last executing test programs: 34.559746652s ago: executing program 0 (id=693): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x28014a0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, 0x0, 0x200) 32.52791079s ago: executing program 0 (id=698): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000600)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000680), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000580)={0x0, 0x6}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000700)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000780)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000840), 0x10106, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000008c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000900), 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000940)={0x2, &(0x7f0000000980)=[{0x40, 0x0, 0x7, 0x100}, {0x6, 0x9, 0x9, 0x10001}]}, 0x10) 31.498957205s ago: executing program 0 (id=706): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200002, &(0x7f0000000440)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f00000006c0)="$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") r0 = open(&(0x7f00000002c0)='./file1\x00', 0x4827e, 0x1bb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) mmap(&(0x7f00005ff000/0x4000)=nil, 0x4000, 0xc, 0x30, r0, 0xaf402000) r4 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x1f5) fchown(r4, 0x0, 0xee01) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000640)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r5}, @map_fd]}, &(0x7f0000000680)='GPL\x00', 0x7, 0xea, &(0x7f0000000c40)=""/229, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffef1}, 0x23) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000300)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000380)={r6, 0x0, &(0x7f0000001b40)=""/4096}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002b40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002b80)='./proc\x00', &(0x7f0000002bc0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) sendfile(r7, r7, 0x0, 0x6fecb1) 29.22391384s ago: executing program 0 (id=713): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000700)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000800), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) close(r2) r3 = epoll_create1(0x0) poll(&(0x7f0000000980)=[{r3, 0x251}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000a00)) shutdown(r4, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000a40)={0x2000200b}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000b40), 0x64) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x56, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1fd) 28.091122256s ago: executing program 0 (id=719): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x11, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x580d9462, 0x0, 0x0, 0x0, 0x58b}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x7, 0xa, 0x9, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff4, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xaf}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfef, &(0x7f0000001cc0)=""/4079, 0x41100, 0x22}, 0x94) 27.999887779s ago: executing program 0 (id=721): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="130000001000000002"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000898500000071000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x7b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="5aed41deb03e9eee28e622e573a3", 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000640)) 21.596536603s ago: executing program 2 (id=737): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) listxattr(&(0x7f0000000380)='./file1\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', 0x3a) pipe2$9p(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000d00)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000d40)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x14000, &(0x7f0000000e00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000e40)='./file0\x00') r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000ec0)='.\x00', 0x2) 20.968108227s ago: executing program 2 (id=741): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200002, &(0x7f0000000440)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f00000006c0)="$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") r0 = open(&(0x7f00000002c0)='./file1\x00', 0x4827e, 0x1bb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mmap(&(0x7f00005ff000/0x4000)=nil, 0x4000, 0xc, 0x30, r0, 0xaf402000) r3 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x1f5) fchown(r3, 0x0, 0xee01) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000640)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r4}, @map_fd]}, &(0x7f0000000680)='GPL\x00', 0x7, 0xea, &(0x7f0000000c40)=""/229, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffef1}, 0x23) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000300)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000380)={r5, 0x0, &(0x7f0000001b40)=""/4096}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002b40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002b80)='./proc\x00', &(0x7f0000002bc0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) sendfile(r6, r6, 0x0, 0x6fecb1) 10.649846135s ago: executing program 32 (id=721): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="130000001000000002"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000898500000071000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x7b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="5aed41deb03e9eee28e622e573a3", 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000640)) 8.77017614s ago: executing program 2 (id=769): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a37d3b31", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)='G)', 0x2}], 0x1}}], 0x3, 0x4040881) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") 7.869069432s ago: executing program 2 (id=771): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x6c0000, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) setpgid(r0, r4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002100)=0x40) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000080)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x2000, 0x24000, 0x10000e}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200040fe}, 0x40000) 6.997065442s ago: executing program 2 (id=777): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, 0x0) listen(r0, 0x200d3) 6.756431008s ago: executing program 2 (id=778): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200002, &(0x7f0000000440)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f00000006c0)="$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") r0 = open(&(0x7f00000002c0)='./file1\x00', 0x4827e, 0x1bb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mmap(&(0x7f00005ff000/0x4000)=nil, 0x4000, 0xc, 0x30, r0, 0xaf402000) r3 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x1f5) fchown(r3, 0x0, 0xee01) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000640)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r4}, @map_fd]}, &(0x7f0000000680)='GPL\x00', 0x7, 0xea, &(0x7f0000000c40)=""/229, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffef1}, 0x23) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000300)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000380)={r5, 0x0, &(0x7f0000001b40)=""/4096}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002b40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002b80)='./proc\x00', &(0x7f0000002bc0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) sendfile(r6, r6, 0x0, 0x6fecb1) 4.839951064s ago: executing program 3 (id=792): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000700)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000800), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000000000280f828"], 0x50) close(r2) r3 = epoll_create1(0x0) poll(&(0x7f0000000980)=[{r3, 0x251}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000a00)) shutdown(r4, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000a40)={0x2000200b}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000b40), 0x64) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x56, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1fd) 3.034138928s ago: executing program 4 (id=797): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000a40)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x14, 0x3, 0x1b5c, 0xc10, 0x0, 0x0, "05010900a101150026ff007508951009008102c0"}}, 0x12c) write$UHID_INPUT2(r0, &(0x7f0000000a00)={0xc, {0x3, '\x00\x00\x00'}}, 0x9) 3.009147918s ago: executing program 3 (id=798): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x94, 0x24, 0x601, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x94b]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 2.853602682s ago: executing program 4 (id=799): semop(0x0, &(0x7f0000000480)=[{0x0, 0x7ffe, 0x1800}], 0x1) 2.836591782s ago: executing program 4 (id=800): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x40}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 2.784785163s ago: executing program 3 (id=801): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000600)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r0, &(0x7f0000000680), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000580)={0x0, 0x6}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000700)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000780)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000840), 0x10106, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000008c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000900), 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000940)={0x2, &(0x7f0000000980)=[{0x40, 0x0, 0x7, 0x100}, {0x6, 0x9, 0x9, 0x10001}]}, 0x10) 2.685785376s ago: executing program 4 (id=803): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x10, 0x17, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000012c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.584027078s ago: executing program 4 (id=804): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000440), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x4, &(0x7f0000000780)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x14}, [@ldst={0x4}]}, &(0x7f00000007c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48) r4 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x1c9a82, 0x38) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000040)={&(0x7f0000000080)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x600}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000500)={0x0, 0xfffffff5, &(0x7f0000000540)=[{&(0x7f0000000580)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_SET_SUINFO(r7, 0x40186e8d, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, r8, 0x1, 0x8000, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x44) sendfile(r4, r0, 0x0, 0xbc44) 2.228021847s ago: executing program 1 (id=805): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10) 1.954531633s ago: executing program 1 (id=806): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000240)={0xfc, {"a2336848149e516d4b5e071887f70e09d0381edd7fc6e5539b0d430a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbac5c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 1.764418498s ago: executing program 1 (id=807): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000700)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000800), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000000000280f828"], 0x50) close(r2) r3 = epoll_create1(0x0) poll(&(0x7f0000000980)=[{r3, 0x251}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000a00)) shutdown(r4, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000a40)={0x2000200b}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000b40), 0x64) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x56, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1fd) 1.656036001s ago: executing program 3 (id=808): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x4040881) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$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") 691.267544ms ago: executing program 4 (id=809): r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x84, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x6, 0xd0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x81, 0x6, {0x7, 0x25, 0x1, 0x8, 0x81, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x7e, 0x0, 0x7, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x5, 0x7, 0x1, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x0, 0xb9, {0x7, 0x25, 0x1, 0xc, 0x8, 0x800}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000004c0)=0x7) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000640), 0x651, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) 504.513438ms ago: executing program 1 (id=810): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001280)=""/236, 0xec}, {&(0x7f0000001980)=""/4090, 0xffa}, {&(0x7f0000002980)=""/241, 0xf1}, {&(0x7f0000002a80)=""/4095, 0xfff}, {&(0x7f0000003a80)=""/146, 0x92}, {&(0x7f0000003b40)=""/182, 0xb6}, {&(0x7f0000003c00)=""/221, 0xdd}], 0x7}, 0x40000000) recvmsg$kcm(r0, &(0x7f0000003d00)={0x0, 0xffc3, 0x0}, 0x80) 335.834053ms ago: executing program 3 (id=811): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000009c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000a40)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000000ac0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000b00)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000b80)=[{r2, 0x3328}], 0x1, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r3, &(0x7f0000000c40), 0x10106, 0x2, 0x0) 144.192857ms ago: executing program 1 (id=812): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x5, @loopback, 0x3}, 0x64) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 84.402348ms ago: executing program 3 (id=813): r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x84, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1235, 0x8201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x6, 0xd0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x1, 0x81, 0x6, {0x7, 0x25, 0x1, 0x8, 0x81, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x7e, 0x0, 0x7, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x5, 0x7, 0x1, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x0, 0xb9, {0x7, 0x25, 0x1, 0xc, 0x8, 0x800}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xa, 0x400000000008d}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000004c0)=0x7) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0xa, 0x3, 0xff) connect$unix(r2, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000680), 0x4000087, 0x2, 