last executing test programs: 2m2.601857724s ago: executing program 5 (id=529): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x80000000, 0x0, 0x17, 0x2}}, 0x20) shutdown(r0, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001340)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x8000) 2m2.453419017s ago: executing program 5 (id=533): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="ad432bbd70000000000002f000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x20048810) 2m2.344987539s ago: executing program 5 (id=535): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) openat$procfs(0xffffffffffffff9c, &(0x7f00000034c0)='/proc/consoles\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) open(0x0, 0x143142, 0x80) io_pgetevents(0x0, 0x200, 0x0, 0x0, 0x0, 0x0) 2m1.372444018s ago: executing program 5 (id=544): openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) 1m59.080603215s ago: executing program 5 (id=562): openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0xffff, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0xfffd, @multicast2}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fe6000/0x12000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x7, 0x2f7}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m58.805176478s ago: executing program 5 (id=566): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000010c0)={[], 0x11}, 0x0, 0x100) 1m55.963283662s ago: executing program 1 (id=592): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4021) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000000)=0x9, 0x4) 1m55.685209077s ago: executing program 1 (id=595): r0 = socket(0x2, 0x80802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000a80)={&(0x7f00000007c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @private=0xa010101}}}], 0x20}, 0x1c880) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0xfffffff9}], 0x1, 0x10103, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x5c1}], 0x1}, 0x84) 1m54.632568762s ago: executing program 1 (id=599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0x3, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x3], 0x3, [0xb, 0x3, 0xad21, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x38}}, 0x200c8080) 1m54.13865396s ago: executing program 1 (id=602): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(0x0, r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 1m53.565604383s ago: executing program 1 (id=607): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4021) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000000)=0x9, 0x4) 1m52.898598231s ago: executing program 1 (id=613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x130bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0x1}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x6}, {0x6, 0xfffffffd, 0xf65, 0x7}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3ff, 0x0, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff7}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1m51.995744627s ago: executing program 32 (id=613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x130bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0x1}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x6}, {0x6, 0xfffffffd, 0xf65, 0x7}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3ff, 0x0, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff7}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1m43.62154256s ago: executing program 33 (id=566): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000010c0)={[], 0x11}, 0x0, 0x100) 59.520674217s ago: executing program 3 (id=804): bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) read$FUSE(r2, &(0x7f0000001ac0)={0x2020}, 0x2020) 57.500591324s ago: executing program 3 (id=807): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr\x00') getdents(r4, &(0x7f0000001080)=""/4096, 0x1000) getdents64(r4, 0x0, 0x0) 55.602449293s ago: executing program 3 (id=808): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x2, 0x358}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) 48.555912429s ago: executing program 3 (id=824): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 48.304053881s ago: executing program 3 (id=827): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r5, &(0x7f0000000280)={0x2020}, 0x202a) 46.402619836s ago: executing program 3 (id=830): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000300)=[{0x9, 0x6210, 0x0, 0x0}, {0x9, 0x8200, 0x0, 0x0}, {0x0, 0x11, 0x0, 0x0}], 0x3}) 31.164538605s ago: executing program 34 (id=830): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000300)=[{0x9, 0x6210, 0x0, 0x0}, {0x9, 0x8200, 0x0, 0x0}, {0x0, 0x11, 0x0, 0x0}], 0x3}) 28.136092278s ago: executing program 7 (id=851): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x2, 0x358}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62"], 0x10b8}, 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) 26.101229679s ago: executing program 7 (id=852): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0x20) read(r0, &(0x7f00000000c0)=""/66, 0x42) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) 24.77556838s ago: executing program 7 (id=857): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r5, &(0x7f0000000280)={0x2020}, 0x202a) 22.999574528s ago: executing program 7 (id=859): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e24, 0xaa68, @loopback, 0x9}}, 0x6, 0x7, 0x0, 0xffffffff, 0x3}, &(0x7f0000000340)=0x98) 17.406582944s ago: executing program 7 (id=872): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff01000000000000000000000000000100000000000000000000ffff000000000000000000000000000080a0000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1414230000000033"], 0xf8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@loopback, @in=@local, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x502a, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x40}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x2, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c00"], 0x1d8}}, 0x0) 17.037782581s ago: executing program 7 (id=874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@void, @void, @eth={@multicast, @remote, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x68, 0x0, 0x9, 0x11, 0x0, @multicast2, @multicast1}}}}}}, 0x26) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0x0, 0x2}, 0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000140)={r5, 0x1, 0x0, 0x4000}) r6 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1, 0x141000) r7 = syz_io_uring_setup(0x4429, &(0x7f0000000480)={0x0, 0x80042b5, 0x1000, 0x3, 0x2cf, 0x0, r6}, &(0x7f0000000540), &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r7, 0x12, 0x0, 0x0) 13.192249848s ago: executing program 2 (id=886): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0x20) read(r0, &(0x7f00000000c0)=""/66, 0x42) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) 11.117726009s ago: executing program 6 (id=890): io_setup(0xfb, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="13", 0x1}]) 11.004660633s ago: executing program 2 (id=892): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000005c00), 0x0, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 9.075391303s ago: executing program 2 (id=894): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000000c0)=0xfff, 0x4) syz_open_dev$MSR(0x0, 0x0, 0x0) 7.680361777s ago: executing program 2 (id=895): socket$inet6(0xa, 0x2, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000200)='./file1\x00', 0x12e) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000040)=0x2, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 6.118791355s ago: executing program 6 (id=900): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x400]}, 0x8) ioperm(0x5, 0x5, 0x20) unshare(0x20000400) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 4.397110263s ago: executing program 2 (id=901): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001440)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_POLICE={0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0xba37}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x48}}, 0x24040084) 4.284480542s ago: executing program 6 (id=903): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$cont(0x18, r0, 0x8, 0x8000010) 4.213539122s ago: executing program 0 (id=904): syz_open_dev$sndpcmp(&(0x7f0000000040), 0x5, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) 3.803804802s ago: executing program 6 (id=907): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc2}}) 3.255254491s ago: executing program 6 (id=908): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x3, &(0x7f00000002c0)=[{0x745b, 0x0, 0x37, 0x9}, {0x23, 0x4, 0xf8, 0x9}, {0x5, 0x7, 0x0, 0x80000000}]}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x2, 0xfffffffe, 0xfffffffd, 0x0, 0x7cce8c743ee810df, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x9, 0x1101}) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0xe) select(0x40, &(0x7f0000003cc0)={0x2, 0xfffffffffffffff9, 0x401, 0xfffffffffffffffa, 0xffffffff, 0x5, 0x1e545919}, &(0x7f0000003d00)={0x8, 0x9, 0x1, 0xd, 0x200, 0x4, 0x9, 0x6}, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) close_range(r0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f0000001480)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x10441, 0x20) fallocate(r3, 0x0, 0x3ffd, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) open(0x0, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioperm(0x0, 0x1, 0x1) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) r6 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 3.235911974s ago: executing program 0 (id=909): syz_mount_image$fuse(&(0x7f0000000080), 0x0, 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x4}}, {@nojournal_checksum}, {@stripe={'stripe', 0x3d, 0x7}}, {@nobarrier}, {@data_ordered}, {@test_dummy_encryption}, {@nogrpid}, {@debug}]}, 0xd, 0x607, &(0x7f0000000b00)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listen(0xffffffffffffffff, 0xfff) 3.009738582s ago: executing program 4 (id=910): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x7) 2.616478846s ago: executing program 0 (id=911): io_setup(0xfb, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="13", 0x1}]) 2.616210296s ago: executing program 4 (id=912): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0], 0x1, 0x196, &(0x7f0000000e00)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000006c0)=""/165, 0xa5) 2.568002765s ago: executing program 6 (id=913): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x200}) readv(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_complete(r0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) 2.395910649s ago: executing program 4 (id=914): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@nodelalloc}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000005}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x81}}], [{@flag='ro'}]}, 0xfd, 0x573, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.29193723s ago: executing program 0 (id=915): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0xfe, 0x2b9, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) pwrite64(r0, 0x0, 0x0, 0x8080c60) 2.041274295s ago: executing program 4 (id=916): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x810, r0, 0x5a5f5000) 1.876637452s ago: executing program 0 (id=917): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000005c00), 0x0, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.843271541s ago: executing program 35 (id=874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@void, @void, @eth={@multicast, @remote, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x68, 0x0, 0x9, 0x11, 0x0, @multicast2, @multicast1}}}}}}, 0x26) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0x0, 0x2}, 0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000140)={r5, 0x1, 0x0, 0x4000}) r6 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1, 0x141000) r7 = syz_io_uring_setup(0x4429, &(0x7f0000000480)={0x0, 0x80042b5, 0x1000, 0x3, 0x2cf, 0x0, r6}, &(0x7f0000000540), &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r7, 0x12, 0x0, 0x0) 1.769382717s ago: executing program 4 (id=919): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/67, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000e40)) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) 1.680979014s ago: executing program 2 (id=920): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd2(0x1ff, 0x80001) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000000)={0x1, r5}) r6 = eventfd(0x8) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000480)=r6) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) 627.06µs ago: executing program 4 (id=921): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {0x0, 0x0, 0x80, 0x1}, 0x7, [0x0, 0x80000000, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x77, 0x7, 0xfffd, 0x2, 0x2, 0x4, 0x0, 0xda5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x3, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd, 0x5], [0xffffffff, 0x679, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd, 0x3d, 0xffff, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x80, 0x1, 0x200, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x81, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x401, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x101, 0x0, 0xb68, 0x0, 0x0, 0x0, 0x0, 0x40001, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x0, 0x29a, 0x0, 0x101, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1]}, 0x45c) readv(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x401) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r6, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 0s ago: executing program 0 (id=922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) gettid() r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r4, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r4, r4, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) kernel console output (not intermixed with test programs): cted cc 0x1001 length: 249 > 9 [ 80.169154][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.175418][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.181983][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.189908][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.197060][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.204236][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.210380][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.224389][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.226581][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.232839][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.245713][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.246720][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.260413][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.265137][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.277342][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.284628][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.294098][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.306653][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.314432][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.023727][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 81.163802][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 81.381126][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 81.422558][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 81.511137][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.518850][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.526248][ T5821] bridge_slave_0: entered allmulticast mode [ 81.533866][ T5821] bridge_slave_0: entered promiscuous mode [ 81.542454][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 81.580483][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 81.611538][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.618777][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.626109][ T5821] bridge_slave_1: entered allmulticast mode [ 81.633531][ T5821] bridge_slave_1: entered promiscuous mode [ 81.711508][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.718793][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.726108][ T5823] bridge_slave_0: entered allmulticast mode [ 81.734101][ T5823] bridge_slave_0: entered promiscuous mode [ 81.795007][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.802543][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.810212][ T5823] bridge_slave_1: entered allmulticast mode [ 81.817561][ T5823] bridge_slave_1: entered promiscuous mode [ 81.839274][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.902609][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.985164][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.992550][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.999771][ T5826] bridge_slave_0: entered allmulticast mode [ 82.007210][ T5826] bridge_slave_0: entered promiscuous mode [ 82.017985][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.040458][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.047579][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.055133][ T5820] bridge_slave_0: entered allmulticast mode [ 82.062663][ T5820] bridge_slave_0: entered promiscuous mode [ 82.097932][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.105293][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.112554][ T5826] bridge_slave_1: entered allmulticast mode [ 82.120290][ T5826] bridge_slave_1: entered promiscuous mode [ 82.130004][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.155975][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.163195][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.170489][ T5820] bridge_slave_1: entered allmulticast mode [ 82.177852][ T5820] bridge_slave_1: entered promiscuous mode [ 82.187512][ T5821] team0: Port device team_slave_0 added [ 82.236674][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.243930][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.251137][ T5835] bridge_slave_0: entered allmulticast mode [ 82.258721][ T5835] bridge_slave_0: entered promiscuous mode [ 82.281698][ T5821] team0: Port device team_slave_1 added [ 82.287450][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.294701][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.301881][ T5822] bridge_slave_0: entered allmulticast mode [ 82.309676][ T5822] bridge_slave_0: entered promiscuous mode [ 82.310256][ T5832] Bluetooth: hci1: command tx timeout [ 82.315523][ T5831] Bluetooth: hci2: command tx timeout [ 82.321160][ T5142] Bluetooth: hci0: command tx timeout [ 82.321413][ T5142] Bluetooth: hci3: command tx timeout [ 82.332425][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.337693][ T5825] Bluetooth: hci4: command tx timeout [ 82.348540][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.357113][ T5822] bridge_slave_1: entered allmulticast mode [ 82.365264][ T5822] bridge_slave_1: entered promiscuous mode [ 82.389159][ T5825] Bluetooth: hci5: command tx timeout [ 82.404417][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.411635][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.418743][ T5835] bridge_slave_1: entered allmulticast mode [ 82.426596][ T5835] bridge_slave_1: entered promiscuous mode [ 82.477889][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.490836][ T5823] team0: Port device team_slave_0 added [ 82.512063][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.550711][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.562684][ T5823] team0: Port device team_slave_1 added [ 82.584693][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.594845][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.601914][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.628404][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.643211][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.681868][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.705836][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.713047][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.739485][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.752684][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.790108][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.835308][ T5826] team0: Port device team_slave_0 added [ 82.841638][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.848571][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.875145][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.901923][ T5820] team0: Port device team_slave_0 added [ 82.924661][ T5826] team0: Port device team_slave_1 added [ 82.931081][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.938001][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.964291][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.991873][ T5820] team0: Port device team_slave_1 added [ 83.000930][ T5822] team0: Port device team_slave_0 added [ 83.027832][ T5835] team0: Port device team_slave_0 added [ 83.062695][ T5822] team0: Port device team_slave_1 added [ 83.096455][ T5835] team0: Port device team_slave_1 added [ 83.141965][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.148913][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.175977][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.188983][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.195985][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.222368][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.247196][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.254177][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.280126][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.297289][ T5821] hsr_slave_0: entered promiscuous mode [ 83.304093][ T5821] hsr_slave_1: entered promiscuous mode [ 83.364439][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.372186][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.398378][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.411323][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.418267][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.445490][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.475740][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.483007][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.509753][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.595431][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.602532][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.628939][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.646824][ T5823] hsr_slave_0: entered promiscuous mode [ 83.653876][ T5823] hsr_slave_1: entered promiscuous mode [ 83.660541][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 83.666298][ T5823] Cannot create hsr debugfs directory [ 83.672680][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.680189][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.706264][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.834365][ T5826] hsr_slave_0: entered promiscuous mode [ 83.841036][ T5826] hsr_slave_1: entered promiscuous mode [ 83.847182][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 83.853093][ T5826] Cannot create hsr debugfs directory [ 83.935053][ T5820] hsr_slave_0: entered promiscuous mode [ 83.943090][ T5820] hsr_slave_1: entered promiscuous mode [ 83.949928][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 83.955632][ T5820] Cannot create hsr debugfs directory [ 83.966725][ T5835] hsr_slave_0: entered promiscuous mode [ 83.973490][ T5835] hsr_slave_1: entered promiscuous mode [ 83.980059][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 83.985769][ T5835] Cannot create hsr debugfs directory [ 84.046432][ T5822] hsr_slave_0: entered promiscuous mode [ 84.053097][ T5822] hsr_slave_1: entered promiscuous mode [ 84.059345][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 84.065089][ T5822] Cannot create hsr debugfs directory [ 84.389206][ T5142] Bluetooth: hci1: command tx timeout [ 84.390068][ T5838] Bluetooth: hci3: command tx timeout [ 84.394798][ T5832] Bluetooth: hci2: command tx timeout [ 84.400365][ T5831] Bluetooth: hci0: command tx timeout [ 84.405548][ T5825] Bluetooth: hci4: command tx timeout [ 84.469517][ T5825] Bluetooth: hci5: command tx timeout [ 84.686533][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.730568][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.748000][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.778977][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.833109][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.847879][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.861204][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.883166][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.946680][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.965033][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.984161][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.024495][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.120215][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.135916][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.160370][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.187341][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.281958][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.296568][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.308617][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.325980][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.340201][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.473447][ T5820] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.484663][ T5820] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.502632][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.512744][ T5820] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.536498][ T5820] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.554126][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.564866][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.572086][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.598482][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.605594][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.645183][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.690889][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.697996][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.715593][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.728500][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.735714][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.823821][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.856310][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.863444][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.876650][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.918504][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.925625][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.985874][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.057277][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.088399][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.095564][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.160511][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.167648][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.260227][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.300537][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.393044][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.400228][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.470364][ T5825] Bluetooth: hci0: command tx timeout [ 86.470793][ T5838] Bluetooth: hci4: command tx timeout [ 86.475824][ T5825] Bluetooth: hci1: command tx timeout [ 86.481736][ T5831] Bluetooth: hci3: command tx timeout [ 86.487549][ T5832] Bluetooth: hci2: command tx timeout [ 86.512542][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.544845][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.554798][ T5832] Bluetooth: hci5: command tx timeout [ 86.622920][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.663691][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.670864][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.684722][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.691874][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.728729][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.735907][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.866518][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.925264][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.942078][ T5821] veth0_vlan: entered promiscuous mode [ 86.983057][ T5821] veth1_vlan: entered promiscuous mode [ 87.128014][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.154646][ T5821] veth0_macvtap: entered promiscuous mode [ 87.196146][ T5821] veth1_macvtap: entered promiscuous mode [ 87.311292][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.346264][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.373557][ T5835] veth0_vlan: entered promiscuous mode [ 87.417762][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.452530][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.470860][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.504887][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.537010][ T5835] veth1_vlan: entered promiscuous mode [ 87.568041][ T5826] veth0_vlan: entered promiscuous mode [ 87.674527][ T5826] veth1_vlan: entered promiscuous mode [ 87.702530][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.718460][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.727523][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.752571][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.812968][ T5823] veth0_vlan: entered promiscuous mode [ 87.833421][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.835435][ T5835] veth0_macvtap: entered promiscuous mode [ 87.853869][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.895413][ T5823] veth1_vlan: entered promiscuous mode [ 87.906405][ T5835] veth1_macvtap: entered promiscuous mode [ 87.964249][ T5822] veth0_vlan: entered promiscuous mode [ 87.980228][ T5826] veth0_macvtap: entered promiscuous mode [ 87.984431][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.993104][ T5822] veth1_vlan: entered promiscuous mode [ 88.018409][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.047678][ T5826] veth1_macvtap: entered promiscuous mode [ 88.073552][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.193113][ T148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.230083][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.237412][ T148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.247915][ T5823] veth0_macvtap: entered promiscuous mode [ 88.256499][ T5822] veth0_macvtap: entered promiscuous mode [ 88.270587][ T148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.284339][ T5823] veth1_macvtap: entered promiscuous mode [ 88.296804][ T5976] syzkaller0: entered promiscuous mode [ 88.303552][ T5976] syzkaller0: entered allmulticast mode [ 88.312180][ T148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.323701][ T5822] veth1_macvtap: entered promiscuous mode [ 88.335986][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.411649][ T1124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.431176][ T3481] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.444174][ T3481] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.472254][ T3481] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.495545][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.544687][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.552763][ T5832] Bluetooth: hci3: command tx timeout [ 88.552798][ T5832] Bluetooth: hci4: command tx timeout [ 88.559248][ T5832] Bluetooth: hci2: command tx timeout [ 88.565039][ T5838] Bluetooth: hci0: command tx timeout [ 88.575659][ T5831] Bluetooth: hci1: command tx timeout [ 88.581193][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.601174][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.616253][ T5980] loop3: detected capacity change from 0 to 128 [ 88.624067][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.639599][ T5838] Bluetooth: hci5: command tx timeout [ 88.659721][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.681184][ T5980] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.697114][ T5980] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.751052][ T1124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.753382][ T5980] syz.3.7 (pid 5980) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 88.770048][ T5820] veth0_vlan: entered promiscuous mode [ 88.791701][ T5980] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 88.800814][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.801237][ T5980] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 88.808627][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.827785][ T1124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.837390][ T1124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.854663][ T5820] veth1_vlan: entered promiscuous mode [ 88.874954][ T1124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.906623][ T1124] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.915978][ T1124] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.928866][ T1124] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.946965][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.958761][ T1124] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.969318][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.073849][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.083444][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.192796][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.200619][ T5820] veth0_macvtap: entered promiscuous mode [ 89.230876][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.236930][ T5820] veth1_macvtap: entered promiscuous mode [ 89.321592][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.351045][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.373790][ T5990] loop0: detected capacity change from 0 to 64 [ 89.456371][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.497736][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.516396][ T5993] loop2: detected capacity change from 0 to 1024 [ 89.545359][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.548243][ T5821] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.578453][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.679192][ T5993] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 89.692830][ T5993] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 89.702512][ T5997] loop0: detected capacity change from 0 to 16 [ 89.720030][ T5997] erofs (device loop0): DAX unsupported by block device. Turning off DAX. [ 89.736852][ T5993] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.3: Failed to acquire dquot type 0 [ 89.750320][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.758141][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.786506][ T1124] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.811181][ T1124] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.892250][ T6001] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET) [ 89.960411][ T5993] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 90.019232][ T1124] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.030517][ T5993] EXT4-fs (loop2): 1 truncate cleaned up [ 90.037991][ T5993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.103986][ T1124] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.482587][ T5997] erofs (device loop0): mounted with root inode @ nid 36. [ 90.539367][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.567511][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.599615][ T5932] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.705303][ T6005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.740325][ T6005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.748912][ T6017] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 90.776657][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.809783][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 90.833540][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.847975][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.862847][ T5932] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 90.878102][ T5932] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 90.896416][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.942698][ T5932] usb 5-1: config 0 descriptor?? [ 90.994448][ T6021] loop2: detected capacity change from 0 to 136 [ 91.126469][ T926] cfg80211: failed to load regulatory.db [ 91.395261][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6'. [ 91.402320][ T5932] HID 045e:07da: Invalid code 65791 type 1 [ 91.465709][ T5932] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0001/input/input6 [ 91.541015][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6'. [ 91.584892][ T6032] loop2: detected capacity change from 0 to 256 [ 91.590392][ T5932] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 91.646595][ T6032] ======================================================= [ 91.646595][ T6032] WARNING: The mand mount option has been deprecated and [ 91.646595][ T6032] and is ignored by this kernel. Remove the mand [ 91.646595][ T6032] option from the mount to silence this warning. [ 91.646595][ T6032] ======================================================= [ 91.761742][ T5932] usb 5-1: USB disconnect, device number 2 [ 91.763768][ T6035] binder: BINDER_SET_CONTEXT_MGR already set [ 91.789825][ T6035] binder: 6034:6035 ioctl 4018620d 200000004a80 returned -16 [ 91.957793][ T6032] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 92.142503][ T6037] fido_id[6037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 92.259363][ T5965] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 92.419226][ T5965] usb 6-1: device descriptor read/64, error -71 [ 92.509698][ T6056] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24'. [ 92.689136][ T5965] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 92.839180][ T5965] usb 6-1: device descriptor read/64, error -71 [ 92.878486][ T5983] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.898511][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 93.010164][ T5965] usb usb6-port1: attempt power cycle [ 93.059884][ T5983] usb 5-1: device descriptor read/64, error -71 [ 93.293532][ T6081] syzkaller0: entered promiscuous mode [ 93.323616][ T6081] syzkaller0: entered allmulticast mode [ 93.339468][ T5983] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.380257][ T5965] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 93.442056][ T5965] usb 6-1: device descriptor read/8, error -71 [ 93.463783][ T6085] loop0: detected capacity change from 0 to 16 [ 93.494693][ T6085] erofs (device loop0): mounted with root inode @ nid 36. [ 93.517012][ T5983] usb 5-1: device descriptor read/64, error -71 [ 93.639631][ T5983] usb usb5-port1: attempt power cycle [ 93.689590][ T5965] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 93.707516][ T6090] 9p: Bad value for 'rfdno' [ 93.722335][ T5965] usb 6-1: device descriptor read/8, error -71 [ 93.840192][ T5965] usb usb6-port1: unable to enumerate USB device [ 93.962632][ T6095] loop3: detected capacity change from 0 to 4096 [ 93.980046][ T5983] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 94.020619][ T5983] usb 5-1: device descriptor read/8, error -71 [ 94.257181][ T6101] loop2: detected capacity change from 0 to 16 [ 94.279472][ T5983] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 94.298653][ T6101] erofs (device loop2): DAX unsupported by block device. Turning off DAX. [ 94.346508][ T5983] usb 5-1: device descriptor read/8, error -71 [ 94.459479][ T5983] usb usb5-port1: unable to enumerate USB device [ 94.571525][ T6107] loop0: detected capacity change from 0 to 128 [ 94.621166][ T6107] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.697675][ T6101] erofs (device loop2): mounted with root inode @ nid 36. [ 94.705699][ T6107] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.747111][ T6107] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 94.752862][ T6079] loop1: detected capacity change from 0 to 65536 [ 94.781338][ T6107] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 94.803124][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 94.832391][ T6079] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 94.942534][ T6079] XFS (loop1): Ending clean mount [ 94.978516][ T6079] overlayfs: missing 'lowerdir' [ 95.122281][ T5822] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 95.377047][ T6126] 9p: Bad value for 'rfdno' [ 95.499978][ T5835] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.761575][ T6137] overlayfs: failed to resolve './file0': -2 [ 96.064696][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 96.067345][ T6147] loop2: detected capacity change from 0 to 16 [ 96.111816][ T6141] loop0: detected capacity change from 0 to 4096 [ 96.153743][ T6147] erofs (device loop2): mounted with root inode @ nid 36. [ 96.193310][ T6149] syzkaller0: entered promiscuous mode [ 96.198824][ T6149] syzkaller0: entered allmulticast mode [ 96.489443][ T5918] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.629869][ T5918] usb 4-1: device descriptor read/64, error -71 [ 96.693007][ T6165] 9p: Bad value for 'rfdno' [ 96.744824][ T6166] loop5: detected capacity change from 0 to 128 [ 96.821745][ T6166] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.898364][ T6166] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.910882][ T5918] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.963404][ T6166] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 96.986303][ T6166] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 97.069551][ T5918] usb 4-1: device descriptor read/64, error -71 [ 97.194592][ T5918] usb usb4-port1: attempt power cycle [ 97.352888][ T5965] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 97.524407][ T5965] usb 5-1: device descriptor read/64, error -71 [ 97.554739][ T5918] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 97.598843][ T5820] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.609357][ T5918] usb 4-1: device descriptor read/8, error -71 [ 97.761723][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.71'. [ 97.769192][ T5965] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 97.851005][ T5918] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 97.890393][ T5918] usb 4-1: device descriptor read/8, error -71 [ 97.906477][ T6159] loop1: detected capacity change from 0 to 65536 [ 97.919184][ T5965] usb 5-1: device descriptor read/64, error -71 [ 97.927271][ T6195] syzkaller0: entered promiscuous mode [ 97.939230][ T6195] syzkaller0: entered allmulticast mode [ 97.957884][ T6192] loop0: detected capacity change from 0 to 4096 [ 97.971718][ T6159] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 98.011108][ T5918] usb usb4-port1: unable to enumerate USB device [ 98.031525][ T5965] usb usb5-port1: attempt power cycle [ 98.036277][ T6159] XFS (loop1): Ending clean mount [ 98.076439][ T6159] overlayfs: missing 'lowerdir' [ 98.221593][ T5822] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 98.389412][ T5965] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 98.449315][ T5965] usb 5-1: device descriptor read/8, error -71 [ 98.682184][ T6213] 9p: Bad value for 'rfdno' [ 98.689541][ T5965] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 98.725114][ T5965] usb 5-1: device descriptor read/8, error -71 [ 98.850780][ T6216] loop0: detected capacity change from 0 to 16 [ 98.860657][ T5965] usb usb5-port1: unable to enumerate USB device [ 98.909460][ T6216] erofs (device loop0): mounted with root inode @ nid 36. [ 99.003546][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.82'. [ 99.073370][ T6222] loop2: detected capacity change from 0 to 128 [ 99.125784][ T6222] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.145863][ T6222] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.208863][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.453822][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 99.458267][ T6232] syzkaller0: entered promiscuous mode [ 99.480851][ T6232] syzkaller0: entered allmulticast mode [ 99.903989][ T6246] binder: 6244:6246 ioctl 4018620d 0 returned -22 [ 100.151681][ T6253] 9p: Bad value for 'rfdno' [ 100.311879][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 100.334903][ T6263] loop5: detected capacity change from 0 to 128 [ 100.424663][ T6263] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.439963][ T6263] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.481841][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 100.576320][ T5820] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.594452][ T6270] syzkaller0: entered promiscuous mode [ 100.601615][ T5824] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.613710][ T6270] syzkaller0: entered allmulticast mode [ 100.749510][ T5824] usb 3-1: device descriptor read/64, error -71 [ 101.009171][ T5824] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.169402][ T5824] usb 3-1: device descriptor read/64, error -71 [ 101.227779][ T6291] binder: 6290:6291 ioctl 4018620d 0 returned -22 [ 101.299760][ T5824] usb usb3-port1: attempt power cycle [ 101.308750][ T6236] loop1: detected capacity change from 0 to 65536 [ 101.389192][ T5932] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 101.400598][ T6236] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 101.486340][ T6236] XFS (loop1): Ending clean mount [ 101.524461][ T6236] overlayfs: missing 'lowerdir' [ 101.549161][ T5932] usb 6-1: device descriptor read/64, error -71 [ 101.659164][ T5824] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.699386][ T6306] 9p: Bad value for 'rfdno' [ 101.706965][ T5822] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 101.739845][ T5824] usb 3-1: device descriptor read/8, error -71 [ 101.754295][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 101.804092][ T5932] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 101.879739][ T6310] loop3: detected capacity change from 0 to 128 [ 101.959119][ T5932] usb 6-1: device descriptor read/64, error -71 [ 101.979464][ T6310] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.001946][ T5824] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.020035][ T6310] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.031725][ T5824] usb 3-1: device descriptor read/8, error -71 [ 102.132028][ T5932] usb usb6-port1: attempt power cycle [ 102.139461][ T5824] usb usb3-port1: unable to enumerate USB device [ 102.214020][ T5821] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.286352][ T6322] syzkaller0: entered promiscuous mode [ 102.294720][ T6322] syzkaller0: entered allmulticast mode [ 102.499510][ T5932] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 102.529820][ T5932] usb 6-1: device descriptor read/8, error -71 [ 102.585474][ T6330] binder: 6329:6330 ioctl 4018620d 0 returned -22 [ 102.741584][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 102.769219][ T5932] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 102.813001][ T5932] usb 6-1: device descriptor read/8, error -71 [ 102.914363][ T6346] 9pnet_fd: Insufficient options for proto=fd [ 102.941185][ T5932] usb usb6-port1: unable to enumerate USB device [ 103.412072][ T6358] loop4: detected capacity change from 0 to 4096 [ 103.538665][ T6361] loop2: detected capacity change from 0 to 128 [ 103.577079][ T6361] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.619814][ T6361] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.969565][ T6374] binder: 6373:6374 ioctl c0306201 0 returned -14 [ 104.083521][ T6361] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-aesni,nhpoly1305-avx2)" [ 104.128323][ T6371] syzkaller0: entered promiscuous mode [ 104.167192][ T6371] syzkaller0: entered allmulticast mode [ 104.464700][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.520685][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 104.695769][ T6391] 9pnet_fd: Insufficient options for proto=fd [ 104.923379][ T6342] loop0: detected capacity change from 0 to 65536 [ 104.973568][ T6342] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 105.066728][ T6342] XFS (loop0): Ending clean mount [ 105.079226][ T5824] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 105.128563][ T6342] overlayfs: missing 'lowerdir' [ 105.220618][ T5835] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 105.239610][ T5824] usb 5-1: device descriptor read/64, error -71 [ 105.479118][ T5824] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 105.636421][ T5824] usb 5-1: device descriptor read/64, error -71 [ 105.751752][ T5824] usb usb5-port1: attempt power cycle [ 105.768992][ T6420] binder: 6419:6420 ioctl c0306201 0 returned -14 [ 105.955109][ T6424] loop0: detected capacity change from 0 to 4096 [ 106.121590][ T5824] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 106.129653][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.150495][ T5824] usb 5-1: device descriptor read/8, error -71 [ 106.269333][ T24] usb 4-1: device descriptor read/64, error -71 [ 106.401974][ T5824] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 106.443051][ T5824] usb 5-1: device descriptor read/8, error -71 [ 106.539482][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 106.568544][ T5824] usb usb5-port1: unable to enumerate USB device [ 106.688720][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 106.709633][ T24] usb 4-1: device descriptor read/64, error -71 [ 106.839514][ T24] usb usb4-port1: attempt power cycle [ 106.860280][ T6437] 9pnet_fd: Insufficient options for proto=fd [ 107.190828][ T6452] binder: 6451:6452 ioctl c0306201 0 returned -14 [ 107.209155][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 107.276201][ T24] usb 4-1: device descriptor read/8, error -71 [ 107.381973][ T6454] loop2: detected capacity change from 0 to 4096 [ 107.533402][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 107.589737][ T24] usb 4-1: device descriptor read/8, error -71 [ 107.720879][ T24] usb usb4-port1: unable to enumerate USB device [ 108.117584][ T6442] loop5: detected capacity change from 0 to 65536 [ 108.167437][ T6473] syzkaller0: entered promiscuous mode [ 108.173348][ T6473] syzkaller0: entered allmulticast mode [ 108.216008][ T6442] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 108.230629][ T6485] 9pnet_fd: Insufficient options for proto=fd [ 108.329564][ T6442] XFS (loop5): Ending clean mount [ 108.383568][ T6442] overlayfs: missing 'lowerdir' [ 108.589848][ T5820] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 108.668399][ T6499] No control pipe specified [ 109.019381][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 109.179802][ T10] usb 5-1: device descriptor read/64, error -71 [ 109.423377][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 109.505848][ T6522] 9pnet_fd: Insufficient options for proto=fd [ 109.559954][ T10] usb 5-1: device descriptor read/64, error -71 [ 109.670702][ T6528] loop3: detected capacity change from 0 to 64 [ 109.680989][ T10] usb usb5-port1: attempt power cycle [ 109.977781][ T6536] No control pipe specified [ 110.039161][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 110.083026][ T10] usb 5-1: device descriptor read/8, error -71 [ 110.334773][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 110.380172][ T10] usb 5-1: device descriptor read/8, error -71 [ 110.449232][ T6026] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.507780][ T10] usb usb5-port1: unable to enumerate USB device [ 110.602139][ T6026] usb 2-1: device descriptor read/64, error -71 [ 110.670151][ T6557] 9pnet_fd: Insufficient options for proto=fd [ 110.729626][ T6563] loop3: detected capacity change from 0 to 64 [ 110.839993][ T6026] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.996227][ T6026] usb 2-1: device descriptor read/64, error -71 [ 111.130671][ T6026] usb usb2-port1: attempt power cycle [ 111.238720][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.214'. [ 111.354396][ T6583] syzkaller0: entered promiscuous mode [ 111.378868][ T6583] syzkaller0: entered allmulticast mode [ 111.480531][ T6026] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.501727][ T6593] 9p: Bad value for 'rfdno' [ 111.511609][ T6026] usb 2-1: device descriptor read/8, error -71 [ 111.680176][ T6598] loop0: detected capacity change from 0 to 64 [ 111.760934][ T6026] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.808024][ T6026] usb 2-1: device descriptor read/8, error -71 [ 111.921151][ T6026] usb usb2-port1: unable to enumerate USB device [ 112.962815][ T6626] 9p: Bad value for 'rfdno' [ 113.070150][ T6634] loop5: detected capacity change from 0 to 128 [ 113.121042][ T6634] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.140106][ T6634] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.420135][ T6026] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.599098][ T6026] usb 1-1: Using ep0 maxpacket: 8 [ 113.600868][ T6650] syzkaller0: entered promiscuous mode [ 113.608517][ T6026] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 113.632332][ T6026] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 113.646338][ T6650] syzkaller0: entered allmulticast mode [ 113.656387][ T6026] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.665853][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.244'. [ 113.682241][ T6026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.870797][ T6664] 9p: Bad value for 'rfdno' [ 113.904431][ T5820] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.209738][ T6669] loop2: detected capacity change from 0 to 4096 [ 114.339641][ T6026] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 114.499147][ T6026] usb 5-1: device descriptor read/64, error -71 [ 114.759136][ T6026] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 114.868166][ T6698] loop2: detected capacity change from 0 to 128 [ 114.909181][ T6026] usb 5-1: device descriptor read/64, error -71 [ 114.928298][ T6698] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.958733][ T6698] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.049642][ T6026] usb usb5-port1: attempt power cycle [ 115.400107][ T6026] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 115.421639][ T6026] usb 5-1: device descriptor read/8, error -71 [ 115.525277][ T6722] loop5: detected capacity change from 0 to 4096 [ 115.649873][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.679212][ T6026] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 115.729772][ T6026] usb 5-1: device descriptor read/8, error -71 [ 115.859859][ T6026] usb usb5-port1: unable to enumerate USB device [ 116.200446][ T5933] usb 1-1: USB disconnect, device number 2 [ 116.617775][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.281'. [ 117.065911][ T6760] loop1: detected capacity change from 0 to 4096 [ 117.527617][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.294'. [ 117.538289][ T6026] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 117.712255][ T6026] usb 5-1: Using ep0 maxpacket: 8 [ 117.746416][ T6026] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 117.770963][ T6026] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 117.829569][ T6026] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.867730][ T6026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.192547][ T6787] syzkaller0: entered promiscuous mode [ 118.202729][ T6787] syzkaller0: entered allmulticast mode [ 118.449525][ T6026] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.497924][ T6807] loop5: detected capacity change from 0 to 4096 [ 118.623226][ T6026] usb 1-1: no configurations [ 118.642425][ T6026] usb 1-1: can't read configurations, error -22 [ 118.809838][ T6026] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.815002][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 119.011933][ T6026] usb 1-1: no configurations [ 119.016564][ T6026] usb 1-1: can't read configurations, error -22 [ 119.080192][ T6026] usb usb1-port1: attempt power cycle [ 119.450211][ T6026] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.485272][ T6026] usb 1-1: no configurations [ 119.493437][ T6026] usb 1-1: can't read configurations, error -22 [ 119.632928][ T6026] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.670726][ T6026] usb 1-1: no configurations [ 119.675707][ T6026] usb 1-1: can't read configurations, error -22 [ 119.691999][ T6026] usb usb1-port1: unable to enumerate USB device [ 120.128812][ T6855] loop3: detected capacity change from 0 to 4096 [ 120.324749][ T6026] usb 5-1: USB disconnect, device number 23 [ 120.501029][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 120.903656][ T6872] syzkaller0: entered promiscuous mode [ 120.921126][ T6872] syzkaller0: entered allmulticast mode [ 121.294451][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.338'. [ 121.366573][ T6886] loop4: detected capacity change from 0 to 4096 [ 121.529984][ T6026] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 121.717352][ T6026] usb 4-1: Using ep0 maxpacket: 8 [ 121.738153][ T6026] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 121.766414][ T6026] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 121.806158][ T6026] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.852140][ T6026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.038734][ T6915] Illegal XDP return value 618872064 on prog (id 30) dev N/A, expect packet loss! [ 122.063848][ T6916] syzkaller0: entered promiscuous mode [ 122.069985][ T6916] syzkaller0: entered allmulticast mode [ 122.429583][ T6026] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 122.482707][ T6925] 9p: Could not find request transport: fd0x0000000000000003 [ 122.582958][ T6026] usb 5-1: no configurations [ 122.607905][ T6026] usb 5-1: can't read configurations, error -22 [ 122.759846][ T6026] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 122.919891][ T6026] usb 5-1: no configurations [ 122.924661][ T6026] usb 5-1: can't read configurations, error -22 [ 122.955280][ T6026] usb usb5-port1: attempt power cycle [ 123.125949][ T6957] syzkaller0: entered promiscuous mode [ 123.162351][ T6957] syzkaller0: entered allmulticast mode [ 123.331127][ T6026] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 123.375631][ T6026] usb 5-1: no configurations [ 123.385680][ T6026] usb 5-1: can't read configurations, error -22 [ 123.432547][ T6968] 9p: Could not find request transport: fd0x0000000000000003 [ 123.541855][ T6026] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 123.590661][ T6026] usb 5-1: no configurations [ 123.602106][ T6026] usb 5-1: can't read configurations, error -22 [ 123.621516][ T6026] usb usb5-port1: unable to enumerate USB device [ 123.689687][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 124.240365][ T7000] syzkaller0: entered promiscuous mode [ 124.245876][ T7000] syzkaller0: entered allmulticast mode [ 124.330075][ T7004] 9p: Could not find request transport: fd0x0000000000000003 [ 124.344294][ T5918] usb 4-1: USB disconnect, device number 10 [ 126.749263][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 126.794801][ T7022] loop5: detected capacity change from 0 to 128 [ 126.852991][ T7022] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.899590][ T7022] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.996990][ T7022] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 127.087106][ T7022] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 127.098387][ T7032] fuse: Bad value for 'fd' [ 127.556688][ T7052] overlayfs: missing 'lowerdir' [ 127.569163][ T5919] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 127.603450][ T5820] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.729630][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 127.739012][ T5919] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 127.749919][ T5919] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 127.763819][ T5919] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.778301][ T5919] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.794276][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.834046][ T5919] usbtmc 4-1:16.0: bulk endpoints not found [ 128.849960][ T7069] fuse: Bad value for 'fd' [ 129.250384][ T5919] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 129.413974][ T5919] usb 6-1: no configurations [ 129.418919][ T5919] usb 6-1: can't read configurations, error -22 [ 129.549194][ T5919] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 129.699861][ T5919] usb 6-1: no configurations [ 129.704924][ T5919] usb 6-1: can't read configurations, error -22 [ 129.712246][ T5919] usb usb6-port1: attempt power cycle [ 130.059845][ T5919] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 130.095572][ T5919] usb 6-1: no configurations [ 130.103109][ T5919] usb 6-1: can't read configurations, error -22 [ 130.249481][ T5919] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 130.286428][ T5919] usb 6-1: no configurations [ 130.291172][ T5919] usb 6-1: can't read configurations, error -22 [ 130.298248][ T5919] usb usb6-port1: unable to enumerate USB device [ 130.366197][ T5919] usb 4-1: USB disconnect, device number 11 [ 130.512975][ T7089] loop3: detected capacity change from 0 to 128 [ 130.562983][ T7089] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.639927][ T7089] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.652669][ T7097] 9pnet_fd: Insufficient options for proto=fd [ 130.710371][ T7089] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 130.756702][ T7089] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 131.021621][ T7111] fuse: Bad value for 'fd' [ 131.324055][ T5821] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.427582][ T5918] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 131.497074][ T7128] overlayfs: missing 'lowerdir' [ 131.561453][ T7130] 9pnet_fd: Insufficient options for proto=fd [ 131.606075][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 131.622162][ T5918] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 131.647925][ T5918] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 131.698826][ T5918] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.722225][ T5918] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.739901][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.781620][ T5918] usbtmc 5-1:16.0: bulk endpoints not found [ 132.082016][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.088551][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.137692][ T7149] Zero length message leads to an empty skb [ 132.270217][ T7160] loop5: detected capacity change from 0 to 128 [ 132.342364][ T7160] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.385222][ T7160] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.448679][ T7168] overlayfs: missing 'lowerdir' [ 132.503121][ T7160] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 132.536333][ T7160] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 132.648237][ T7174] 9pnet_fd: Insufficient options for proto=fd [ 133.057905][ T5820] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.140745][ T5824] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 133.322844][ T5824] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.373618][ T5824] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 133.398336][ T7205] overlayfs: missing 'lowerdir' [ 133.422271][ T5824] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 133.438422][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.465234][ T5824] usb 4-1: Product: syz [ 133.475564][ T5824] usb 4-1: Manufacturer: syz [ 133.487768][ T5824] usb 4-1: SerialNumber: syz [ 133.504595][ T5824] usb 4-1: config 0 descriptor?? [ 134.068244][ T7231] loop5: detected capacity change from 0 to 128 [ 134.089348][ T7231] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.112587][ T7231] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.255276][ T5918] usb 5-1: USB disconnect, device number 28 [ 134.932345][ T5820] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.329592][ T5918] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 135.499146][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 135.519860][ T5918] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 135.546835][ T5918] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 135.572573][ T5918] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.607209][ T5918] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.629081][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.662624][ T5918] usbtmc 6-1:16.0: bulk endpoints not found [ 135.966887][ T5824] usb 4-1: USB disconnect, device number 12 [ 136.157984][ T7300] loop3: detected capacity change from 0 to 128 [ 136.208864][ T7300] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.263318][ T7300] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.963233][ T5821] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.108798][ T7334] syzkaller0: entered promiscuous mode [ 137.148390][ T7334] syzkaller0: entered allmulticast mode [ 137.279799][ T31] audit: type=1326 audit(1766715767.899:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf12d8f749 code=0x7ffc0000 [ 137.349748][ T31] audit: type=1326 audit(1766715767.909:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf12d8f749 code=0x7ffc0000 [ 137.375135][ T5918] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 137.429892][ T31] audit: type=1326 audit(1766715767.909:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf12d8f749 code=0x7ffc0000 [ 137.495544][ T31] audit: type=1326 audit(1766715767.909:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf12d8f749 code=0x7ffc0000 [ 137.551137][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.561328][ T31] audit: type=1326 audit(1766715767.909:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf12d8f749 code=0x7ffc0000 [ 137.561381][ T31] audit: type=1326 audit(1766715767.909:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7faf12d8f749 code=0x7ffc0000 [ 137.561430][ T31] audit: type=1326 audit(1766715767.909:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf12d8f749 code=0x7ffc0000 [ 137.614194][ T5918] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.691261][ T5918] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 