.448644][ T1324] usbhid: probe of 2-1:0.0 failed with error -71 [ 175.470756][ T1324] usb 2-1: USB disconnect, device number 10 [ 175.850728][ T4188] usb 6-1: Found UVC 0.00 device syz (0bda:0138) [ 175.857137][ T4188] usb 6-1: No valid video chain found. [ 176.044000][ T5966] loop2: detected capacity change from 0 to 1024 [ 176.281662][ T5963] loop3: detected capacity change from 0 to 2048 [ 176.413496][ T5963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.480784][ T5986] ip_tables: iptables: counters copy to user failed while replacing table [ 176.658844][ T5991] futex_wake_op: syz.1.458 tries to shift op by -1; fix this program [ 176.698478][ T26] audit: type=1326 audit(1792227985.773:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.1.458" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39afbcc559 code=0x0 [ 176.783819][ T6000] loop2: detected capacity change from 0 to 512 [ 176.945738][ T6000] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.462: bg 0: block 184: padding at end of block bitmap is not set [ 176.976322][ T6000] EXT4-fs (loop2): Remounting filesystem read-only [ 176.985606][ T6001] [ 176.987997][ T6001] ====================================================== [ 176.995032][ T6001] WARNING: possible circular locking dependency detected [ 177.002082][ T6001] syzkaller #0 Not tainted [ 177.004132][ T6000] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 177.006511][ T6001] ------------------------------------------------------ [ 177.006520][ T6001] syz.3.461/6001 is trying to acquire lock: [ 177.006531][ T6001] ffff8880794f9028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 177.030409][ T6000] EXT4-fs (loop2): Remounting filesystem read-only [ 177.039206][ T6001] [ 177.039206][ T6001] but task is already holding lock: [ 177.039214][ T6001] ffffffff8e4d7308 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 177.039266][ T6001] [ 177.039266][ T6001] which lock already depends on the new lock. [ 177.039266][ T6001] [ 177.039272][ T6001] [ 177.039272][ T6001] the existing dependency chain (in reverse order) is: [ 177.039279][ T6001] [ 177.039279][ T6001] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 177.039315][ T6001] __mutex_lock_common+0x1e5/0x2400 [ 177.039336][ T6001] mutex_lock_nested+0x17/0x20 [ 177.039372][ T6001] rfkill_register+0x2f/0x970 [ 177.039389][ T6001] hci_register_dev+0x459/0x980 [ 177.039411][ T6001] vhci_create_device+0x32e/0x5c0 [ 177.039432][ T6001] vhci_write+0x389/0x440 [ 177.039451][ T6001] vfs_write+0x748/0xd70 [ 177.039470][ T6001] ksys_write+0x153/0x260 [ 177.039487][ T6001] do_syscall_64+0x4c/0xa0 [ 177.039507][ T6001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.039530][ T6001] [ 177.039530][ T6001] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 177.039559][ T6001] __mutex_lock_common+0x1e5/0x2400 [ 177.039577][ T6001] mutex_lock_nested+0x17/0x20 [ 177.039603][ T6001] vhci_send_frame+0x88/0x100 [ 177.039623][ T6001] hci_send_frame+0x1a9/0x2e0 [ 177.039645][ T6001] hci_tx_work+0x9b5/0x16d0 [ 177.039665][ T6001] process_one_work+0x867/0xff0 [ 177.039686][ T6001] worker_thread+0xad7/0x12a0 [ 177.039706][ T6001] kthread+0x42e/0x520 [ 177.039722][ T6001] ret_from_fork+0x1f/0x30 [ 177.039742][ T6001] [ 177.039742][ T6001] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 177.039772][ T6001] __flush_work+0x116/0x210 [ 177.039789][ T6001] hci_dev_do_open+0xc77/0x12a0 [ 177.039809][ T6001] hci_power_on+0x1a7/0x5f0 [ 177.039830][ T6001] process_one_work+0x867/0xff0 [ 177.039849][ T6001] worker_thread+0xad7/0x12a0 [ 177.039868][ T6001] kthread+0x42e/0x520 [ 177.055410][ T6000] EXT4-fs (loop2): 1 truncate cleaned up [ 177.063377][ T6001] ret_from_fork+0x1f/0x30 [ 177.063404][ T6001] [ 177.063404][ T6001] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 177.063436][ T6001] __mutex_lock_common+0x1e5/0x2400 [ 177.063457][ T6001] mutex_lock_nested+0x17/0x20 [ 177.090216][ T6000] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,minixdf,. Quota mode: writeback. [ 177.090851][ T6001] bg_scan_update+0x44/0x3b0 [ 177.090880][ T6001] process_one_work+0x867/0xff0 [ 177.090901][ T6001] worker_thread+0xad7/0x12a0 [ 177.090921][ T6001] kthread+0x42e/0x520 [ 177.090938][ T6001] ret_from_fork+0x1f/0x30 [ 177.090957][ T6001] [ 177.090957][ T6001] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 177.090987][ T6001] __lock_acquire+0x38f7/0x7d40 [ 177.091009][ T6001] lock_acquire+0x19f/0x400 [ 177.091029][ T6001] __flush_work+0x116/0x210 [ 177.091044][ T6001] __cancel_work_timer+0x3f4/0x560 [ 177.091062][ T6001] hci_request_cancel_all+0xcc/0x300 [ 177.091083][ T6001] hci_dev_do_close+0x4e/0x1020 [ 177.091102][ T6001] hci_rfkill_set_block+0x101/0x180 [ 177.105645][ T6000] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.107311][ T6001] rfkill_set_block+0x1c1/0x3c0 [ 177.107340][ T6001] rfkill_fop_write+0x453/0x560 [ 177.314963][ T6016] loop5: detected capacity change from 0 to 1024 [ 177.319891][ T6001] vfs_write+0x304/0xd70 [ 177.319929][ T6001] ksys_write+0x153/0x260 [ 177.319945][ T6001] do_syscall_64+0x4c/0xa0 [ 177.394591][ T6001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.401038][ T6001] [ 177.401038][ T6001] other info that might help us debug this: [ 177.401038][ T6001] [ 177.411286][ T6001] Chain exists of: [ 177.411286][ T6001] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 177.411286][ T6001] [ 177.427075][ T6001] Possible unsafe locking scenario: [ 177.427075][ T6001] [ 177.434539][ T6001] CPU0 CPU1 [ 177.439897][ T6001] ---- ---- [ 177.445256][ T6001] lock(rfkill_global_mutex); [ 177.450038][ T6001] lock(&data->open_mutex); [ 177.457142][ T6001] lock(rfkill_global_mutex); [ 177.464427][ T6001] lock((work_completion)(&hdev->bg_scan_update)); [ 177.471008][ T6001] [ 177.471008][ T6001] *** DEADLOCK *** [ 177.471008][ T6001] [ 177.479159][ T6001] 1 lock held by syz.3.461/6001: [ 177.484091][ T6001] #0: ffffffff8e4d7308 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 177.494180][ T6001] [ 177.494180][ T6001] stack backtrace: [ 177.500085][ T6001] CPU: 1 PID: 6001 Comm: syz.3.461 Not tainted syzkaller #0 [ 177.507368][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 177.517419][ T6001] Call Trace: [ 177.520701][ T6001] [ 177.523646][ T6001] dump_stack_lvl+0x188/0x250 [ 177.528466][ T6001] ? load_image+0x410/0x410 [ 177.532997][ T6001] ? show_regs_print_info+0x20/0x20 [ 177.538201][ T6001] ? print_circular_bug+0x12b/0x1a0 [ 177.543412][ T6001] check_noncircular+0x2f8/0x400 [ 177.548377][ T6001] ? look_up_lock_class+0x71/0x110 [ 177.553505][ T6001] ? print_deadlock_bug+0x5d0/0x5d0 [ 177.558716][ T6001] ? lockdep_lock+0xf1/0x1f0 [ 177.563304][ T6001] ? __lock_acquire+0x12df/0x7d40 [ 177.568342][ T6001] ? mark_lock+0x94/0x320 [ 177.572681][ T6001] ? _find_first_zero_bit+0xd1/0xf0 [ 177.577879][ T6001] __lock_acquire+0x38f7/0x7d40 [ 177.582745][ T6001] ? verify_lock_unused+0x140/0x140 [ 177.587947][ T6001] ? verify_lock_unused+0x140/0x140 [ 177.593152][ T6001] lock_acquire+0x19f/0x400 [ 177.597685][ T6001] ? __flush_work+0xfa/0x210 [ 177.602277][ T6001] ? __lock_acquire+0x7d40/0x7d40 [ 177.607329][ T6001] ? read_lock_is_recursive+0x10/0x10 [ 177.612701][ T6001] ? start_flush_work+0x784/0x830 [ 177.617734][ T6001] __flush_work+0x116/0x210 [ 177.622250][ T6001] ? __flush_work+0xfa/0x210 [ 177.626841][ T6001] ? flush_work+0x20/0x20 [ 177.631167][ T6001] ? try_to_grab_pending+0xfb/0x820 [ 177.636364][ T6001] ? mark_lock+0x94/0x320 [ 177.640697][ T6001] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 177.646716][ T6001] ? lock_chain_count+0x20/0x20 [ 177.651602][ T6001] ? mark_lock+0x94/0x320 [ 177.655932][ T6001] ? __cancel_work_timer+0x36a/0x560 [ 177.661215][ T6001] __cancel_work_timer+0x3f4/0x560 [ 177.666329][ T6001] ? cancel_work_sync+0x20/0x20 [ 177.671184][ T6001] ? __cancel_work+0x1f9/0x2e0 [ 177.675959][ T6001] ? lockdep_hardirqs_on+0x94/0x140 [ 177.681159][ T6001] ? __cancel_work+0x27b/0x2e0 [ 177.685922][ T6001] ? cancel_work+0x20/0x20 [ 177.690343][ T6001] hci_request_cancel_all+0xcc/0x300 [ 177.695653][ T6001] hci_dev_do_close+0x4e/0x1020 [ 177.700540][ T6001] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 177.706483][ T6001] ? _raw_spin_unlock+0x40/0x40 [ 177.711356][ T6001] hci_rfkill_set_block+0x101/0x180 [ 177.716555][ T6001] ? rcu_lock_release+0x20/0x20 [ 177.721431][ T6001] rfkill_set_block+0x1c1/0x3c0 [ 177.726286][ T6001] rfkill_fop_write+0x453/0x560 [ 177.731140][ T6001] ? rfkill_fop_read+0x560/0x560 [ 177.736095][ T6001] ? common_file_perm+0x160/0x1c0 [ 177.741120][ T6001] ? fsnotify_perm+0x5d/0x560 [ 177.745814][ T6001] ? security_file_permission+0x75/0xa0 [ 177.751491][ T6001] ? rfkill_fop_read+0x560/0x560 [ 177.756430][ T6001] vfs_write+0x304/0xd70 [ 177.760681][ T6001] ? file_end_write+0x250/0x250 [ 177.765547][ T6001] ? __fget_files+0x402/0x470 [ 177.770229][ T6001] ? __fdget_pos+0x1e2/0x370 [ 177.774827][ T6001] ? ksys_write+0x70/0x260 [ 177.779269][ T6001] ksys_write+0x153/0x260 [ 177.783611][ T6001] ? __ia32_sys_read+0x80/0x80 [ 177.788372][ T6001] ? lockdep_hardirqs_on+0x94/0x140 [ 177.793577][ T6001] do_syscall_64+0x4c/0xa0 [ 177.798015][ T6001] ? clear_bhb_loop+0x30/0x80 [ 177.802693][ T6001] ? clear_bhb_loop+0x30/0x80 [ 177.807367][ T6001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.813260][ T6001] RIP: 0033:0x7f6a7dc99559 [ 177.817672][ T6001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.837287][ T6001] RSP: 002b:00007f6a7bef1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.845702][ T6001] RAX: ffffffffffffffda RBX: 00007f6a7df20fa0 RCX: 00007f6a7dc99559 [ 177.853673][ T6001] RDX: 0000000000000008 RSI: 00002000000005c0 RDI: 0000000000000003 [ 177.861640][ T6001] RBP: 00007f6a7dd30ab8 R08: 0000000000000000 R09: 0000000000000000 [ 177.869627][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.877607][ T6001] R13: 00007f6a7df21038 R14: 00007f6a7df20fa0 R15: 00007ffdc1b55c28 [ 177.885584][ T6001] [ 178.147564][ T2098] usb 6-1: USB disconnect, device number 2