0x0) mlockall(0x7) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000300)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'wg0\x00'}) 0s ago: executing program 1 (id=814): capset(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): e performance. Setting the MTU to 1560 would solve the problem. [ 54.501559][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.513913][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.520855][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.546791][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.589113][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.596148][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.622201][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.636826][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.643877][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.669757][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.712755][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.719703][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.745988][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.760081][ T4198] device hsr_slave_0 entered promiscuous mode [ 54.767282][ T4198] device hsr_slave_1 entered promiscuous mode [ 54.774070][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.781605][ T4198] Cannot create hsr debugfs directory [ 54.803577][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.810520][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.837516][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.903510][ T4185] device hsr_slave_0 entered promiscuous mode [ 54.910092][ T4185] device hsr_slave_1 entered promiscuous mode [ 54.917130][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.924808][ T4185] Cannot create hsr debugfs directory [ 54.973123][ T4191] device hsr_slave_0 entered promiscuous mode [ 54.979717][ T4191] device hsr_slave_1 entered promiscuous mode [ 54.986540][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.994309][ T4191] Cannot create hsr debugfs directory [ 55.163361][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 55.169922][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 55.172626][ T4174] Bluetooth: hci4: command 0x0409 tx timeout [ 55.178180][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 55.181898][ T4174] Bluetooth: hci1: command 0x0409 tx timeout [ 55.210032][ T4189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.221138][ T4189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.229999][ T4189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.241834][ T4189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.275665][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.287029][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.296438][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.314766][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.374527][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.384413][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.408141][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.417438][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.454493][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.487916][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.506495][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.518330][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.525468][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.541191][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.551773][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.563772][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.572252][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.581409][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.588599][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.597879][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.621051][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.631914][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.640466][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.649458][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.658169][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.665270][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.673381][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.680991][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.689243][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.701926][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.735280][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.745464][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.754468][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.763485][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.770528][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.778245][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.786874][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.797748][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.804829][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.812921][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.821319][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.829790][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.839432][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.848089][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.856218][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.868441][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.884820][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.900861][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.912178][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.944409][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.958437][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.972360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.984145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.992372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.000976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.010426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.019262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.027975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.038306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.046595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.054939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.063300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.071450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.080060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.091112][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.101660][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.110753][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.138675][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.158445][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.171495][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.209923][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.228224][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.241980][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.249050][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.258604][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.267254][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.277005][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.284083][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.291881][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.311403][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.321806][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.356067][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.365888][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.379358][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.389482][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.412186][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.423469][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.431188][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.443735][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.451339][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.459967][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.483572][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.504002][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.516896][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.525518][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.533934][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.541970][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.551068][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.560376][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.567443][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.575492][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.583863][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.591234][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.598956][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.606679][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.621717][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.634584][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.667615][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.688194][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.700233][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.712499][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.719563][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.728205][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.736875][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.745435][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.754839][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.766431][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.776148][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.803775][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.811262][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.822956][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.831610][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.841083][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.849618][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.858470][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.867257][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.880198][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.891505][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.900733][ T4189] device veth0_vlan entered promiscuous mode [ 56.915299][ T4189] device veth1_vlan entered promiscuous mode [ 56.928047][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.936301][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.945847][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.954476][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.962839][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.969876][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.977778][ T1338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.001719][ T4189] device veth0_macvtap entered promiscuous mode [ 57.014472][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.023629][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.031844][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.042931][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.050971][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.059722][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.068430][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.077075][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.086654][ T439] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.093733][ T439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.101445][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.109778][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.118159][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.129222][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.136909][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.154283][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.165880][ T4189] device veth1_macvtap entered promiscuous mode [ 57.175081][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.187769][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.201416][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.216933][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.228041][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.238901][ T4186] device veth0_vlan entered promiscuous mode [ 57.243207][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 57.251006][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 57.257781][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 57.265064][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 57.265250][ T4186] device veth1_vlan entered promiscuous mode [ 57.271110][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 57.304436][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.312398][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.320441][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.329843][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.338299][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.346858][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.355319][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.377161][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.396198][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.411439][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.421020][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.435360][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.449154][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.457722][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.466365][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.475114][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.483896][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.506609][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.527656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.536414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.545968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.557017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.568915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.577258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.586922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.595538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.604324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.612044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.622195][ T4186] device veth0_macvtap entered promiscuous mode [ 