137.707386][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.734894][ T5918] usb 4-1: Product: syz [ 137.745816][ T5918] usb 4-1: Manufacturer: syz [ 137.747441][ T31] audit: type=1326 audit(1766715767.909:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faf12d8f749 code=0x7ffc0000 [ 137.753661][ T5918] usb 4-1: SerialNumber: syz [ 137.783836][ T31] audit: type=1326 audit(1766715767.909:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7342 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faf12d8f749 code=0x7ffc0000 [ 137.825470][ T5918] usb 4-1: config 0 descriptor?? [ 138.128305][ T5918] usb 6-1: USB disconnect, device number 14 [ 138.377116][ T7371] fuse: Bad value for 'fd' [ 138.455597][ T7373] loop1: detected capacity change from 0 to 128 [ 138.530352][ T7373] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.561153][ T7373] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.320402][ T5822] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.530002][ T5918] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 139.674526][ T7403] syzkaller0: entered promiscuous mode [ 139.676119][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 139.699005][ T7403] syzkaller0: entered allmulticast mode [ 139.699268][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 139.724072][ T5918] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 139.738482][ T5918] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 139.767952][ T5918] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.789078][ T5918] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.814682][ T5918] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 139.868944][ T5918] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.889895][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.922737][ T5918] usbtmc 3-1:16.0: bulk endpoints not found [ 140.188227][ T5918] usb 4-1: USB disconnect, device number 13 [ 140.433902][ T7418] syzkaller0: entered promiscuous mode [ 140.447594][ T7418] syzkaller0: entered allmulticast mode [ 140.553800][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 140.790318][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 141.459124][ T5965] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 141.622093][ T5965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.639696][ T5965] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 141.664316][ T5965] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 141.679346][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.691249][ T5965] usb 5-1: Product: syz [ 141.701278][ T5965] usb 5-1: Manufacturer: syz [ 141.706015][ T5965] usb 5-1: SerialNumber: syz [ 141.735857][ T5965] usb 5-1: config 0 descriptor?? [ 142.330080][ T5965] usb 3-1: USB disconnect, device number 6 [ 142.799266][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 143.076411][ T31] audit: type=1326 audit(1766715773.699:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5898f749 code=0x7ffc0000 [ 143.161849][ T31] audit: type=1326 audit(1766715773.699:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5898f749 code=0x7ffc0000 [ 143.228932][ T31] audit: type=1326 audit(1766715773.699:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5898f749 code=0x7ffc0000 [ 143.278566][ T31] audit: type=1326 audit(1766715773.729:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5898f749 code=0x7ffc0000 [ 143.327887][ T31] audit: type=1326 audit(1766715773.729:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5898f749 code=0x7ffc0000 [ 143.376447][ T31] audit: type=1326 audit(1766715773.729:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5898f749 code=0x7ffc0000 [ 143.461115][ T31] audit: type=1326 audit(1766715773.729:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a5898f749 code=0x7ffc0000 [ 143.530568][ T31] audit: type=1326 audit(1766715773.739:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5898f749 code=0x7ffc0000 [ 143.586092][ T31] audit: type=1326 audit(1766715773.739:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5898f749 code=0x7ffc0000 [ 143.743370][ T31] audit: type=1326 audit(1766715773.739:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.0.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5898f749 code=0x7ffc0000 [ 143.749292][ T5932] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 143.989253][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 143.999783][ T5932] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 144.030535][ T5932] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 144.071174][ T5932] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.099111][ T5932] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.135712][ T5932] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 144.167606][ T5932] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 144.188140][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.238160][ T5965] usb 5-1: USB disconnect, device number 29 [ 144.269317][ T5932] usbtmc 4-1:16.0: bulk endpoints not found [ 144.474993][ T7527] syzkaller0: entered promiscuous mode [ 144.489287][ T7527] syzkaller0: entered allmulticast mode [ 144.617498][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 146.674063][ T5965] usb 4-1: USB disconnect, device number 14 [ 147.076092][ T7588] syzkaller0: entered promiscuous mode [ 147.109518][ T7588] syzkaller0: entered allmulticast mode [ 147.333398][ T5838] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 147.356193][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 147.356225][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.356241][ T5838] Workqueue: hci1 hci_rx_work [ 147.356271][ T5838] Call Trace: [ 147.356281][ T5838] [ 147.356291][ T5838] dump_stack_lvl+0xe8/0x150 [ 147.356326][ T5838] sysfs_create_dir_ns+0x259/0x280 [ 147.356353][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.356385][ T5838] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 147.356413][ T5838] ? do_raw_spin_unlock+0x122/0x240 [ 147.356455][ T5838] kobject_add_internal+0x6ab/0xcc0 [ 147.356497][ T5838] kobject_add+0x155/0x220 [ 147.356525][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.356560][ T5838] ? __pfx_kobject_add+0x10/0x10 [ 147.356589][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.356617][ T5838] ? _raw_spin_unlock+0x28/0x50 [ 147.356653][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.356714][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.356748][ T5838] ? get_device_parent+0x366/0x3a0 [ 147.356778][ T5838] device_add+0x408/0xb80 [ 147.356807][ T5838] hci_conn_add_sysfs+0xd5/0x210 [ 147.356837][ T5838] le_conn_complete_evt+0xf1d/0x1420 [ 147.356872][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.356940][ T5838] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 147.356976][ T5838] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 147.357022][ T5838] ? __asan_memcpy+0x40/0x70 [ 147.357051][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.357098][ T5838] ? skb_pull_data+0xfb/0x200 [ 147.357145][ T5838] hci_le_conn_complete_evt+0x187/0x480 [ 147.357188][ T5838] hci_event_packet+0x78f/0x1260 [ 147.357242][ T5838] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 147.357282][ T5838] ? __pfx_hci_event_packet+0x10/0x10 [ 147.357307][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.357357][ T5838] ? kcov_remote_start+0x49b/0x7a0 [ 147.357396][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.357424][ T5838] ? hci_send_to_monitor+0xe2/0x590 [ 147.357465][ T5838] hci_rx_work+0x3ee/0x1060 [ 147.357506][ T5838] ? process_scheduled_works+0x9ef/0x1770 [ 147.357537][ T5838] process_scheduled_works+0xad1/0x1770 [ 147.357601][ T5838] ? __pfx_process_scheduled_works+0x10/0x10 [ 147.357624][ T5838] ? do_raw_spin_lock+0x121/0x290 [ 147.357667][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.357705][ T5838] worker_thread+0x8a0/0xda0 [ 147.357778][ T5838] kthread+0x711/0x8a0 [ 147.357815][ T5838] ? __pfx_worker_thread+0x10/0x10 [ 147.357841][ T5838] ? __pfx_kthread+0x10/0x10 [ 147.357878][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.357912][ T5838] ? _raw_spin_unlock_irq+0x23/0x50 [ 147.357949][ T5838] ? __pfx_kthread+0x10/0x10 [ 147.357983][ T5838] ret_from_fork+0x510/0xa50 [ 147.358011][ T5838] ? __pfx_ret_from_fork+0x10/0x10 [ 147.358031][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.358058][ T5838] ? __switch_to+0xc9e/0x1480 [ 147.358099][ T5838] ? __pfx_kthread+0x10/0x10 [ 147.358133][ T5838] ret_from_fork_asm+0x1a/0x30 [ 147.358191][ T5838] [ 147.754800][ T5838] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 147.773243][ T5838] Bluetooth: hci1: failed to register connection device [ 148.639120][ T926] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 148.829121][ T926] usb 1-1: Using ep0 maxpacket: 8 [ 148.840579][ T926] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 148.854079][ T926] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 148.864774][ T926] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.875399][ T926] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.888177][ T926] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 148.902195][ T926] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.934971][ T926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.943458][ T7637] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 148.970958][ T7634] loop4: detected capacity change from 0 to 164 [ 149.010518][ T926] usbtmc 1-1:16.0: bulk endpoints not found [ 149.038287][ T7634] Unable to read rock-ridge attributes [ 149.267129][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.431713][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.652162][ T7644] loop2: detected capacity change from 0 to 128 [ 149.671574][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.693460][ T7644] EXT4-fs (loop2): Test dummy encryption mode enabled [ 149.742066][ T7644] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.878114][ T7644] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.952310][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.006706][ T7653] syzkaller0: entered promiscuous mode [ 150.024549][ T7653] syzkaller0: entered allmulticast mode [ 150.084443][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.102409][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.110138][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.118245][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.127581][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.165895][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.230472][ T37] bridge_slave_1: left allmulticast mode [ 151.255116][ T37] bridge_slave_1: left promiscuous mode [ 151.289943][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.410341][ T37] bridge_slave_0: left allmulticast mode [ 151.416021][ T37] bridge_slave_0: left promiscuous mode [ 151.480671][ T5983] usb 1-1: USB disconnect, device number 7 [ 151.486990][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.190183][ T5838] Bluetooth: hci2: command tx timeout [ 152.559110][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 152.717672][ T7694] loop4: detected capacity change from 0 to 1024 [ 152.725992][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 152.733685][ T24] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 152.763648][ T24] usb 4-1: config 0 has no interface number 0 [ 152.805145][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 152.824156][ T7694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.879431][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.939175][ T24] usb 4-1: Product: syz [ 152.969129][ T24] usb 4-1: Manufacturer: syz [ 152.973768][ T24] usb 4-1: SerialNumber: syz [ 153.033929][ T24] usb 4-1: config 0 descriptor?? [ 153.309567][ T7682] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.356762][ T24] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 153.477662][ T24] usb 4-1: USB disconnect, device number 15 [ 153.511803][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 153.511845][ T31] audit: type=1800 audit(1766715784.139:28): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.630" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 153.976719][ T31] audit: type=1804 audit(1766715784.229:29): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.630" name="/newroot/84/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 154.016320][ T31] audit: type=1804 audit(1766715784.629:30): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.630" name="/newroot/84/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 154.212367][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.229165][ T5838] Bluetooth: hci2: command tx timeout [ 154.546903][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.561139][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.571787][ T37] bond0 (unregistering): Released all slaves [ 154.749090][ T5919] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 154.939827][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 154.962471][ T5919] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 154.971589][ T7722] loop0: detected capacity change from 0 to 2048 [ 154.998608][ T5919] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.036232][ T5919] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.064831][ T7722] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.067120][ T5919] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 155.107650][ T7657] chnl_net:caif_netlink_parms(): no params data found [ 155.131076][ T5919] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.168167][ T5919] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.247319][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.327600][ T5919] usbtmc 4-1:16.0: bulk endpoints not found [ 155.779146][ T926] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 155.971328][ T926] usb 5-1: Using ep0 maxpacket: 8 [ 155.986904][ T7657] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.994997][ T926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 156.038418][ T926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.059738][ T7657] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.066983][ T7657] bridge_slave_0: entered allmulticast mode [ 156.079870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 156.094276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 156.103329][ T926] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.132377][ T7657] bridge_slave_0: entered promiscuous mode [ 156.149084][ T926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 156.158827][ T926] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 156.209404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 156.218621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 156.238915][ T926] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 156.269114][ T926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.309126][ T5838] Bluetooth: hci2: command tx timeout [ 156.338206][ T37] hsr_slave_0: left promiscuous mode [ 156.338771][ T926] usb 5-1: config 0 descriptor?? [ 156.409329][ T37] hsr_slave_1: left promiscuous mode [ 156.423243][ T5838] Bluetooth: hci6: urb ffff88814d6d9100 submission failed (90) [ 156.433634][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.442684][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.477394][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.484983][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.574368][ T37] veth1_macvtap: left promiscuous mode [ 156.584221][ T37] veth0_macvtap: left promiscuous mode [ 156.588230][ T926] usb 5-1: USB disconnect, device number 30 [ 156.590486][ T37] veth1_vlan: left promiscuous mode [ 156.602238][ T37] veth0_vlan: left promiscuous mode [ 156.784790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 156.796596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 156.922202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 156.933402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 156.972470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 157.021985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 157.582404][ T5919] kernel read not supported for file /cpu/0/msr (pid: 5919 comm: kworker/0:4) [ 157.639905][ T5838] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 157.649549][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 157.649571][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.649582][ T5838] Workqueue: hci4 hci_rx_work [ 157.649605][ T5838] Call Trace: [ 157.649612][ T5838] [ 157.649620][ T5838] dump_stack_lvl+0xe8/0x150 [ 157.649646][ T5838] sysfs_create_dir_ns+0x259/0x280 [ 