57.631832][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.641470][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.650519][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.659326][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.678019][ T4198] device veth0_vlan entered promiscuous mode [ 57.688365][ T4186] device veth1_macvtap entered promiscuous mode [ 57.711106][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.723372][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.730806][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.755830][ T4198] device veth1_vlan entered promiscuous mode [ 57.765652][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.781879][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.800543][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.818237][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.828418][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.839325][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.856807][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.869324][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.882126][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.894735][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.908525][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.932040][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.947929][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.956901][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.966093][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.000648][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.015054][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.036479][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.047817][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.072967][ T4198] device veth0_macvtap entered promiscuous mode [ 58.122226][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.123412][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.133788][ T4198] device veth1_macvtap entered promiscuous mode [ 58.152039][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.179313][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.187855][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.196084][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.205774][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.214446][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.248489][ T439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.252098][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.266076][ T439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.271971][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.285463][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.289317][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.303108][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.313815][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.324884][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.334997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.343006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.350634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.359247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.368683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.383488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.398466][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.407065][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.416539][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.424614][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.438938][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.450680][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.461369][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.471997][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.484646][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.499385][ T4185] device veth0_vlan entered promiscuous mode [ 58.507898][ T4191] device veth0_vlan entered promiscuous mode [ 58.517304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.525908][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.540523][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.541148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.556345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.566159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.574726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.583244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.590949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.606686][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.616449][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.625465][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.634697][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.666259][ T4185] device veth1_vlan entered promiscuous mode [ 58.680741][ T4191] device veth1_vlan entered promiscuous mode [ 58.793508][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.807604][ T4267] ODEBUG: Out of memory. ODEBUG disabled [ 58.814188][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.830083][ T25] audit: type=1326 audit(1791961258.526:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4264 comm="syz.2.3" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3104b2a2d9 code=0x0 [ 58.860191][ T4185] device veth0_macvtap entered promiscuous mode [ 58.888862][ T4185] device veth1_macvtap entered promiscuous mode [ 58.924651][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.939501][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.954419][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.969022][ T4191] device veth0_macvtap entered promiscuous mode [ 58.997220][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.029243][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.040021][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.051464][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.062362][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.073533][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.094111][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.123536][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.134739][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.153828][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.171326][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.195570][ T4191] device veth1_macvtap entered promiscuous mode [ 59.208686][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.224605][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.237066][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.257141][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.277213][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.297943][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.312674][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.334990][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.340754][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 59.349613][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.351273][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 59.390784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.392847][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 59.407929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.431787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.432899][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 59.450051][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 59.451287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.496703][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.515131][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.524371][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.533560][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.575864][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.587784][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.625272][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.635194][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.643604][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.654413][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.664270][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.682622][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.709885][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.713280][ T4267] syz.1.2 (4267): drop_caches: 2 [ 59.720903][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.739184][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.766303][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.785126][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.801604][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.828677][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.849713][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.860098][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.876866][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.888323][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.899866][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.910031][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.922142][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.935018][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.965182][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.974027][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.002918][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.018809][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.023863][ T4281] FAULT_INJECTION: forcing a failure. [ 60.023863][ T4281] name failslab, interval 1, probability 0, space 0, times 1 [ 60.056549][ T4281] CPU: 1 PID: 4281 Comm: syz.2.10 Not tainted syzkaller #0 [ 60.057911][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.063760][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 60.063785][ T4281] Call Trace: [ 60.063792][ T4281] [ 60.063799][ T4281] dump_stack_lvl+0x188/0x250 [ 60.063835][ T4281] ? show_regs_print_info+0x20/0x20 [ 60.063854][ T4281] ? load_image+0x410/0x410 [ 60.063875][ T4281] ? __might_sleep+0xf0/0xf0 [ 60.077783][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.081923][ T4281] ? __lock_acquire+0x7d40/0x7d40 [ 60.120062][ T4281] should_fail+0x383/0x4b0 [ 60.124501][ T4281] should_failslab+0x5/0x20 [ 60.129010][ T4281] slab_pre_alloc_hook+0x51/0xc0 [ 60.133954][ T4281] kmem_cache_alloc_trace+0x47/0x290 [ 60.139247][ T4281] ? create_filter_start+0x144/0x2c0 [ 60.144543][ T4281] create_filter_start+0x144/0x2c0 [ 60.149662][ T4281] apply_subsystem_event_filter+0x1c2/0x16b0 [ 60.155653][ T4281] ? __lock_acquire+0x7d40/0x7d40 [ 60.160691][ T4281] ? apply_event_filter+0x590/0x590 [ 60.165901][ T4281] ? _copy_from_user+0x111/0x170 [ 60.170853][ T4281] subsystem_filter_write+0x95/0xf0 [ 60.176063][ T4281] ? subsystem_filter_read+0x1e0/0x1e0 [ 60.181525][ T4281] vfs_write+0x304/0xd70 [ 60.185783][ T4281] ? file_end_write+0x250/0x250 [ 60.190653][ T4281] ? mutex_lock_nested+0x17/0x20 [ 60.195598][ T4281] ? __fdget_pos+0x2bf/0x370 [ 60.200188][ T4281] ? ksys_write+0x70/0x260 [ 60.204614][ T4281] ksys_write+0x153/0x260 [ 60.208952][ T4281] ? __ia32_sys_read+0x80/0x80 [ 60.213721][ T4281] ? lockdep_hardirqs_on+0x94/0x140 [ 60.218929][ T4281] do_syscall_64+0x4c/0xa0 [ 60.223347][ T4281] ? clear_bhb_loop+0x30/0x80 [ 60.228029][ T4281] ? clear_bhb_loop+0x30/0x80 [ 60.232714][ T4281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 60.238626][ T4281] RIP: 0033:0x7f3104b2a2d9 [ 60.243052][ T4281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.262660][ T4281] RSP: 002b:00007f3102d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 60.271079][ T4281] RAX: ffffffffffffffda RBX: 00007f3104db1fa0 RCX: 00007f3104b2a2d9 [ 60.279050][ T4281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 60.287023][ T4281] RBP: 00007f3104bc1888 R08: 0000000000000000 R09: 0000000000000000 [ 60.294997][ T4281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.302974][ T4281] R13: 00007f3104db2038 R14: 00007f3104db1fa0 R15: 00007fffcb989778 [ 60.310963][ T4281] [ 60.398017][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.424645][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.444989][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.467995][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.480318][ T439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.488344][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.498781][ T439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.513702][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.522103][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.555403][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.592756][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.617330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.699726][ T4291] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 60.718310][ T4293] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.802866][ T4233] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.391278][ T4308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 61.401790][ T4308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15'. [ 62.562552][ T4233] usb 3-1: Using ep0 maxpacket: 8 [ 62.632480][ C0] sched: RT throttling activated [ 62.634641][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 62.652827][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 62.660021][ T4236] Bluetooth: hci1: command 0x0419 tx timeout [ 62.666387][ T4236] Bluetooth: hci3: command 0x0419 tx timeout [ 62.672418][ T4236] Bluetooth: hci4: command 0x0419 tx timeout [ 63.573199][ T25] audit: type=1326 audit(1791961262.956:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 64.647913][ T25] audit: type=1326 audit(1791961262.956:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 64.762935][ T4233] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 64.885665][ T4233] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 65.040235][ T25] audit: type=1326 audit(1791961262.966:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 65.082671][ T4233] usb 3-1: Product: syz [ 65.248541][ T4233] usb 3-1: config 0 descriptor?? [ 65.356596][ T4233] usb 3-1: can't set config #0, error -71 [ 65.527108][ T25] audit: type=1326 audit(1791961263.186:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 65.581839][ T4233] usb 3-1: USB disconnect, device number 2 [ 65.634520][ T25] audit: type=1326 audit(1791961263.186:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 65.662131][ T25] audit: type=1326 audit(1791961263.236:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 65.724183][ T4345] FAULT_INJECTION: forcing a failure. [ 65.724183][ T4345] name failslab, interval 1, probability 0, space 0, times 0 [ 65.724432][ T25] audit: type=1326 audit(1791961263.236:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 65.767975][ T25] audit: type=1326 audit(1791961263.236:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 65.792367][ T4345] CPU: 0 PID: 4345 Comm: syz.4.23 Not tainted syzkaller #0 [ 65.799585][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 65.809646][ T4345] Call Trace: [ 65.812932][ T4345] [ 65.815872][ T4345] dump_stack_lvl+0x188/0x250 [ 65.820564][ T4345] ? show_regs_print_info+0x20/0x20 [ 65.825772][ T4345] ? load_image+0x410/0x410 [ 65.830262][ T4345] ? __might_sleep+0xf0/0xf0 [ 65.832360][ T25] audit: type=1326 audit(1791961263.236:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 65.834833][ T4345] ? __lock_acquire+0x7d40/0x7d40 [ 65.834868][ T4345] should_fail+0x383/0x4b0 [ 65.868083][ T4345] should_failslab+0x5/0x20 [ 65.872601][ T4345] slab_pre_alloc_hook+0x51/0xc0 [ 65.877548][ T4345] kmem_cache_alloc_trace+0x47/0x290 [ 65.880233][ T25] audit: type=1326 audit(1791961263.236:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 65.882867][ T4345] ? futex_lock_pi+0xa31/0xbf0 [ 65.882896][ T4345] futex_lock_pi+0xa31/0xbf0 [ 65.882917][ T4345] ? futex_requeue+0x1920/0x1920 [ 65.882940][ T4345] ? __lock_acquire+0x13b3/0x7d40 [ 65.925975][ T4345] ? verify_lock_unused+0x140/0x140 [ 65.930355][ T25] audit: type=1326 audit(1791961263.236:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4319 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 65.931182][ T4345] ? verify_lock_unused+0x140/0x140 [ 65.960119][ T4345] do_futex+0xda0/0x12b0 [ 65.964372][ T4345] ? do_pwritev+0x259/0x3a0 [ 65.964396][ T4345] ? rcu_is_watching+0x11/0xa0 [ 65.964413][ T4345] ? kfree+0x4a/0x2a0 [ 65.964433][ T4345] ? futex_exit_release+0x1c0/0x1c0 [ 65.964454][ T4345] ? __context_tracking_exit+0x4c/0x80 [ 65.964474][ T4345] __se_sys_futex+0x389/0x420 [ 65.964492][ T4345] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 65.964513][ T4345] ? __x64_sys_futex+0xf0/0xf0 [ 65.964536][ T4345] ? __x64_sys_futex+0x1d/0xf0 [ 66.008517][ T4345] do_syscall_64+0x4c/0xa0 [ 66.012944][ T4345] ? clear_bhb_loop+0x30/0x80 [ 66.017637][ T4345] ? clear_bhb_loop+0x30/0x80 [ 66.022327][ T4345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.028230][ T4345] RIP: 0033:0x7f0fe86a22d9 [ 66.032647][ T4345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.052250][ T4345] RSP: 002b:00007f0fe68fa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 66.060671][ T4345] RAX: ffffffffffffffda RBX: 00007f0fe8929fa0 RCX: 00007f0fe86a22d9 [ 66.068718][ T4345] RDX: 0000000000000003 RSI: 0000000000000008 RDI: 0000000000000000 [ 66.076671][ T4345] RBP: 00007f0fe8739888 R08: 0000000000000000 R09: 0000000000000001 [ 66.084637][ T4345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.092608][ T4345] R13: 00007f0fe892a038 R14: 00007f0fe8929fa0 R15: 00007ffe92316718 [ 66.100576][ T4345] [ 66.145286][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.153178][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.332625][ T4228] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 66.585899][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.619453][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.732658][ T4228] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 66.740752][ T4228] usb 3-1: config 0 has no interface number 0 [ 66.749335][ T4228] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 66.905231][ T4308] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.914238][ T4308] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.924114][ T4308] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.933091][ T4308] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.942052][ T4228] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 66.951199][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.959324][ T4228] usb 3-1: Product: syz [ 66.964035][ T4228] usb 3-1: Manufacturer: syz [ 66.968635][ T4228] usb 3-1: SerialNumber: syz [ 66.975055][ T4228] usb 3-1: config 0 descriptor?? [ 67.039387][ T4228] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 67.067942][ T4308] syz.0.15 (4308) used greatest stack depth: 20304 bytes left [ 67.241946][ T7] usb 3-1: USB disconnect, device number 3 [ 67.296857][ T7] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 68.468639][ T4370] loop4: detected capacity change from 0 to 1024 [ 68.656794][ T4372] loop2: detected capacity change from 0 to 512 [ 69.447035][ T4370] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.664753][ T4370] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 69.868869][ T4372] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 69.896458][ T4372] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.372579][ T7] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 70.493227][ T4336] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.593175][ T4402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 70.610026][ T4402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'. [ 71.012670][ T4336] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.070503][ T4336] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 71.163460][ T4336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.231526][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.238381][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.255325][ T4336] usb 4-1: config 0 descriptor?? [ 71.313629][ T4336] pwc: Askey VC010 type 2 USB webcam detected. [ 71.622633][ T7] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 71.631795][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.643042][ T7] usb 2-1: config 0 descriptor?? [ 71.685033][ T7] pwc: Samsung MPC-C10 USB webcam detected. [ 71.752671][ T4336] pwc: recv_control_msg error -32 req 02 val 2b00 [ 71.902765][ T7] pwc: send_video_command error -71 [ 71.908159][ T7] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 71.915898][ T7] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 71.922648][ T4336] pwc: recv_control_msg error -32 req 02 val 2700 [ 72.002742][ T4336] pwc: recv_control_msg error -32 req 02 val 2c00 [ 72.093205][ T4336] pwc: recv_control_msg error -32 req 04 val 1000 [ 72.226544][ T4336] pwc: recv_control_msg error -32 req 04 val 1300 [ 72.539373][ T7] usb 2-1: USB disconnect, device number 2 [ 72.821483][ T4425] loop0: detected capacity change from 0 to 16 [ 74.633262][ T4336] pwc: recv_control_msg error -71 req 02 val 2000 [ 74.662647][ T4336] pwc: recv_control_msg error -71 req 02 val 2100 [ 74.673098][ T4432] loop3: detected capacity change from 0 to 1024 [ 74.680526][ T4425] ======================================================= [ 74.680526][ T4425] WARNING: The mand mount option has been deprecated and [ 74.680526][ T4425] and is ignored by this kernel. Remove the mand [ 74.680526][ T4425] option from the mount to silence this warning. [ 74.680526][ T4425] ======================================================= [ 74.982571][ T4336] pwc: recv_control_msg error -71 req 04 val 1500 [ 75.002388][ T4425] erofs: (device loop0): mounted with root inode @ nid 36. [ 75.022036][ T4336] pwc: recv_control_msg error -71 req 02 val 2500 [ 75.042902][ T4336] pwc: recv_control_msg error -71 req 02 val 2400 [ 75.055723][ T4432] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.068267][ T4336] pwc: recv_control_msg error -71 req 02 val 2600 [ 75.094398][ T4336] pwc: recv_control_msg error -71 req 02 val 2900 [ 75.122650][ T4336] pwc: recv_control_msg error -71 req 02 val 2800 [ 75.187598][ T4432] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 75.192586][ T4336] pwc: recv_control_msg error -71 req 04 val 1100 [ 75.213624][ T4445] loop4: detected capacity change from 0 to 512 [ 75.244277][ T4336] pwc: recv_control_msg error -71 req 04 val 1200 [ 75.341755][ T4445] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 75.384063][ T4445] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.409760][ T4336] pwc: Registered as video103. [ 75.430706][ T4336] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 75.487652][ T4336] usb 4-1: USB disconnect, device number 2 [ 75.642608][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.560471][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 76.688188][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.717730][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.760935][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.825030][ T7] usb 2-1: New USB device found, idVendor=056a, idProduct=0200, bcdDevice= 0.00 [ 77.852606][ T4336] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.277812][ T4336] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.292521][ T4336] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.356206][ T4336] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 78.407988][ T4336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.558928][ T4483] netlink: 'syz.1.66': attribute type 29 has an invalid length. [ 78.589839][ T4483] netlink: 'syz.1.66': attribute type 29 has an invalid length. [ 78.592890][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.614578][ T7] usb 2-1: config 0 descriptor?? [ 78.632702][ T7] usb 2-1: can't set config #0, error -71 [ 78.644165][ T7] usb 2-1: USB disconnect, device number 3 [ 78.655565][ T4486] netlink: 'syz.1.66': attribute type 29 has an invalid length. [ 78.801520][ T4488] loop2: detected capacity change from 0 to 16 [ 79.173420][ T4488] erofs: (device loop2): mounted with root inode @ nid 36. [ 79.257554][ T4498] loop4: detected capacity change from 0 to 512 [ 79.513102][ T4336] rtsx_usb: probe of 4-1:1.0 failed with error -71 [ 79.720645][ T4336] usb 4-1: USB disconnect, device number 3 [ 81.473681][ T4511] overlayfs: failed to resolve './bus': -2 [ 81.520686][ T1108] cfg80211: failed to load regulatory.db [ 82.224310][ T4531] loop3: detected capacity change from 0 to 512 [ 82.294138][ T4531] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 82.320072][ T4531] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.417631][ T4228] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.688237][ T4228] usb 2-1: Using ep0 maxpacket: 32 [ 82.712810][ T4315] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 82.883136][ T4228] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 82.898468][ T4228] usb 2-1: config 0 has no interface number 0 [ 82.941445][ T4228] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 82.998843][ T4228] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 83.022086][ T4228] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 83.032927][ T4228] usb 2-1: config 0 interface 196 has no altsetting 0 [ 83.073031][ T4565] overlayfs: failed to resolve './file0': -2 [ 83.202866][ T4315] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 83.250959][ T4315] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.258273][ T4228] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 83.275420][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.286236][ T4228] usb 2-1: Product: syz [ 83.290636][ T4228] usb 2-1: Manufacturer: syz [ 83.417958][ T4228] usb 2-1: SerialNumber: syz [ 83.432965][ T4228] usb 2-1: config 0 descriptor?? [ 83.463039][ T4523] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 83.863417][ T4315] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 83.890624][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 83.919115][ T4315] usb 5-1: Product: syz [ 84.044649][ T4315] usb 5-1: Manufacturer: syz [ 84.049279][ T4315] usb 5-1: SerialNumber: syz [ 84.063147][ T4315] usb 5-1: config 0 descriptor?? [ 84.111557][ T4315] usb 5-1: selecting invalid altsetting 0 [ 84.119026][ T4597] loop3: detected capacity change from 0 to 512 [ 84.123100][ T4228] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 84.189454][ T4597] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 84.207096][ T4597] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.332252][ T4546] usb 5-1: selecting invalid altsetting 0 [ 84.343167][ T4546] usb 5-1: 0:0: usb_set_interface failed (-22) [ 84.351465][ T4546] usb 5-1: selecting invalid altsetting 0 [ 84.368782][ T4546] usb 5-1: 0:0: usb_set_interface failed (-22) [ 84.387229][ T4315] usb 5-1: USB disconnect, device number 2 [ 84.883352][ T3850] ipheth 2-1:0.196: ipheth_rx_submit: usb_submit_urb: -90 [ 85.336656][ T4228] usb 2-1: USB disconnect, device number 4 [ 85.453474][ T4228] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 85.484061][ T4640] overlayfs: failed to resolve './file0': -2 [ 85.882556][ T4659] overlayfs: failed to resolve './bus': -2 [ 86.449386][ T4663] FAULT_INJECTION: forcing a failure. [ 86.449386][ T4663] name failslab, interval 1, probability 0, space 0, times 0 [ 86.462540][ T4663] CPU: 0 PID: 4663 Comm: syz.3.107 Not tainted syzkaller #0 [ 86.469838][ T4663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.479894][ T4663] Call Trace: [ 86.483174][ T4663] [ 86.486102][ T4663] dump_stack_lvl+0x188/0x250 [ 86.490784][ T4663] ? show_regs_print_info+0x20/0x20 [ 86.495982][ T4663] ? load_image+0x410/0x410 [ 86.500488][ T4663] ? __might_sleep+0xf0/0xf0 [ 86.505076][ T4663] ? __lock_acquire+0x7d40/0x7d40 [ 86.510105][ T4663] should_fail+0x383/0x4b0 [ 86.514527][ T4663] should_failslab+0x5/0x20 [ 86.519032][ T4663] slab_pre_alloc_hook+0x51/0xc0 [ 86.523978][ T4663] __kmalloc_node+0x6d/0x3a0 [ 86.528571][ T4663] ? mempool_init_node+0x12b/0x480 [ 86.533690][ T4663] ? __init_waitqueue_head+0xa4/0x140 [ 86.539076][ T4663] mempool_init_node+0x12b/0x480 [ 86.544023][ T4663] ? mempool_alloc_slab+0x60/0x60 [ 86.549051][ T4663] ? xa_load+0x276/0x2a0 [ 86.553305][ T4663] ? mempool_alloc_slab+0x60/0x60 [ 86.558313][ T4663] ? mempool_free+0x320/0x320 [ 86.562973][ T4663] mempool_init+0x36/0x50 [ 86.567287][ T4663] bioset_init+0x282/0x6d0 [ 86.571693][ T4663] blk_alloc_queue+0xaf/0x580 [ 86.576357][ T4663] __blk_mq_alloc_disk+0x43/0x150 [ 86.581367][ T4663] ? loop_add+0x263/0x890 [ 86.585693][ T4663] loop_add+0x288/0x890 [ 86.589842][ T4663] loop_control_ioctl+0x124/0x550 [ 86.594855][ T4663] ? xor_init+0x60/0x60 [ 86.598999][ T4663] ? bpf_lsm_file_ioctl+0x5/0x10 [ 86.603921][ T4663] ? security_file_ioctl+0x7c/0xa0 [ 86.609025][ T4663] ? xor_init+0x60/0x60 [ 86.613180][ T4663] __se_sys_ioctl+0xfa/0x170 [ 86.617761][ T4663] do_syscall_64+0x4c/0xa0 [ 86.622163][ T4663] ? clear_bhb_loop+0x30/0x80 [ 86.626826][ T4663] ? clear_bhb_loop+0x30/0x80 [ 86.631495][ T4663] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.637372][ T4663] RIP: 0033:0x7f50e367f2d9 [ 86.641776][ T4663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.661368][ T4663] RSP: 002b:00007f50e18d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.669773][ T4663] RAX: ffffffffffffffda RBX: 00007f50e3906fa0 RCX: 00007f50e367f2d9 [ 86.677730][ T4663] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 86.685690][ T4663] RBP: 00007f50e3716888 R08: 0000000000000000 R09: 0000000000000000 [ 86.693646][ T4663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.701602][ T4663] R13: 00007f50e3907038 R14: 00007f50e3906fa0 R15: 00007ffd0e80d908 [ 86.709570][ T4663] [ 86.737337][ T4665] loop1: detected capacity change from 0 to 512 [ 86.931513][ T4665] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 86.952899][ T4665] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.663038][ T4234] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.974538][ T4697] loop1: detected capacity change from 0 to 16 [ 88.062867][ T4234] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.082095][ T4697] erofs: (device loop1): mounted with root inode @ nid 36. [ 88.132165][ T4234] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 88.175348][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.265664][ T4234] as10x_usb: device has been detected [ 88.272419][ T4234] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 88.300747][ T4234] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 88.358398][ T4234] as10x_usb: error during firmware upload part1 [ 88.372227][ T4234] Registered device Abilis Systems DVB-Titan [ 88.460469][ T4680] netlink: 'syz.2.111': attribute type 10 has an invalid length. [ 88.561769][ T4680] team0 (unregistering): Port device team_slave_0 removed [ 88.604338][ T4680] team0 (unregistering): Port device team_slave_1 removed [ 88.677771][ T4703] overlayfs: failed to resolve './file0': -2 [ 88.701641][ T4228] usb 3-1: USB disconnect, device number 4 [ 88.803457][ T4234] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.909962][ T4228] Unregistered device Abilis Systems DVB-Titan [ 88.911223][ T4228] as10x_usb: device has been disconnected [ 89.832785][ T4234] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.849300][ T4234] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 89.877970][ T4234] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 89.898199][ T4234] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.931724][ T4234] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 89.959169][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.187345][ T4724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 90.202011][ T4724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 90.236826][ T4724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 90.265040][ T4728] 0x000000000003-0x000000010001 : "" [ 90.285533][ T4728] ftl_cs: FTL header corrupt! [ 90.382589][ T4315] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.413176][ T4735] overlayfs: failed to resolve './file1': -2 [ 90.449305][ T4234] usb 1-1: USB disconnect, device number 2 [ 90.782852][ T4315] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.797383][ T4315] usb 4-1: config 0 has no interface number 0 [ 90.804853][ T4315] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.820054][ T4315] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.831107][ T4315] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.845255][ T4315] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 90.854360][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.871729][ T4315] usb 4-1: config 0 descriptor?? [ 91.025485][ T4228] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 91.262522][ T1111] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.527949][ T4228] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.565725][ T4228] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 91.582336][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.612601][ T4315] input: HID 28bd:0042 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0001/input/input6 [ 91.631032][ T4228] usb 2-1: config 0 descriptor?? [ 91.674553][ T4228] pwc: Askey VC010 type 2 USB webcam detected. [ 91.709471][ T4315] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0001/input/input7 [ 91.735399][ T4315] uclogic 0003:28BD:0042.0001: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 91.819865][ T4229] usb 4-1: USB disconnect, device number 4 [ 91.955565][ T4785] fido_id[4785]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 92.092650][ T4228] pwc: recv_control_msg error -32 req 02 val 2b00 [ 92.132600][ T4228] pwc: recv_control_msg error -32 req 02 val 2700 [ 92.406811][ T4228] pwc: recv_control_msg error -71 req 04 val 1000 [ 92.437101][ T4228] pwc: recv_control_msg error -71 req 04 val 1300 [ 92.467444][ T4228] pwc: recv_control_msg error -71 req 04 val 1400 [ 92.495663][ T4228] pwc: recv_control_msg error -71 req 02 val 2000 [ 92.525966][ T4228] pwc: recv_control_msg error -71 req 02 val 2100 [ 92.557073][ T4228] pwc: recv_control_msg error -71 req 04 val 1500 [ 92.587838][ T4228] pwc: recv_control_msg error -71 req 02 val 2500 [ 92.618106][ T4228] pwc: recv_control_msg error -71 req 02 val 2400 [ 92.642732][ T4228] pwc: recv_control_msg error -71 req 02 val 2600 [ 92.661036][ T4795] loop2: detected capacity change from 0 to 512 [ 92.675442][ T4228] pwc: recv_control_msg error -71 req 02 val 2900 [ 92.715778][ T4228] pwc: recv_control_msg error -71 req 02 val 2800 [ 92.821796][ T4228] pwc: recv_control_msg error -71 req 04 val 1100 [ 92.853045][ T4228] pwc: recv_control_msg error -71 req 04 val 1200 [ 92.879321][ T4228] pwc: Registered as video103. [ 92.890675][ T4228] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 92.935029][ T4228] usb 2-1: USB disconnect, device number 5 [ 92.996070][ T4795] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.070318][ T1111] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.080593][ T1111] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.090933][ T1111] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 93.108585][ T1111] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.219622][ T4810] overlayfs: failed to resolve './file1': -2 [ 93.330038][ T4811] overlayfs: failed to resolve './bus': -2 [ 93.614236][ T4815] device syzkaller1 entered promiscuous mode [ 93.932596][ T4229] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.032669][ T1111] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 94.045497][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.053759][ T1111] usb 1-1: Product: syz [ 94.057917][ T1111] usb 1-1: Manufacturer: syz [ 94.142873][ T1111] usb 1-1: can't set config #1, error -71 [ 94.165482][ T1111] usb 1-1: USB disconnect, device number 3 [ 94.270529][ T4823] kvm: pic: non byte write [ 94.501198][ T4828] loop1: detected capacity change from 0 to 512 [ 94.532662][ T1111] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.726683][ T4836] loop2: detected capacity change from 0 to 16 [ 94.963134][ T4229] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 95.063698][ T4836] erofs: (device loop2): mounted with root inode @ nid 36. [ 95.130380][ T4229] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 95.324644][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.985769][ T4229] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 96.122529][ T4228] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.203581][ T4229] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 12:7f:b4:5c:40:51 [ 96.430764][ T4229] usb 5-1: USB disconnect, device number 3 [ 96.437982][ T4229] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 96.473861][ T4853] loop1: detected capacity change from 0 to 512 [ 96.527107][ T4228] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 96.535179][ T4853] EXT4-fs (loop1): Ignoring removed bh option [ 96.544564][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.562835][ T4853] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 96.577518][ T4228] usb 4-1: config 0 descriptor?? [ 96.604332][ T1111] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 96.621915][ T1111] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 96.663975][ T4853] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.157: corrupted in-inode xattr [ 96.677715][ T4853] EXT4-fs (loop1): Remounting filesystem read-only [ 96.690325][ T4853] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.157: couldn't read orphan inode 15 (err -117) [ 96.705831][ T4853] EXT4-fs (loop1): Remounting filesystem read-only [ 96.712356][ T4853] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,inode_readahead_blks=0x0000000008000000,quota,noload,bh,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,. Quota mode: writeback. [ 96.822855][ T1111] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 96.856586][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.880563][ T1111] usb 1-1: Product: syz [ 96.890387][ T1111] usb 1-1: Manufacturer: syz [ 96.897386][ T1111] usb 1-1: SerialNumber: syz [ 97.043582][ T1111] usb 1-1: Cannot retrieve CPort count: -71 [ 97.231754][ T4890] overlayfs: failed to clone upperpath [ 97.553862][ T4228] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 97.568255][ T4898] FAULT_INJECTION: forcing a failure. [ 97.568255][ T4898] name failslab, interval 1, probability 0, space 0, times 0 [ 97.591294][ T4228] [drm] Initialized udl on minor 2 [ 97.622918][ T4898] CPU: 1 PID: 4898 Comm: syz.0.166 Not tainted syzkaller #0 [ 97.630239][ T4898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.640296][ T4898] Call Trace: [ 97.643576][ T4898] [ 97.646507][ T4898] dump_stack_lvl+0x188/0x250 [ 97.651203][ T4898] ? show_regs_print_info+0x20/0x20 [ 97.656415][ T4898] ? load_image+0x410/0x410 [ 97.660926][ T4898] ? __might_sleep+0xf0/0xf0 [ 97.665527][ T4898] ? __lock_acquire+0x7d40/0x7d40 [ 97.670562][ T4898] should_fail+0x383/0x4b0 [ 97.674990][ T4898] should_failslab+0x5/0x20 [ 97.679495][ T4898] slab_pre_alloc_hook+0x51/0xc0 [ 97.684438][ T4898] kmem_cache_alloc_trace+0x47/0x290 [ 97.689726][ T4898] ? __list_lru_init+0x535/0xac0 [ 97.694669][ T4898] __list_lru_init+0x535/0xac0 [ 97.699451][ T4898] alloc_super+0x787/0x970 [ 97.703881][ T4898] ? kill_litter_super+0xa0/0xa0 [ 97.708822][ T4898] sget_fc+0x2d4/0x6f0 [ 97.712902][ T4898] ? kill_litter_super+0xa0/0xa0 [ 97.717846][ T4898] ? mqueue_get_tree+0xe0/0xe0 [ 97.722609][ T4898] get_tree_nodev+0x26/0x160 [ 97.727202][ T4898] vfs_get_tree+0x88/0x270 [ 97.731619][ T4898] fc_mount+0x18/0xa0 [ 97.735605][ T4898] mq_init_ns+0x39d/0x510 [ 97.739939][ T4898] copy_ipcs+0x2ea/0x4b0 [ 97.744190][ T4898] create_new_namespaces+0x212/0x700 [ 97.749491][ T4898] unshare_nsproxy_namespaces+0x116/0x160 [ 97.755215][ T4898] ksys_unshare+0x4f6/0x8e0 [ 97.759718][ T4898] ? __lock_acquire+0x7d40/0x7d40 [ 97.764750][ T4898] ? sighand_ctor+0x40/0x40 [ 97.769253][ T4898] ? lock_chain_count+0x20/0x20 [ 97.774111][ T4898] ? syscall_enter_from_user_mode+0x21/0x70 [ 97.780014][ T4898] __x64_sys_unshare+0x34/0x40 [ 97.784782][ T4898] do_syscall_64+0x4c/0xa0 [ 97.789197][ T4898] ? clear_bhb_loop+0x30/0x80 [ 97.793873][ T4898] ? clear_bhb_loop+0x30/0x80 [ 97.798551][ T4898] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.804449][ T4898] RIP: 0033:0x7fa79936b2d9 [ 97.808865][ T4898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.828478][ T4898] RSP: 002b:00007fa7975c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 97.836898][ T4898] RAX: ffffffffffffffda RBX: 00007fa7995f2fa0 RCX: 00007fa79936b2d9 [ 97.844873][ T4898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 97.852840][ T4898] RBP: 00007fa799402888 R08: 0000000000000000 R09: 0000000000000000 [ 97.860807][ T4898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.868775][ T4898] R13: 00007fa7995f3038 R14: 00007fa7995f2fa0 R15: 00007ffe3fccca18 [ 97.876765][ T4898] [ 97.879834][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.899111][ T4228] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 97.930329][ T4228] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 97.972733][ T4228] usb 4-1: USB disconnect, device number 5 [ 97.979884][ T4315] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 98.011900][ T4315] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 98.034672][ T4315] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 98.465051][ T1111] usb 1-1: Cannot retrieve CPort count: -71 [ 98.470960][ T1111] es2_ap_driver: probe of 1-1:1.0 failed with error -71 [ 98.484170][ T1111] usb 1-1: USB disconnect, device number 4 [ 99.049575][ T1111] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 99.345044][ T4941] loop3: detected capacity change from 0 to 512 [ 99.412738][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.430929][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.443448][ T1111] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 99.453898][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.479622][ T4941] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.508590][ T1111] usb 2-1: config 0 descriptor?? [ 100.412725][ T4315] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 100.838146][ T4315] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 100.855247][ T4315] usb 5-1: config 0 has no interface number 0 [ 100.882490][ T4315] usb 5-1: config 0 interface 41 has no altsetting 0 [ 101.075980][ T4315] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 101.098549][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.133203][ T4315] usb 5-1: Product: syz [ 101.159956][ T4315] usb 5-1: Manufacturer: syz [ 101.188062][ T4315] usb 5-1: SerialNumber: syz [ 101.233260][ T4315] usb 5-1: config 0 descriptor?? [ 101.248235][ T1111] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 101.267107][ T1111] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 101.285261][ T1111] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0002/input/input9 [ 101.332883][ T1111] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 101.506679][ T1111] usb 2-1: USB disconnect, device number 6 [ 101.647797][ T4970] fido_id[4970]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 101.667297][ T4972] loop3: detected capacity change from 0 to 16 [ 101.715391][ T4972] erofs: (device loop3): mounted with root inode @ nid 36. [ 102.183145][ T4315] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 102.304577][ T1111] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.702691][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.721662][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.762591][ T1111] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.822570][ T1111] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.851916][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.889663][ T1111] usb 2-1: config 0 descriptor?? [ 103.377804][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.386086][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.393981][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.401721][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.409646][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.417799][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.426216][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.434595][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.441980][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.449605][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.457138][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.464789][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.472170][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.480501][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.489126][ T1111] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.497127][ T1111] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 103.602732][ T4315] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 103.621359][ T1111] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 103.659236][ T4228] usb 2-1: USB disconnect, device number 7 [ 103.708893][ T5013] fido_id[5013]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 103.723444][ T4229] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.883450][ T4315] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 104.152752][ T4229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.163389][ T4229] usb 1-1: config 0 has no interfaces? [ 104.178326][ T4229] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 104.198210][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.223984][ T4229] usb 1-1: config 0 descriptor?? [ 104.482588][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 104.484952][ T4336] usb 1-1: USB disconnect, device number 5 [ 104.539297][ T5029] loop3: detected capacity change from 0 to 16 [ 104.570613][ T5029] erofs: (device loop3): mounted with root inode @ nid 36. [ 104.612687][ T4315] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 104.676702][ T4315] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 104.727706][ T4315] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 104.842846][ T7] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.856288][ T7] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 104.867545][ T7] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.884887][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.890663][ T4315] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 104.922754][ T4315] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 104.922958][ T5022] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 104.973053][ T4315] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 105.012610][ T4315] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 105.072782][ T4315] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 105.114834][ T4315] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336:ffffffb9 [ 105.130902][ T4315] CoreChips: probe of 5-1:0.41 failed with error -71 [ 105.154791][ T4315] usb 5-1: USB disconnect, device number 4 [ 105.247717][ T5051] autofs4:pid:5051:autofs_fill_super: called with bogus options [ 105.287867][ T4229] hid-generic 0005:0008:63AA.0004: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 105.543013][ T4315] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.554760][ T5063] loop0: detected capacity change from 0 to 512 [ 105.832512][ T4315] usb 5-1: Using ep0 maxpacket: 32 [ 105.952692][ T4315] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 105.964033][ T4315] usb 5-1: config 0 has no interface number 0 [ 106.132756][ T4315] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 106.146092][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.156364][ T4315] usb 5-1: Product: syz [ 106.160653][ T4315] usb 5-1: Manufacturer: syz [ 106.169170][ T4315] usb 5-1: SerialNumber: syz [ 106.185626][ T4315] usb 5-1: config 0 descriptor?? [ 106.233608][ T4315] smsc95xx v2.0.0 [ 106.317358][ T4336] usb 2-1: USB disconnect, device number 8 [ 106.973142][ T4315] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 107.025036][ T4315] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 108.192962][ T4315] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32 [ 108.212732][ T4229] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 108.284362][ T4315] smsc95xx: probe of 5-1:0.67 failed with error -32 [ 108.472748][ T4229] usb 2-1: Using ep0 maxpacket: 32 [ 108.619223][ T5094] fuse: Bad value for 'fd' [ 108.624784][ T4229] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 108.641484][ T4229] usb 2-1: config 0 has no interface number 0 [ 108.656868][ T4229] usb 2-1: config 0 interface 184 has no altsetting 0 [ 108.893241][ T4229] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 108.928818][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.008254][ T4229] usb 2-1: Product: syz [ 109.050790][ T4229] usb 2-1: Manufacturer: syz [ 109.068506][ T4229] usb 2-1: SerialNumber: syz [ 109.085911][ T4229] usb 2-1: config 0 descriptor?? [ 109.126371][ T4229] smsc75xx v1.0.0 [ 109.199491][ T4228] usb 5-1: USB disconnect, device number 5 [ 109.562892][ T4229] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 109.574188][ T4229] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 109.585571][ T4229] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 109.596043][ T4229] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 109.613165][ T4229] usb 2-1: USB disconnect, device number 9 [ 109.642666][ T4228] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.882592][ T4228] usb 5-1: Using ep0 maxpacket: 8 [ 110.242688][ T4228] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 110.258702][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.276716][ T4228] usb 5-1: Product: syz [ 110.285203][ T4228] usb 5-1: Manufacturer: syz [ 110.295192][ T4228] usb 5-1: SerialNumber: syz [ 110.306597][ T4228] usb 5-1: config 0 descriptor?? [ 110.512985][ T5131] Zero length message leads to an empty skb [ 110.537906][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 110.537919][ T25] audit: type=1326 audit(1791961310.236:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 110.582641][ T4228] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 110.621551][ T25] audit: type=1326 audit(1791961310.276:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 110.651498][ T25] audit: type=1326 audit(1791961310.276:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 110.682333][ T25] audit: type=1326 audit(1791961310.276:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 110.715428][ T25] audit: type=1326 audit(1791961310.276:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 110.745256][ T25] audit: type=1326 audit(1791961310.276:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 110.772823][ T25] audit: type=1326 audit(1791961310.276:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 110.798005][ T25] audit: type=1326 audit(1791961310.276:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 110.822888][ T25] audit: type=1326 audit(1791961310.276:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 110.843000][ T4229] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.859672][ T25] audit: type=1326 audit(1791961310.276:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.247" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 111.392673][ T4229] usb 1-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 111.402038][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 111.411060][ T4229] usb 1-1: Product: syz [ 111.415535][ T4229] usb 1-1: Manufacturer: syz [ 111.503894][ T4229] uas 1-1:1.0: Interface 0 is not authorized for usage [ 111.582830][ T4229] usbtest 1-1:1.0: Interface 0 is not authorized for usage [ 112.926931][ T4228] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 113.183525][ T4228] usb 5-1: USB disconnect, device number 6 [ 114.554929][ T4228] usb 1-1: USB disconnect, device number 6 [ 114.752143][ T5164] loop4: detected capacity change from 0 to 16 [ 115.218768][ T5164] erofs: (device loop4): mounted with root inode @ nid 36. [ 115.260922][ T5164] 9pnet: Insufficient options for proto=fd [ 115.730755][ T5182] loop1: detected capacity change from 0 to 512 [ 115.808354][ T5182] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 115.824655][ T5182] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.928841][ T4236] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 116.512804][ T4236] usb 1-1: Using ep0 maxpacket: 32 [ 116.652692][ T4236] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.674466][ T4236] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.845850][ T4236] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 116.864377][ T4236] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 116.897361][ T4236] usb 1-1: Product: syz [ 116.901540][ T4236] usb 1-1: Manufacturer: syz [ 116.962704][ T4315] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 116.979569][ T4236] hub 1-1:4.0: Interface 0 is not authorized for usage [ 116.992423][ T4236] usbtest 1-1:4.0: Interface 0 is not authorized for usage [ 117.025623][ T4236] usbhid 1-1:4.0: Interface 0 is not authorized for usage [ 117.333125][ T4315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.349397][ T4315] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 117.377352][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.416282][ T4315] usb 2-1: config 0 descriptor?? [ 117.454481][ T4315] pwc: Askey VC010 type 2 USB webcam detected. [ 117.872642][ T4315] pwc: recv_control_msg error -32 req 02 val 2b00 [ 117.912601][ T4315] pwc: recv_control_msg error -32 req 02 val 2700 [ 117.952572][ T4315] pwc: recv_control_msg error -32 req 02 val 2c00 [ 117.992623][ T4315] pwc: recv_control_msg error -32 req 04 val 1000 [ 118.032606][ T4315] pwc: recv_control_msg error -32 req 04 val 1300 [ 118.072576][ T4315] pwc: recv_control_msg error -32 req 04 val 1400 [ 118.332605][ T4315] pwc: recv_control_msg error -71 req 02 val 2100 [ 118.385772][ T4315] pwc: recv_control_msg error -71 req 04 val 1500 [ 118.412861][ T4315] pwc: recv_control_msg error -71 req 02 val 2500 [ 118.443987][ T4315] pwc: recv_control_msg error -71 req 02 val 2400 [ 118.472631][ T4315] pwc: recv_control_msg error -71 req 02 val 2600 [ 118.502598][ T4315] pwc: recv_control_msg error -71 req 02 val 2900 [ 118.532681][ T4315] pwc: recv_control_msg error -71 req 02 val 2800 [ 118.562601][ T4315] pwc: recv_control_msg error -71 req 04 val 1100 [ 118.611875][ T4315] pwc: recv_control_msg error -71 req 04 val 1200 [ 118.706970][ T4236] usb 1-1: USB disconnect, device number 7 [ 118.707330][ T4315] pwc: Registered as video103. [ 118.734093][ T4315] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 118.901825][ T4315] usb 2-1: USB disconnect, device number 10 [ 119.849055][ T5250] loop1: detected capacity change from 0 to 512 [ 121.668388][ T5211] Set syz1 is full, maxelem 65536 reached [ 121.793830][ T4228] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 121.970585][ T5263] syz.3.296 uses obsolete (PF_INET,SOCK_PACKET) [ 122.182586][ T4228] usb 1-1: Using ep0 maxpacket: 8 [ 122.389897][ T4228] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 122.398428][ T4228] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.939465][ T4228] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.005857][ T4228] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.067932][ T4228] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.232723][ T4228] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.262099][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.403861][ T4228] usb 1-1: can't set config #16, error -71 [ 123.426327][ T4228] usb 1-1: USB disconnect, device number 8 [ 123.449905][ T5294] loop0: detected capacity change from 0 to 512 [ 123.589127][ T5294] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 123.622173][ T5300] overlayfs: failed to clone upperpath [ 123.632797][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 123.639365][ T5294] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.152561][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 124.293509][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.309342][ T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFC, skipping [ 124.321577][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.176092][ T5332] loop0: detected capacity change from 0 to 512 [ 125.253909][ T7] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 125.270269][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.278646][ T7] usb 2-1: Product: syz [ 125.288761][ T5332] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.299469][ T7] usb 2-1: Manufacturer: syz [ 125.304436][ T7] usb 2-1: SerialNumber: syz [ 125.347254][ T7] usb 2-1: config 0 descriptor?? [ 125.610594][ T5352] overlayfs: failed to resolve './bus': -2 [ 125.801898][ T5353] netlink: 104 bytes leftover after parsing attributes in process `syz.2.328'. [ 126.447017][ T5366] device syzkaller1 entered promiscuous mode [ 126.634110][ T7] usb 2-1: can't set config #0, error -71 [ 126.641314][ T7] usb 2-1: USB disconnect, device number 11 [ 126.843487][ T5368] KVM: debugfs: duplicate directory 5368-5 [ 127.080742][ T5376] FAULT_INJECTION: forcing a failure. [ 127.080742][ T5376] name fail_futex, interval 1, probability 0, space 0, times 1 [ 127.141023][ T5376] CPU: 1 PID: 5376 Comm: syz.1.337 Not tainted syzkaller #0 [ 127.148343][ T5376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 127.158403][ T5376] Call Trace: [ 127.161682][ T5376] [ 127.164613][ T5376] dump_stack_lvl+0x188/0x250 [ 127.169309][ T5376] ? futex_wait_queue_me+0x16e/0x440 [ 127.174601][ T5376] ? show_regs_print_info+0x20/0x20 [ 127.179802][ T5376] ? load_image+0x410/0x410 [ 127.184318][ T5376] should_fail+0x383/0x4b0 [ 127.188749][ T5376] get_futex_key+0x1a1/0x12d0 [ 127.193433][ T5376] ? __lock_acquire+0x13b3/0x7d40 [ 127.198457][ T5376] ? futex_wait_restart+0x250/0x250 [ 127.203669][ T5376] futex_wake+0x101/0x540 [ 127.208016][ T5376] ? futex_wait+0x680/0x680 [ 127.212524][ T5376] ? verify_lock_unused+0x140/0x140 [ 127.217726][ T5376] ? verify_lock_unused+0x140/0x140 [ 127.222925][ T5376] do_futex+0xd83/0x12b0 [ 127.227172][ T5376] ? vfs_write+0xaa6/0xd70 [ 127.231597][ T5376] ? futex_exit_release+0x1c0/0x1c0 [ 127.236801][ T5376] ? __context_tracking_exit+0x4c/0x80 [ 127.242268][ T5376] __se_sys_futex+0x389/0x420 [ 127.246961][ T5376] ? __x64_sys_futex+0xf0/0xf0 [ 127.251730][ T5376] ? __x64_sys_futex+0x1d/0xf0 [ 127.256499][ T5376] do_syscall_64+0x4c/0xa0 [ 127.260914][ T5376] ? clear_bhb_loop+0x30/0x80 [ 127.265590][ T5376] ? clear_bhb_loop+0x30/0x80 [ 127.270266][ T5376] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.276162][ T5376] RIP: 0033:0x7f0285ff82d9 [ 127.280576][ T5376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.300181][ T5376] RSP: 002b:00007f02842500e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.308603][ T5376] RAX: ffffffffffffffda RBX: 00007f028627ffa8 RCX: 00007f0285ff82d9 [ 127.316580][ T5376] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f028627ffac [ 127.324550][ T5376] RBP: 00007f028627ffa0 R08: 0001e225061c37bc R09: 0000000000000000 [ 127.332521][ T5376] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 