157.649666][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.649689][ T5838] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 157.649710][ T5838] ? do_raw_spin_unlock+0x122/0x240 [ 157.649741][ T5838] kobject_add_internal+0x6ab/0xcc0 [ 157.649777][ T5838] kobject_add+0x155/0x220 [ 157.649797][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.649823][ T5838] ? __pfx_kobject_add+0x10/0x10 [ 157.649845][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.649865][ T5838] ? _raw_spin_unlock+0x28/0x50 [ 157.649892][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.649916][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.649936][ T5838] ? get_device_parent+0x366/0x3a0 [ 157.649958][ T5838] device_add+0x408/0xb80 [ 157.649980][ T5838] hci_conn_add_sysfs+0xd5/0x210 [ 157.650002][ T5838] le_conn_complete_evt+0xf1d/0x1420 [ 157.650027][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.650063][ T5838] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 157.650100][ T5838] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 157.650127][ T5838] ? __asan_memcpy+0x40/0x70 [ 157.650156][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.650184][ T5838] ? skb_pull_data+0xfb/0x200 [ 157.650227][ T5838] hci_le_conn_complete_evt+0x187/0x480 [ 157.650271][ T5838] hci_event_packet+0x78f/0x1260 [ 157.650303][ T5838] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 157.650339][ T5838] ? __pfx_hci_event_packet+0x10/0x10 [ 157.650365][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.650401][ T5838] ? kcov_remote_start+0x49b/0x7a0 [ 157.650439][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.650467][ T5838] ? hci_send_to_monitor+0xe2/0x590 [ 157.650509][ T5838] hci_rx_work+0x3ee/0x1060 [ 157.650546][ T5838] ? process_scheduled_works+0x9ef/0x1770 [ 157.650575][ T5838] process_scheduled_works+0xad1/0x1770 [ 157.650636][ T5838] ? __pfx_process_scheduled_works+0x10/0x10 [ 157.650660][ T5838] ? do_raw_spin_lock+0x121/0x290 [ 157.650704][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.650744][ T5838] worker_thread+0x8a0/0xda0 [ 157.650808][ T5838] kthread+0x711/0x8a0 [ 157.650850][ T5838] ? __pfx_worker_thread+0x10/0x10 [ 157.650876][ T5838] ? __pfx_kthread+0x10/0x10 [ 157.650904][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.650939][ T5838] ? _raw_spin_unlock_irq+0x23/0x50 [ 157.650976][ T5838] ? __pfx_kthread+0x10/0x10 [ 157.651011][ T5838] ret_from_fork+0x510/0xa50 [ 157.651038][ T5838] ? __pfx_ret_from_fork+0x10/0x10 [ 157.651058][ T5838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.651086][ T5838] ? __switch_to+0xc9e/0x1480 [ 157.651127][ T5838] ? __pfx_kthread+0x10/0x10 [ 157.651161][ T5838] ret_from_fork_asm+0x1a/0x30 [ 157.651218][ T5838] [ 157.651947][ T5838] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 157.740821][ T926] usb 4-1: USB disconnect, device number 16 [ 157.742426][ T5838] Bluetooth: hci4: failed to register connection device [ 158.389171][ T5838] Bluetooth: hci2: command tx timeout [ 158.413219][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 158.423758][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 158.433031][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 158.442706][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 158.452408][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 159.140214][ T37] team0 (unregistering): Port device team_slave_1 removed [ 159.261613][ T37] team0 (unregistering): Port device team_slave_0 removed [ 160.199374][ T7657] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.210414][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.218779][ T7657] bridge_slave_1: entered allmulticast mode [ 160.243965][ T7657] bridge_slave_1: entered promiscuous mode [ 160.349565][ T926] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 160.469130][ T5831] Bluetooth: hci6: command tx timeout [ 160.475358][ T7814] loop0: detected capacity change from 0 to 256 [ 160.493846][ T7814] exfat: Invalid uid '0x00000000ffffffff' [ 160.519937][ T926] usb 3-1: Using ep0 maxpacket: 8 [ 160.535494][ T926] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 160.565003][ T926] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.585238][ T926] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.605494][ T926] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 160.644869][ T7657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.662252][ T926] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.717847][ T7657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.719897][ T926] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.809618][ T926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.854413][ T926] usbtmc 3-1:16.0: bulk endpoints not found [ 161.095904][ T7657] team0: Port device team_slave_0 added [ 161.118165][ T7657] team0: Port device team_slave_1 added [ 161.129636][ T926] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 161.313433][ T926] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.335506][ T926] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 161.361054][ T926] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 161.384937][ T926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.402678][ T926] usb 1-1: Product: syz [ 161.411518][ T7657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.414839][ T926] usb 1-1: Manufacturer: syz [ 161.442256][ T926] usb 1-1: SerialNumber: syz [ 161.453156][ T7657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.458246][ T926] usb 1-1: config 0 descriptor?? [ 161.566309][ T7657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.619153][ T7657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.626133][ T7657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.696908][ T7657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.017631][ T7657] hsr_slave_0: entered promiscuous mode [ 162.030958][ T7657] hsr_slave_1: entered promiscuous mode [ 162.045621][ T7657] debugfs: 'hsr0' already exists in 'hsr' [ 162.055282][ T7657] Cannot create hsr debugfs directory [ 162.251251][ T7852] loop3: detected capacity change from 0 to 512 [ 162.273738][ T7852] EXT4-fs: Ignoring removed bh option [ 162.365511][ T7852] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.670: error while reading EA inode 32 err=-116 [ 162.428323][ T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.549214][ T5831] Bluetooth: hci6: command tx timeout [ 162.652081][ T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.683048][ T7852] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 162.718694][ T7852] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.670: error while reading EA inode 32 err=-116 [ 162.780442][ T7852] EXT4-fs (loop3): 1 orphan inode deleted [ 162.788027][ T7852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.872267][ T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.896755][ T7852] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.670: invalid indirect mapped block 234881024 (level 0) [ 163.082978][ T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.094158][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.305771][ T7778] chnl_net:caif_netlink_parms(): no params data found [ 163.380556][ T6026] usb 3-1: USB disconnect, device number 7 [ 164.184040][ T5903] usb 1-1: USB disconnect, device number 8 [ 164.352668][ T7778] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.407444][ T7778] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.437496][ T7778] bridge_slave_0: entered allmulticast mode [ 164.547255][ T7778] bridge_slave_0: entered promiscuous mode [ 164.629199][ T5831] Bluetooth: hci6: command tx timeout [ 164.990461][ T7778] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.629598][ T7778] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.664326][ T7778] bridge_slave_1: entered allmulticast mode [ 166.719097][ T5831] Bluetooth: hci6: command tx timeout [ 166.723726][ T7778] bridge_slave_1: entered promiscuous mode [ 167.569208][ T37] bridge_slave_1: left allmulticast mode [ 167.641153][ T37] bridge_slave_1: left promiscuous mode [ 167.646942][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.730274][ T37] bridge_slave_0: left allmulticast mode [ 167.736034][ T37] bridge_slave_0: left promiscuous mode [ 167.744533][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 167.750967][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.858275][ T7921] loop3: detected capacity change from 0 to 2048 [ 167.887189][ T7921] /dev/loop3: Can't open blockdev [ 168.578809][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.604481][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.641681][ T37] bond0 (unregistering): Released all slaves [ 168.868685][ T7778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.914310][ T7778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.541120][ T7657] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 170.603311][ T7657] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 170.687692][ T7657] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 170.731701][ T7778] team0: Port device team_slave_0 added [ 170.805170][ T7964] loop4: detected capacity change from 0 to 8192 [ 170.838162][ T7971] loop0: detected capacity change from 0 to 1024 [ 170.862119][ T7964] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 170.870034][ T7657] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 170.897980][ T7964] UDF-fs: Scanning with blocksize 512 failed [ 170.898036][ T7778] team0: Port device team_slave_1 added [ 170.920234][ T7964] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 170.943359][ T7964] UDF-fs: Scanning with blocksize 1024 failed [ 170.967287][ T31] audit: type=1800 audit(1766716057.597:31): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.699" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 170.994905][ T7964] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 171.002929][ T7964] UDF-fs: Scanning with blocksize 2048 failed [ 171.018924][ T7964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.081348][ T37] hsr_slave_0: left promiscuous mode [ 171.098390][ T37] hsr_slave_1: left promiscuous mode [ 171.112956][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.133290][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.154000][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.177456][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.245128][ T37] veth1_macvtap: left promiscuous mode [ 171.274687][ T37] veth0_macvtap: left promiscuous mode [ 171.288219][ T37] veth1_vlan: left promiscuous mode [ 171.299790][ T37] veth0_vlan: left promiscuous mode [ 173.014557][ T37] team0 (unregistering): Port device team_slave_1 removed [ 174.910286][ T37] team0 (unregistering): Port device team_slave_0 removed [ 177.531493][ T7778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.538467][ T7778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.626120][ T7778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.655222][ T7778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.664581][ T7778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.698932][ T7778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.004492][ T7778] hsr_slave_0: entered promiscuous mode [ 178.041556][ T7778] hsr_slave_1: entered promiscuous mode [ 178.069681][ T7778] debugfs: 'hsr0' already exists in 'hsr' [ 178.079246][ T7778] Cannot create hsr debugfs directory [ 178.781179][ T7657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.946061][ T8072] loop2: detected capacity change from 0 to 512 [ 180.563708][ T8072] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 180.630091][ T7657] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.639668][ T8072] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 180.698072][ T7563] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.705263][ T7563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.852635][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.859845][ T6067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.090796][ T7778] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 181.331283][ T7778] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 181.495419][ T8098] loop3: detected capacity change from 0 to 512 [ 181.672848][ T8098] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.735: couldn't read orphan inode 26 (err -116) [ 181.688000][ T8098] EXT4-fs (loop3): Remounting filesystem read-only [ 181.696595][ T8098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.709209][ T8098] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.037468][ T7778] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 182.046168][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.070723][ T7778] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 182.340927][ T8113] fuse: Bad value for 'group_id' [ 182.345907][ T8113] fuse: Bad value for 'group_id' [ 182.577178][ T7778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.711104][ T7778] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.780193][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.787378][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.908633][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.915861][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.315189][ T7657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.624720][ T8137] loop3: detected capacity change from 0 to 1024 [ 184.085825][ T37] hfsplus: b-tree write err: -5, ino 4 [ 184.123447][ T8168] fuse: Bad value for 'group_id' [ 184.143532][ T8168] fuse: Bad value for 'group_id' [ 184.301713][ T7778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.845716][ T7657] veth0_vlan: entered promiscuous mode [ 184.918282][ T7657] veth1_vlan: entered promiscuous mode [ 186.576323][ T8200] loop2: detected capacity change from 0 to 2048 [ 186.697279][ T7657] veth0_macvtap: entered promiscuous mode [ 186.705121][ T8200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.725662][ T7657] veth1_macvtap: entered promiscuous mode [ 186.827382][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.840243][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.894749][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.971630][ T1151] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.004222][ T1151] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.081991][ T1151] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.137244][ T1151] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.159306][ T8218] netlink: 60 bytes leftover after parsing attributes in process `syz.2.760'. [ 187.405304][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.228147][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.349752][ T7778] veth0_vlan: entered promiscuous mode [ 189.398121][ T8229] loop3: detected capacity change from 0 to 512 [ 189.419635][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.427463][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.480848][ T7778] veth1_vlan: entered promiscuous mode [ 189.495091][ T8229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.549665][ T8229] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.612937][ T31] audit: type=1800 audit(1766716076.237:32): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.762" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 189.653774][ T7778] veth0_macvtap: entered promiscuous mode [ 189.691572][ T7778] veth1_macvtap: entered promiscuous mode [ 189.696419][ T8229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.725380][ T7778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.772289][ T7778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.830986][ T8021] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.881723][ T8021] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.929908][ T8021] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.969715][ T8021] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.233166][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.279040][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.362788][ T8021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.402925][ T8021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.626953][ T8293] loop6: detected capacity change from 0 to 1024 [ 191.687393][ T8293] EXT4-fs: inline encryption not supported [ 192.021648][ T8293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.143960][ T8293] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 192.276371][ T8308] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 194.767681][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.783115][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.952523][ T7657] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.195076][ T8325] input: syz0 as /devices/virtual/input/input12 [ 196.386207][ T8356] loop6: detected capacity change from 0 to 512 [ 196.499753][ T8356] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.574246][ T7657] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.879427][ T8394] netlink: 32 bytes leftover after parsing attributes in process `syz.2.798'. [ 200.912697][ T8394] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 201.119874][ T8399] loop7: detected capacity change from 0 to 512 [ 201.216103][ T8399] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.799: ea_inode with extended attributes [ 201.348807][ T8399] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.799: error while reading EA inode 11 err=-117 [ 201.521028][ T8399] EXT4-fs (loop7): 1 orphan inode deleted [ 201.600254][ T8399] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.844934][ T7778] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.919250][ T8429] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 205.950631][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 205.956842][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 205.963450][ T5142] Bluetooth: hci1: command 0x0406 tx timeout [ 206.361900][ T8442] process 'syz.0.793' launched './file0' with NULL argv: empty string added [ 207.091409][ T926] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 208.759274][ T926] usb 8-1: Using ep0 maxpacket: 32 [ 208.849207][ T926] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.907345][ T926] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.959052][ T926] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 209.009195][ T926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.100314][ T926] usb 8-1: config 0 descriptor?? [ 209.131633][ T926] hub 8-1:0.0: USB hub found [ 209.324424][ T926] hub 8-1:0.0: 1 port detected [ 209.457823][ T8483] loop2: detected capacity change from 0 to 256 [ 209.476706][ T8483] exfat: Unknown parameter '0x00000000ffffffff0x00000000ffffffff' [ 209.918401][ T926] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 209.939485][ T926] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 209.991391][ T926] usbhid 8-1:0.0: can't add hid device: -71 [ 209.997388][ T926] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 210.088466][ T926] usb 8-1: USB disconnect, device number 2 [ 213.081871][ T8508] loop2: detected capacity change from 0 to 256 [ 213.137266][ T8508] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.216994][ T8508] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 213.305940][ T8508] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x640de592, utbl_chksum : 0xe619d30d) [ 213.375689][ T8508] exFAT-fs (loop2): failed to load alloc-bitmap [ 213.427576][ T8508] exFAT-fs (loop2): failed to recognize exfat type [ 215.197937][ T8508] loop2: detected capacity change from 0 to 1024 [ 215.281661][ T8508] hfsplus: invalid file type 0120411 for inode 2 [ 216.905175][ T8508] hfsplus: failed to load root directory [ 219.015327][ T8546] loop6: detected capacity change from 0 to 512 [ 219.030993][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 219.079285][ T8546] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.055993][ T8546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.109374][ T8546] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.999549][ T8546] EXT4-fs error (device loop6): ext4_get_first_dir_block:3550: inode #12: comm syz.6.833: directory missing '..' [ 222.013349][ T8546] EXT4-fs (loop6): Remounting filesystem read-only [ 222.212132][ T7657] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.259364][ T37] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 222.299340][ T37] Quota error (device loop6): write_blk: dquota write failed [ 222.306782][ T37] Quota error (device loop6): free_dqentry: Can't write quota data block 5 [ 222.563101][ T8576] input: syz0 as /devices/virtual/input/input13 [ 227.072573][ T5918] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 227.503914][ T5918] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.689200][ T5918] usb 4-1: config 0 has no interface number 0 [ 227.722736][ T5918] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 227.752118][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.818913][ T5918] usb 4-1: Product: syz [ 227.852251][ T5918] usb 4-1: Manufacturer: syz [ 227.879026][ T5918] usb 4-1: SerialNumber: syz [ 227.914133][ T5918] usb 4-1: config 0 descriptor?? [ 228.093215][ T5832] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 228.173183][ T5918] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 228.218117][ T5918] usb 4-1: USB disconnect, device number 17 [ 228.398113][ T8614] loop4: detected capacity change from 0 to 512 [ 228.499139][ T8614] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 228.579134][ T8614] System zones: 1-12 [ 228.598469][ T8614] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.843: Directory hole found for htree index block 0 [ 228.685402][ T8614] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 230.326811][ T8614] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.843: Directory hole found for htree index block 0 [ 230.434389][ T8614] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 230.516324][ T8614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.382951][ T8614] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.843: Directory hole found for htree index block 0 [ 231.415798][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.424725][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.449460][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.459275][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.467084][ T8614] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.843: Directory hole found for htree index block 0 [ 231.479833][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.589453][ T8635] usb usb7: usbfs: process 8635 (syz.6.847) did not claim interface 0 before use [ 231.701172][ T8637] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.843: Directory hole found for htree index block 0 [ 232.319214][ T8621] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 232.468660][ T8643] loop7: detected capacity change from 0 to 512 [ 233.069573][ T8643] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 233.077567][ T8643] System zones: 1-12 [ 233.138581][ T8643] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.848: invalid indirect mapped block 8 (level 2) [ 233.163805][ T8643] EXT4-fs (loop7): 1 truncate cleaned up [ 233.170900][ T8643] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.422997][ T7778] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.461913][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.511170][ T5832] Bluetooth: hci0: command tx timeout [ 234.463604][ T8663] loop0: detected capacity change from 0 to 2048 [ 235.401430][ T8665] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 235.445875][ T5887] loop0: p1 < > p4 [ 235.502858][ T5887] loop0: p4 size 8388608 extends beyond EOD, truncated [ 235.567076][ T8663] loop0: p1 < > p4 [ 235.573290][ T8663] loop0: p4 size 8388608 extends beyond EOD, truncated [ 235.685413][ T5832] Bluetooth: hci0: command tx timeout [ 235.813081][ T8632] chnl_net:caif_netlink_parms(): no params data found [ 236.804744][ T5832] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 236.850421][ T8632] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.898937][ T8632] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.535052][ T5832] Bluetooth: hci0: command tx timeout [ 238.599516][ T8632] bridge_slave_0: entered allmulticast mode [ 238.607740][ T8632] bridge_slave_0: entered promiscuous mode [ 238.808368][ T6067] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.551989][ T8632] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.601727][ T8632] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.637901][ T8632] bridge_slave_1: entered allmulticast mode [ 239.646207][ T8632] bridge_slave_1: entered promiscuous mode [ 239.854398][ T6067] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.559047][ T5832] Bluetooth: hci0: command tx timeout [ 241.148636][ T8726] loop0: detected capacity change from 0 to 512 [ 241.220140][ T8726] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.242661][ T8723] loop2: detected capacity change from 0 to 4096 [ 241.283097][ T6067] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.344433][ T8726] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 241.361983][ T8723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.435151][ T8726] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.853: attempt to clear invalid blocks 2 len 1 [ 241.438087][ T8632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.802703][ T31] audit: type=1800 audit(1766716128.417:33): pid=8719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.864" name="bus" dev="loop2" ino=19 res=0 errno=0 [ 241.840968][ T8726] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 241.941407][ T8726] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.853: invalid indirect mapped block 1819239214 (level 0) [ 241.984509][ T6067] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.050299][ T8726] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.853: invalid indirect mapped block 1819239214 (level 1) [ 242.094286][ T8726] EXT4-fs (loop0): 1 truncate cleaned up [ 242.105120][ T8726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.116747][ T8632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.207383][ T8739] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.853: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 243.410746][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.693933][ T8632] team0: Port device team_slave_0 added [ 243.741997][ T8632] team0: Port device team_slave_1 added [ 243.792866][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.045104][ T8756] loop0: detected capacity change from 0 to 512 [ 244.094682][ T8756] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.149198][ T8632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.174380][ T8632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.228027][ T8756] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 244.258698][ T8632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.271899][ T8756] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.870: attempt to clear invalid blocks 2 len 1 [ 244.287691][ T8756] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 244.327742][ T8756] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.870: invalid indirect mapped block 1819239214 (level 0) [ 244.342306][ T8756] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.870: invalid indirect mapped block 1819239214 (level 1) [ 244.356847][ T8763] netlink: 452 bytes leftover after parsing attributes in process `syz.7.872'. [ 244.396244][ T8632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.404821][ T8761] loop6: detected capacity change from 0 to 1024 [ 244.417200][ T8756] EXT4-fs (loop0): 1 truncate cleaned up [ 244.429021][ T8632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.465794][ T8761] EXT4-fs: Ignoring removed oldalloc option [ 244.471438][ T8756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.515311][ T8761] EXT4-fs: Ignoring removed bh option [ 244.519415][ T8765] fuse: Unknown parameter 'group_id00000000000000000000' [ 244.558189][ T8632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.595582][ T8761] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.639517][ T8756] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.870: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 244.753340][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.736859][ T8632] hsr_slave_0: entered promiscuous mode [ 245.761035][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.871'. [ 245.802142][ T8632] hsr_slave_1: entered promiscuous mode [ 245.809560][ T8632] debugfs: 'hsr0' already exists in 'hsr' [ 245.815312][ T8632] Cannot create hsr debugfs directory [ 245.824573][ T6067] bridge_slave_1: left allmulticast mode [ 245.868925][ T6067] bridge_slave_1: left promiscuous mode [ 245.908313][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.958630][ T6067] bridge_slave_0: left allmulticast mode [ 245.994039][ T6067] bridge_slave_0: left promiscuous mode [ 246.018031][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.783780][ T7657] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.806301][ T6067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.829732][ T6067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.852476][ T6067] bond0 (unregistering): Released all slaves [ 254.442162][ T8861] loop4: detected capacity change from 0 to 512 [ 254.479749][ T8861] EXT4-fs: Ignoring removed bh option [ 254.521105][ T8861] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 254.596802][ T8861] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.897: corrupted in-inode xattr: bad e_name length [ 254.718211][ T8861] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.897: couldn't read orphan inode 15 (err -117) [ 254.743735][ T6067] hsr_slave_0: left promiscuous mode [ 254.779682][ T6067] hsr_slave_1: left promiscuous mode [ 254.791531][ T8861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.821233][ T6067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.839033][ T6067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.860011][ T6067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.867411][ T6067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.966365][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.979436][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.984002][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.992210][ T6067] veth1_macvtap: left promiscuous mode [ 255.000262][ T6067] veth0_macvtap: left promiscuous mode [ 255.005907][ T6067] veth1_vlan: left promiscuous mode [ 255.011339][ T6067] veth0_vlan: left promiscuous mode [ 257.463982][ T31] audit: type=1326 audit(1766716144.087:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.0.904" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a5898f749 code=0x0 [ 257.547609][ T5832] Bluetooth: hci5: Unknown advertising packet type: 0x73 [ 257.547660][ T5832] Bluetooth: hci5: Malformed LE Event: 0x0d [ 257.852464][ T8897] loop6: detected capacity change from 0 to 1024 [ 257.872959][ T8897] EXT4-fs: inline encryption not supported [ 257.920059][ T8897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.068246][ T8897] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.907: Allocating blocks 497-513 which overlap fs metadata [ 258.101707][ T8897] EXT4-fs (loop6): Remounting filesystem read-only [ 258.183384][ T8896] EXT4-fs (loop6): pa ffff888030d13910: logic 64, phys. 449, len 4 [ 258.232364][ T6067] team0 (unregistering): Port device team_slave_1 removed [ 258.258513][ T7657] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.304334][ T6067] team0 (unregistering): Port device team_slave_0 removed [ 258.443117][ T8906] loop0: detected capacity change from 0 to 1024 [ 258.460855][ T8906] EXT4-fs (loop0): Test dummy encryption mode enabled [ 258.481302][ T8906] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 258.508791][ T8906] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c018, mo2=0002] [ 258.523689][ T8910] loop6: detected capacity change from 0 to 256 [ 258.531443][ T8906] System zones: 0-1, 3-36 [ 258.573806][ T8906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.632647][ T8906] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 258.635532][ T8910] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 258.665285][ T8906] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c018, mo2=0002] [ 258.704469][ T8906] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 258.741116][ T8910] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 258.891884][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.024630][ T8915] loop4: detected capacity change from 0 to 8 [ 259.287604][ T8922] loop4: detected capacity change from 0 to 1024 [ 259.342743][ T8922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.345390][ T8926] loop0: detected capacity change from 0 to 256 [ 259.396215][ T8926] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.469794][ T31] audit: type=1800 audit(1766716146.087:35): pid=8926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.915" name="file1" dev="loop0" ino=1048620 res=0 errno=0 [ 259.534347][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.558896][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 