127.340494][ T5376] R13: 00007f0286280038 R14: 00007ffedfb46a50 R15: 00007ffedfb46b38 [ 127.348485][ T5376] [ 127.453376][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 127.657124][ T5395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 127.672412][ T5395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.344'. [ 127.723587][ T1108] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 127.912502][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 128.140895][ T5395] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.148205][ T5395] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.162608][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 128.282735][ T7] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 128.291289][ T7] usb 1-1: config 0 has no interface number 0 [ 128.297446][ T7] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 128.322622][ T1108] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.331229][ T1108] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 128.342274][ T1108] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.351499][ T1108] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 128.362772][ T1108] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 128.482731][ T7] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 128.492008][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.494265][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.500220][ T7] usb 1-1: Product: syz [ 128.507564][ T1108] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.511739][ T7] usb 1-1: Manufacturer: syz [ 128.526232][ T7] usb 1-1: SerialNumber: syz [ 128.526781][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.533781][ T7] usb 1-1: config 0 descriptor?? [ 128.546009][ T1108] usb 2-1: Product: syz [ 128.550162][ T1108] usb 2-1: Manufacturer: syz [ 128.572818][ T5387] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 128.593449][ T7] asix 1-1:0.188: Interface 188 is not authorized for usage [ 128.604339][ T7] usbtest 1-1:0.188: Interface 188 is not authorized for usage [ 128.704474][ T1108] cdc_wdm 2-1:1.0: skipping garbage [ 128.709730][ T1108] cdc_wdm 2-1:1.0: skipping garbage [ 128.728026][ T1108] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 128.735597][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.743136][ T1108] cdc_wdm 2-1:1.0: Unknown control protocol [ 128.825793][ T5411] overlayfs: failed to clone upperpath [ 129.162745][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 129.169875][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 129.182485][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 129.189093][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 129.202484][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 129.209087][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 129.222481][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 129.229084][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 129.237563][ T4315] Bluetooth: hci4: command 0x0406 tx timeout [ 129.243631][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 129.243677][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 129.257271][ T4229] usb 2-1: USB disconnect, device number 12 [ 129.263209][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 129.263230][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 129.263246][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 129.623406][ T5395] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.632381][ T5395] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.641391][ T5395] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.650853][ T5395] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.407304][ T4315] usb 1-1: USB disconnect, device number 9 [ 130.447617][ T5439] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 130.590126][ T5441] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 130.596871][ T5441] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.609787][ T5441] vhci_hcd vhci_hcd.0: Device attached [ 130.883186][ T4233] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 130.992587][ T4315] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 131.362625][ T4315] usb 1-1: config 0 has no interfaces? [ 131.369129][ T4315] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.409629][ T4315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.456602][ T5423] Set syz1 is full, maxelem 65536 reached [ 131.457626][ T4315] usb 1-1: config 0 descriptor?? [ 131.754027][ T5442] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 131.764532][ T4315] usb 1-1: USB disconnect, device number 10 [ 131.821624][ T5473] overlayfs: failed to clone upperpath [ 132.016398][ T1338] vhci_hcd: stop threads [ 132.020699][ T1338] vhci_hcd: release socket [ 132.089213][ T1338] vhci_hcd: disconnect device [ 132.604646][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.610955][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.766720][ T4315] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 133.013658][ T4315] usb 1-1: Using ep0 maxpacket: 8 [ 133.135781][ T4315] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 133.150403][ T4315] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 133.180379][ T4315] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 133.206892][ T4315] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 133.240164][ T4315] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 133.280185][ T4315] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.319340][ T4315] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.343480][ T4315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.403611][ T4315] usbtmc 1-1:16.0: Interface 0 is not authorized for usage [ 133.431611][ T4315] usbtest 1-1:16.0: Interface 0 is not authorized for usage [ 133.472587][ T5508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'. [ 133.488463][ T5508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.384'. [ 134.116743][ T5508] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.124169][ T5508] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.581621][ T5508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.650274][ T5508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.217984][ T5508] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.227132][ T5508] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.236064][ T5508] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.245322][ T5508] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.496157][ T5536] overlayfs: failed to clone upperpath [ 135.655925][ T5495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.853972][ T4315] usb 1-1: USB disconnect, device number 11 [ 136.122349][ T5545] device-mapper: table: 248:0: multipath: priority group count mismatch [ 136.137347][ T4233] vhci_hcd: vhci_device speed not set [ 136.159195][ T5545] device-mapper: ioctl: error adding target to table [ 137.114385][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 137.130982][ T5580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.406'. [ 138.043282][ T5598] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.938295][ T5606] netlink: 'syz.3.419': attribute type 10 has an invalid length. [ 138.991423][ T5606] team0 (unregistering): Port device team_slave_0 removed [ 139.041097][ T5606] team0 (unregistering): Port device team_slave_1 removed [ 139.279694][ T5615] ip_tables: iptables: counters copy to user failed while replacing table [ 139.433159][ T5620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'. [ 139.448062][ T5620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.423'. [ 140.328135][ T25] kauditd_printk_skb: 242 callbacks suppressed [ 140.328148][ T25] audit: type=1326 audit(1791961340.026:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.3.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 140.370217][ T25] audit: type=1326 audit(1791961340.056:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.3.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 140.401801][ T25] audit: type=1326 audit(1791961340.056:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.3.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 140.431493][ T25] audit: type=1326 audit(1791961340.056:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.3.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 140.461312][ T25] audit: type=1326 audit(1791961340.056:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.3.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 140.490611][ T25] audit: type=1326 audit(1791961340.056:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.3.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 140.804826][ T25] audit: type=1326 audit(1791961340.056:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.3.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 140.869107][ T25] audit: type=1326 audit(1791961340.056:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.3.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 140.931953][ T25] audit: type=1326 audit(1791961340.056:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.3.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 141.010319][ T25] audit: type=1326 audit(1791961340.056:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.3.430" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e367f2d9 code=0x7ffc0000 [ 141.568623][ T5645] loop1: detected capacity change from 0 to 16 [ 141.815326][ T5645] erofs: (device loop1): mounted with root inode @ nid 36. [ 142.333519][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'. [ 142.348651][ T5662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'. [ 142.562732][ T4229] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 142.962563][ T4229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.980577][ T4229] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 142.990892][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.002653][ T5665] netlink: 'syz.2.439': attribute type 1 has an invalid length. [ 143.064433][ T4229] as10x_usb: device has been detected [ 143.070444][ T4229] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 143.076236][ T5671] xt_hashlimit: size too large, truncated to 1048576 [ 143.233608][ T4229] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 143.250094][ T4229] as10x_usb: error during firmware upload part1 [ 143.257736][ T4229] Registered device Abilis Systems DVB-Titan [ 143.271049][ T4229] usb 2-1: USB disconnect, device number 13 [ 143.558148][ T4229] Unregistered device Abilis Systems DVB-Titan [ 143.565608][ T4229] as10x_usb: device has been disconnected [ 144.012618][ T4315] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 144.610896][ T5683] loop1: detected capacity change from 0 to 16 [ 144.666521][ T5683] erofs: (device loop1): mounted with root inode @ nid 36. [ 144.985007][ T4315] usb 1-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 144.997954][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 145.017128][ T4315] usb 1-1: Product: syz [ 145.021389][ T4315] usb 1-1: Manufacturer: syz [ 145.242792][ T4315] uas 1-1:1.0: Interface 0 is not authorized for usage [ 145.251473][ T4315] usbtest 1-1:1.0: Interface 0 is not authorized for usage [ 145.370710][ T25] kauditd_printk_skb: 80 callbacks suppressed [ 145.370724][ T25] audit: type=1326 audit(1791961345.066:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.0.443" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 145.415124][ T25] audit: type=1326 audit(1791961345.096:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.0.443" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 145.445300][ T25] audit: type=1326 audit(1791961345.096:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.0.443" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 145.482112][ T25] audit: type=1326 audit(1791961345.096:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.0.443" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa79936af6b code=0x7ffc0000 [ 145.582690][ T5701] capability: warning: `syz.4.450' uses deprecated v2 capabilities in a way that may be insecure [ 145.744940][ T25] audit: type=1326 audit(1791961345.446:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.0.443" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 145.828008][ T5714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'. [ 145.843102][ T5714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.454'. [ 145.915854][ T25] audit: type=1326 audit(1791961345.446:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.0.443" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 146.033891][ T25] audit: type=1326 audit(1791961345.446:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.0.443" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 146.090842][ T25] audit: type=1326 audit(1791961345.446:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.0.443" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 146.117063][ T25] audit: type=1326 audit(1791961345.446:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.0.443" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79936b2d9 code=0x7ffc0000 [ 146.203537][ T25] audit: type=1326 audit(1791961345.446:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5677 comm="syz.0.443" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa79936b042 code=0x7ffc0000 [ 147.161924][ T4315] usb 1-1: USB disconnect, device number 12 [ 147.698884][ T5741] Cannot find add_set index 1 as target [ 147.867327][ T5745] loop0: detected capacity change from 0 to 1024 [ 148.366108][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'. [ 148.381582][ T5750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.467'. [ 148.623334][ T5745] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.656556][ T5745] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 149.261555][ T5782] overlayfs: failed to clone upperpath [ 152.368733][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 152.384187][ T5812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 152.892201][ T5817] loop0: detected capacity change from 0 to 16 [ 153.160868][ T5817] erofs: (device loop0): mounted with root inode @ nid 36. [ 155.741118][ T5852] overlayfs: missing 'lowerdir' [ 158.409251][ T5884] loop1: detected capacity change from 0 to 512 [ 158.490731][ T5884] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 158.530624][ T5884] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.012161][ T5916] overlayfs: missing 'lowerdir' [ 161.815618][ T5930] loop1: detected capacity change from 0 to 16 [ 161.884137][ T5930] erofs: (device loop1): mounted with root inode @ nid 36. [ 163.811986][ T5953] 9pnet: Insufficient options for proto=fd [ 164.778926][ T5970] overlayfs: missing 'lowerdir' [ 166.262007][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.539'. [ 167.120716][ T6000] device batadv0 entered promiscuous mode [ 167.144097][ T6000] device macvlan2 entered promiscuous mode [ 167.161170][ T6000] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 167.192964][ T6000] device batadv0 left promiscuous mode [ 167.807452][ T6002] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 167.816281][ T6002] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 167.827894][ T6002] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 168.584991][ T6009] overlayfs: missing 'lowerdir' [ 169.083456][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 170.458900][ T6044] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 170.467798][ T6044] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 170.479603][ T6044] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 173.090025][ T6073] overlayfs: missing 'lowerdir' [ 173.895374][ T6079] capability: warning: `syz.3.569' uses 32-bit capabilities (legacy support in use) [ 174.216714][ T6091] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 174.225627][ T6091] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 174.237437][ T6091] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 175.642768][ T4233] Bluetooth: hci2: command 0x0406 tx timeout [ 175.649268][ T4233] Bluetooth: hci1: command 0x0406 tx timeout [ 175.687175][ T4233] Bluetooth: hci3: command 0x0406 tx timeout [ 175.732548][ T4233] Bluetooth: hci0: command 0x0406 tx timeout [ 176.831988][ T6126] overlayfs: missing 'lowerdir' [ 177.204404][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 178.375371][ T6158] overlayfs: missing 'workdir' [ 178.493875][ T6160] overlayfs: missing 'lowerdir' [ 179.619007][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.600'. [ 180.791292][ T6197] overlayfs: missing 'lowerdir' [ 181.909363][ T6213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.614'. [ 181.952610][ T6213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.614'. [ 181.961490][ T6213] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 182.277885][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.616'. [ 184.000575][ T6244] overlayfs: missing 'workdir' [ 184.416105][ T6249] mmap: syz.4.625 (6249): VmData 37523456 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 184.983257][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'. [ 185.830751][ T6269] netlink: 'syz.2.632': attribute type 4 has an invalid length. [ 185.875650][ T6269] netlink: 17 bytes leftover after parsing attributes in process `syz.2.632'. [ 186.455992][ T6283] overlayfs: missing 'workdir' [ 187.502918][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.642'. [ 188.765211][ T6322] overlayfs: missing 'lowerdir' [ 189.298179][ T6330] autofs4:pid:6330:autofs_fill_super: called with bogus options [ 191.929461][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 192.773079][ T6376] overlayfs: failed to clone upperpath [ 194.045223][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.051712][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.630080][ T6459] overlayfs: failed to clone upperpath [ 200.184199][ T6512] overlayfs: failed to clone upperpath [ 200.532550][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 200.618136][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 200.627067][ T6518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.695'. [ 200.642702][ T6511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.695'. [ 200.758600][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.696'. [ 204.214656][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.714'. [ 211.372142][ T6631] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 212.186795][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.740'. [ 212.202748][ T6652] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.211860][ T6652] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.220683][ T6652] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.229501][ T6652] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.239456][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.740'. [ 212.701764][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.743'. [ 212.716858][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.743'. [ 217.664553][ T6696] overlayfs: failed to clone upperpath [ 217.915902][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.755'. [ 217.931302][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'. [ 222.980782][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'. [ 222.996697][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.766'. [ 223.952655][ T6747] chnl_net:caif_netlink_parms(): no params data found [ 224.035554][ T6747] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.042883][ T6747] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.051031][ T6747] device bridge_slave_0 entered promiscuous mode [ 224.091205][ T6747] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.107016][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.129923][ T6747] device bridge_slave_1 entered promiscuous mode [ 224.333802][ T6747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.391335][ T6747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.503943][ T6747] team0: Port device team_slave_0 added [ 224.511709][ T6747] team0: Port device team_slave_1 added [ 224.823615][ T6747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.958603][ T6747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.254513][ T6747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.277498][ T6747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.293223][ T6747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.395537][ T6747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.632916][ T6747] device hsr_slave_0 entered promiscuous mode [ 225.641975][ T6747] device hsr_slave_1 entered promiscuous mode [ 225.654626][ T6747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.664059][ T6747] Cannot create hsr debugfs directory [ 225.931754][ T4233] Bluetooth: hci2: command 0x0409 tx timeout [ 226.162678][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 226.609516][ T6747] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.306891][ T6747] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.438565][ T6747] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.480445][ T6747] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 227.751829][ T6747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.799743][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.818015][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.866458][ T4328] device hsr_slave_0 left promiscuous mode [ 228.035800][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 228.069936][ T4328] device hsr_slave_1 left promiscuous mode [ 228.083017][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.119729][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.139376][ T4328] device bridge_slave_1 left promiscuous mode [ 228.161910][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.219276][ T4328] device bridge_slave_0 left promiscuous mode [ 228.257858][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.874091][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 228.939529][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 228.970162][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.985524][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.064649][ T4328] bond0 (unregistering): Released all slaves [ 230.042544][ T4315] Bluetooth: hci2: command 0x040f tx timeout [ 230.179678][ T6747] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.219066][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.245937][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.268908][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.276091][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.316096][ T6879] batman_adv: batadv0: Adding interface: ip6gretap1 [ 230.332120][ T6879] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.382504][ T6879] batman_adv: batadv0: Interface activated: ip6gretap1 [ 230.408254][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.428665][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.438819][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.447960][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.455075][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.463392][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.514465][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.541079][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.587630][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.612198][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.625183][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.736912][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.801544][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.813880][ T6747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.825772][ T6747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.916622][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.927675][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.226592][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.512122][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 232.640279][ T6450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.664368][ T6450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.725368][ T6933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.810'. [ 232.849105][ T6747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.883445][ T6933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.810'. [ 232.960239][ T6935] netlink: 60 bytes leftover after parsing attributes in process `syz.1.810'. [ 232.992847][ T6937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.810'. [ 235.006667][ T4202] ------------[ cut here ]------------ [ 235.013419][ T4202] WARNING: CPU: 1 PID: 4202 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 235.028170][ T4202] Modules linked in: [ 235.032640][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 235.041215][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 235.053203][ T4202] Workqueue: hci4 hci_conn_timeout [ 235.061053][ T4202] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 235.067779][ T4202] Code: 6b 8e e8 24 3d dd f8 48 8b 35 15 fd 89 05 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a6 ba 6c f8 e8 01 f8 97 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 235.090593][ T4202] RSP: 0000:ffffc9000306fc08 EFLAGS: 00010293 [ 235.098629][ T4202] RAX: ffffffff88e12b5f RBX: ffff88807c1ae138 RCX: ffff88801b785940 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 235.108121][ T4202] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 235.122965][ T4202] RBP: 00000000ffffffff R08: ffff88807c1ae013 R09: 1ffff1100f835c02 [ 235.132255][ T4202] R10: dffffc0000000000 R11: ffffed100f835c03 R12: ffff88802c702008 [ 235.141640][ T4202] R13: dffffc0000000000 R14: ffff88807c1ae000 R15: ffff88807c1ae010 [ 235.150888][ T4202] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 235.161790][ T4202] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.169499][ T4202] CR2: 0000200000b8d000 CR3: 000000007240f000 CR4: 00000000003506e0 [ 235.179911][ T4202] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.189496][ T4202] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.199529][ T4202] Call Trace: [ 235.203519][ T4202] [ 235.208127][ T4202] process_one_work+0x867/0xff0 [ 235.214382][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 235.223763][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 235.230088][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 235.236188][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 235.243518][ T4202] ? wq_worker_running+0x97/0x170 [ 235.249782][ T4202] worker_thread+0xad7/0x12a0 [ 235.255473][ T4202] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 235.263333][ T4202] kthread+0x42e/0x520 [ 235.268132][ T4202] ? rcu_lock_release+0x20/0x20 [ 235.274059][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 235.279600][ T4202] ret_from_fork+0x1f/0x30 [ 235.285344][ T4202] [ 235.288994][ T4202] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 235.296278][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 235.303823][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 235.313879][ T4202] Workqueue: hci4 hci_conn_timeout [ 235.319003][ T4202] Call Trace: [ 235.322277][ T4202] [ 235.325209][ T4202] dump_stack_lvl+0x188/0x250 [ 235.329894][ T4202] ? show_regs_print_info+0x20/0x20 [ 235.335096][ T4202] ? load_image+0x410/0x410 [ 235.339613][ T4202] panic+0x2f8/0x850 [ 235.343513][ T4202] ? bpf_jit_dump+0xd0/0xd0 [ 235.348015][ T4202] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 235.353652][ T4202] ? __warn+0x230/0x2b0 [ 235.357808][ T4202] ? hci_conn_timeout+0x24f/0x450 [ 235.362859][ T4202] __warn+0x248/0x2b0 [ 235.366840][ T4202] ? hci_conn_timeout+0x24f/0x450 [ 235.371872][ T4202] report_bug+0x1b9/0x2e0 [ 235.376205][ T4202] handle_bug+0x3a/0x70 [ 235.380364][ T4202] exc_invalid_op+0x16/0x40 [ 235.384869][ T4202] asm_exc_invalid_op+0x16/0x20 [ 235.389717][ T4202] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 235.395363][ T4202] Code: 6b 8e e8 24 3d dd f8 48 8b 35 15 fd 89 05 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a6 ba 6c f8 e8 01 f8 97 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 235.414982][ T4202] RSP: 0000:ffffc9000306fc08 EFLAGS: 00010293 [ 235.421062][ T4202] RAX: ffffffff88e12b5f RBX: ffff88807c1ae138 RCX: ffff88801b785940 [ 235.429034][ T4202] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 235.437007][ T4202] RBP: 00000000ffffffff R08: ffff88807c1ae013 R09: 1ffff1100f835c02 [ 235.444982][ T4202] R10: dffffc0000000000 R11: ffffed100f835c03 R12: ffff88802c702008 [ 235.452957][ T4202] R13: dffffc0000000000 R14: ffff88807c1ae000 R15: ffff88807c1ae010 [ 235.460942][ T4202] ? hci_conn_timeout+0x24f/0x450 [ 235.465981][ T4202] ? hci_conn_timeout+0x24f/0x450 [ 235.471009][ T4202] process_one_work+0x867/0xff0 [ 235.475887][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 235.481526][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 235.486833][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 235.491868][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 235.497417][ T4202] ? wq_worker_running+0x97/0x170 [ 235.502446][ T4202] worker_thread+0xad7/0x12a0 [ 235.507141][ T4202] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 235.513044][ T4202] kthread+0x42e/0x520 [ 235.517112][ T4202] ? rcu_lock_release+0x20/0x20 [ 235.521960][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 235.526550][ T4202] ret_from_fork+0x1f/0x30 [ 235.530988][ T4202] [ 235.534239][ T4202] Kernel Offset: disabled [ 235.538743][ T4202] Rebooting in 86400 seconds..