366.565861][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8918/1:b..l P8944/1:b..l P5835/1:b..l [ 366.576447][ C0] rcu: (detected by 0, t=10502 jiffies, g=30325, q=451 ncpus=2) [ 366.584160][ C0] task:syz-executor state:R running task stack:21720 pid:5835 tgid:5835 ppid:5814 task_flags:0x400140 flags:0x00080000 [ 366.598339][ C0] Call Trace: [ 366.601601][ C0] [ 366.604516][ C0] __schedule+0x149b/0x4fd0 [ 366.609029][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 366.613967][ C0] ? __pfx___schedule+0x10/0x10 [ 366.618801][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.624428][ C0] preempt_schedule_irq+0x4d/0xa0 [ 366.629437][ C0] irqentry_exit+0x5d8/0x660 [ 366.634011][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.639633][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 366.645682][ C0] RIP: 0010:unwind_next_frame+0xe55/0x23d0 [ 366.651474][ C0] Code: 85 eb 0b 00 00 48 8d 43 08 4c 39 f8 0f 97 c1 4c 39 e0 0f 96 c0 20 c8 3c 01 0f 85 d1 0b 00 00 48 89 df e8 ae 21 00 00 48 89 c3 <48> bd 00 00 00 00 00 fc ff df 48 8b 44 24 30 80 3c 28 00 4c 8b 7c [ 366.671066][ C0] RSP: 0018:ffffc9000401f818 EFLAGS: 00000202 [ 366.677119][ C0] RAX: ffffffff892e7964 RBX: ffffffff892e7964 RCX: 1ffff92000803f01 [ 366.685078][ C0] RDX: ffffffff9022ce92 RSI: 0000000000000002 RDI: ffffc9000401fcc8 [ 366.693033][ C0] RBP: 1ffff92000803f1e R08: 0000000000000001 R09: ffffffff8df41aa0 [ 366.700985][ C0] R10: dffffc0000000000 R11: ffffffff81acf3a0 R12: ffffc90004020000 [ 366.708942][ C0] R13: 1ffff92000803f1f R14: ffffc9000401f8e8 R15: ffffc90004018000 [ 366.716910][ C0] ? __sk_destruct+0x614/0x880 [ 366.721663][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 366.727809][ C0] ? __sk_destruct+0x614/0x880 [ 366.732561][ C0] ? unwind_next_frame+0xe52/0x23d0 [ 366.737749][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 366.742847][ C0] ? kmem_cache_free+0x475/0x620 [ 366.747772][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 366.753918][ C0] arch_stack_walk+0x11c/0x150 [ 366.758677][ C0] ? kmem_cache_free+0x475/0x620 [ 366.763601][ C0] stack_trace_save+0x9c/0xe0 [ 366.768270][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 366.773630][ C0] ? kasan_save_track+0x4f/0x80 [ 366.778463][ C0] ? kmem_cache_free+0x16b/0x620 [ 366.783380][ C0] ? __sk_destruct+0x614/0x880 [ 366.788132][ C0] ? inet_release+0x144/0x190 [ 366.792792][ C0] ? sock_close+0xc3/0x240 [ 366.797197][ C0] ? __fput+0x44c/0xa70 [ 366.801337][ C0] ? fput_close_sync+0x113/0x220 [ 366.806266][ C0] kasan_save_stack+0x3e/0x60 [ 366.810924][ C0] ? kasan_save_stack+0x3e/0x60 [ 366.815759][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 366.821124][ C0] ? kmem_cache_free+0x475/0x620 [ 366.826086][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 366.831271][ C0] kmem_cache_free+0x475/0x620 [ 366.836018][ C0] ? __sk_destruct+0x614/0x880 [ 366.840770][ C0] __sk_destruct+0x614/0x880 [ 366.845349][ C0] inet_release+0x144/0x190 [ 366.849842][ C0] sock_close+0xc3/0x240 [ 366.854080][ C0] ? __pfx_sock_close+0x10/0x10 [ 366.858938][ C0] __fput+0x44c/0xa70 [ 366.862938][ C0] fput_close_sync+0x113/0x220 [ 366.867695][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 366.872973][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.878592][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.884210][ C0] __x64_sys_close+0x7f/0x110 [ 366.888878][ C0] do_syscall_64+0xec/0xf80 [ 366.893380][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.899428][ C0] ? trace_irq_disable+0x37/0x100 [ 366.904452][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.910324][ C0] RIP: 0033:0x7f0a5898e3aa [ 366.914718][ C0] RSP: 002b:00007fffb6a5b7d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 366.923113][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f0a5898e3aa [ 366.931073][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 366.939032][ C0] RBP: 00007fffb6a5b82c R08: 00007fffb6a5b11c R09: 0079746972756365 [ 366.947002][ C0] R10: 00007fffb6a5b180 R11: 0000000000000293 R12: 00000000000000aa [ 366.954968][ C0] R13: 00000000000927c0 R14: 000000000003f70f R15: 00007fffb6a5b880 [ 366.962949][ C0] [ 366.965952][ C0] task:dhcpcd-run-hook state:R running task stack:28088 pid:8944 tgid:8944 ppid:8943 task_flags:0x400040 flags:0x00080000 [ 366.979428][ C0] Call Trace: [ 366.982685][ C0] [ 366.985598][ C0] __schedule+0x149b/0x4fd0 [ 366.990099][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 366.995729][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.001343][ C0] ? stack_trace_save+0x9c/0xe0 [ 367.006188][ C0] ? __pfx___schedule+0x10/0x10 [ 367.011021][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.016636][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 367.021566][ C0] preempt_schedule_irq+0x4d/0xa0 [ 367.026571][ C0] irqentry_exit+0x5d8/0x660 [ 367.031142][ C0] ? rcu_is_watching+0x15/0xb0 [ 367.035896][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 367.041349][ C0] RIP: 0010:lock_release+0x2d8/0x3b0 [ 367.046615][ C0] Code: 34 e2 10 00 00 00 00 eb b5 e8 94 6f bb 09 f7 c3 00 02 00 00 74 b9 65 48 8b 05 a4 ee e1 10 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 74 1f 72 ff cc 48 8d 3d 31 48 e7 [ 367.066206][ C0] RSP: 0000:ffffc90003387540 EFLAGS: 00000282 [ 367.072259][ C0] RAX: c567a77b448d4a00 RBX: 0000000000000202 RCX: 0000000000000046 [ 367.080211][ C0] RDX: 0000000000000001 RSI: ffffffff8d975e98 RDI: ffffffff8bc083e0 [ 367.088165][ C0] RBP: ffff88802471e6d8 R08: ffff88801c034cff R09: 1ffff1100380699f [ 367.096120][ C0] R10: dffffc0000000000 R11: ffffed10038069a0 R12: 0000000000000001 [ 367.104074][ C0] R13: 0000000000000001 R14: ffffffff8df41aa0 R15: ffff88802471db80 [ 367.112062][ C0] ? __page_table_check_zero+0x6a/0x3e0 [ 367.117596][ C0] __page_table_check_zero+0x397/0x3e0 [ 367.123036][ C0] ? __page_table_check_zero+0x6a/0x3e0 [ 367.128565][ C0] post_alloc_hook+0x247/0x290 [ 367.133315][ C0] get_page_from_freelist+0x24e0/0x2580 [ 367.138849][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.144478][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.150113][ C0] ? prepare_alloc_pages+0x22b/0x650 [ 367.155388][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 367.161187][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 367.167517][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.173139][ C0] ? policy_nodemask+0x27c/0x720 [ 367.178061][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.183683][ C0] alloc_pages_mpol+0x232/0x4a0 [ 367.188526][ C0] vma_alloc_folio_noprof+0xe4/0x200 [ 367.193797][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.199415][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 367.205299][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.210917][ C0] folio_prealloc+0x30/0x180 [ 367.215494][ C0] do_wp_page+0x1231/0x5810 [ 367.219988][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.225623][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 367.230459][ C0] ? do_raw_spin_lock+0x121/0x290 [ 367.235474][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 367.240832][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.246457][ C0] handle_mm_fault+0x14c5/0x32b0 [ 367.251396][ C0] ? handle_mm_fault+0xdb/0x32b0 [ 367.256335][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 367.261608][ C0] ? lock_vma_under_rcu+0x42c/0x4a0 [ 367.266801][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.272427][ C0] do_user_addr_fault+0xa7c/0x1380 [ 367.277527][ C0] ? rcu_is_watching+0x15/0xb0 [ 367.282275][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.287889][ C0] ? trace_page_fault_user+0x84/0x1c0 [ 367.293242][ C0] exc_page_fault+0x71/0xd0 [ 367.297728][ C0] asm_exc_page_fault+0x26/0x30 [ 367.302557][ C0] RIP: 0033:0x7f6ce7b222cd [ 367.306951][ C0] RSP: 002b:00007ffe62af8960 EFLAGS: 00010202 [ 367.313000][ C0] RAX: 0000000000000000 RBX: 00007f6ce7d2d000 RCX: 00007f6ce7a8bf07 [ 367.320953][ C0] RDX: 0000000000000000 RSI: 00007ffe62af8938 RDI: 0000000000000002 [ 367.328908][ C0] RBP: 0000563ff694ae60 R08: 00007f6ce7c1eb60 R09: 0000000000000000 [ 367.336864][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000563ff694d060 [ 367.344813][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.352781][ C0] [ 367.355781][ C0] task:syz.6.913 state:R running task stack:25752 pid:8918 tgid:8918 ppid:7657 task_flags:0x40004c flags:0x00080001 [ 367.369253][ C0] Call Trace: [ 367.372512][ C0] [ 367.375424][ C0] __schedule+0x149b/0x4fd0 [ 367.379926][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 367.384858][ C0] ? __pfx___schedule+0x10/0x10 [ 367.389690][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.395321][ C0] preempt_schedule_irq+0x4d/0xa0 [ 367.400325][ C0] irqentry_exit+0x5d8/0x660 [ 367.404895][ C0] ? rcu_is_watching+0x15/0xb0 [ 367.409650][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 367.415092][ C0] RIP: 0010:unwind_next_frame+0xe64/0x23d0 [ 367.420883][ C0] Code: 4c 39 e0 0f 96 c0 20 c8 3c 01 0f 85 d1 0b 00 00 48 89 df e8 ae 21 00 00 48 89 c3 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 30 <80> 3c 28 00 4c 8b 7c 24 10 74 08 4c 89 ff e8 a9 0b b3 00 49 89 1f [ 367.440468][ C0] RSP: 0018:ffffc900032f77b8 EFLAGS: 00000202 [ 367.446516][ C0] RAX: 1ffff9200065ef1a RBX: ffffffff8184abac RCX: 1ffff9200065ef01 [ 367.454468][ C0] RDX: ffffffff901680a4 RSI: 0000000000000002 RDI: ffffc900032f7e80 [ 367.462420][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff8df41aa0 [ 367.470374][ C0] R10: dffffc0000000000 R11: ffffffff81acf3a0 R12: ffffc900032f8000 [ 367.478350][ C0] R13: 1ffff9200065ef13 R14: ffffc900032f7888 R15: ffffc900032f0000 [ 367.486308][ C0] ? do_group_exit+0x21c/0x2d0 [ 367.491066][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 367.497223][ C0] ? unwind_next_frame+0xe52/0x23d0 [ 367.502411][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 367.507508][ C0] ? do_exit+0x694/0x22f0 [ 367.511827][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 367.517974][ C0] arch_stack_walk+0x11c/0x150 [ 367.522726][ C0] ? do_exit+0x694/0x22f0 [ 367.527048][ C0] stack_trace_save+0x9c/0xe0 [ 367.531716][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 367.537081][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 367.541825][ C0] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 367.547349][ C0] ? kmem_cache_free+0x16b/0x620 [ 367.552265][ C0] ? task_work_run+0x1d4/0x260 [ 367.557015][ C0] ? do_exit+0x694/0x22f0 [ 367.561332][ C0] ? do_group_exit+0x21c/0x2d0 [ 367.566082][ C0] ? __x64_sys_exit_group+0x3f/0x40 [ 367.571269][ C0] ? x64_sys_call+0x2210/0x2210 [ 367.576139][ C0] kasan_save_stack+0x3e/0x60 [ 367.580800][ C0] ? kasan_save_stack+0x3e/0x60 [ 367.585630][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 367.590990][ C0] ? kmem_cache_free+0x475/0x620 [ 367.595906][ C0] ? task_work_run+0x1d4/0x260 [ 367.600671][ C0] ? do_exit+0x694/0x22f0 [ 367.605031][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 367.610221][ C0] kmem_cache_free+0x475/0x620 [ 367.614982][ C0] ? task_work_run+0x1d4/0x260 [ 367.619740][ C0] task_work_run+0x1d4/0x260 [ 367.624322][ C0] ? __pfx_task_work_run+0x10/0x10 [ 367.629421][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 367.634615][ C0] do_exit+0x694/0x22f0 [ 367.638761][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 367.644564][ C0] ? __pfx_do_exit+0x10/0x10 [ 367.649146][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 367.654498][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.660119][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 367.665477][ C0] do_group_exit+0x21c/0x2d0 [ 367.670061][ C0] __x64_sys_exit_group+0x3f/0x40 [ 367.675078][ C0] x64_sys_call+0x2210/0x2210 [ 367.679745][ C0] do_syscall_64+0xec/0xf80 [ 367.684233][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.690280][ C0] ? trace_irq_disable+0x37/0x100 [ 367.695296][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.701170][ C0] RIP: 0033:0x7f2e9d98f749 [ 367.705563][ C0] RSP: 002b:00007ffd39d8d368 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 367.713960][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2e9d98f749 [ 367.721913][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 367.729865][ C0] RBP: 00007ffd39d8d3cc R08: 0000000739d8d45f R09: 00000000000927c0 [ 367.737814][ C0] R10: 0000000000001834 R11: 0000000000000246 R12: 0000000000000022 [ 367.745761][ C0] R13: 00000000000927c0 R14: 000000000003f36c R15: 00007ffd39d8d420 [ 367.753728][ C0] [ 367.756726][ C0] rcu: rcu_preempt kthread starved for 10617 jiffies! g30325 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 367.767899][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 367.777853][ C0] rcu: RCU grace-period kthread stack dump: [ 367.783725][ C0] task:rcu_preempt state:R running task stack:27480 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 367.797206][ C0] Call Trace: [ 367.800468][ C0] [ 367.803383][ C0] __schedule+0x149b/0x4fd0 [ 367.807875][ C0] ? do_raw_spin_lock+0x121/0x290 [ 367.812904][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.818529][ C0] ? __pfx___schedule+0x10/0x10 [ 367.823364][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.828986][ C0] ? schedule+0x91/0x360 [ 367.833212][ C0] schedule+0x165/0x360 [ 367.837350][ C0] schedule_timeout+0x12b/0x270 [ 367.842192][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 367.847554][ C0] ? __pfx_process_timeout+0x10/0x10 [ 367.852830][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.858445][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 367.864245][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.869865][ C0] ? prepare_to_swait_event+0x341/0x380 [ 367.875409][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 367.880254][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.885879][ C0] ? rcu_gp_init+0x11dc/0x1650 [ 367.890640][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 367.895914][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 367.901133][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 367.906938][ C0] rcu_gp_kthread+0x99/0x390 [ 367.911519][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 367.916703][ C0] ? __kthread_parkme+0x7b/0x200 [ 367.921623][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.927240][ C0] ? __kthread_parkme+0x1a1/0x200 [ 367.932252][ C0] kthread+0x711/0x8a0 [ 367.936311][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 367.941489][ C0] ? __pfx_kthread+0x10/0x10 [ 367.946070][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.951690][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 367.956878][ C0] ? __pfx_kthread+0x10/0x10 [ 367.961457][ C0] ret_from_fork+0x510/0xa50 [ 367.966057][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 367.971170][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 367.976792][ C0] ? __switch_to+0xc9e/0x1480 [ 367.981472][ C0] ? __pfx_kthread+0x10/0x10 [ 367.986069][ C0] ret_from_fork_asm+0x1a/0x30 [ 367.990838][ C0] [ 367.993834][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 368.000130][ C0] Sending NMI from CPU 0 to CPUs 1: [ 368.005324][ C1] NMI backtrace for cpu 1 [ 368.005340][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 368.005363][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 368.005376][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 368.005402][ C1] Code: 3e b4 b6 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 13 b4 b6 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 368.005420][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 000002c2 [ 368.005439][ C1] RAX: 00000000004b2101 RBX: ffffffff819713be RCX: 0000000080000001 [ 368.005455][ C1] RDX: 0000000000000001 RSI: ffffffff8d792008 RDI: ffffffff8bc083e0 [ 368.005471][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 368.005487][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822170 [ 368.005504][ C1] R13: 1ffff1100385fb70 R14: 0000000000000001 R15: 0000000000000001 [ 368.005521][ C1] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 368.005539][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.005554][ C1] CR2: 00007febef372100 CR3: 0000000075d4b000 CR4: 0000000000350ef0 [ 368.005571][ C1] Call Trace: [ 368.005579][ C1] [ 368.005587][ C1] default_idle+0x13/0x20 [ 368.005612][ C1] default_idle_call+0x73/0xb0 [ 368.005638][ C1] do_idle+0x1be/0x4d0 [ 368.005662][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.005687][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 368.005712][ C1] ? __pfx_do_idle+0x10/0x10 [ 368.005743][ C1] cpu_startup_entry+0x44/0x60 [ 368.005767][ C1] start_secondary+0x101/0x110 [ 368.005800][ C1] common_startup_64+0x13e/0x147 [ 368.005840][ C1]