last executing test programs: 5.743685755s ago: executing program 1 (id=156): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="001727000000ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x0, 0xe, 0x4, '\"098'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="001309"], 0x0, 0x0, 0x0, 0x0, 0x0}) 4.764103842s ago: executing program 3 (id=163): socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x7c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x7, 0x2, "fd918f"}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sync_file_range(r9, 0x9d0, 0x4000000006, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0xa}}, 0x20) 3.594532826s ago: executing program 3 (id=167): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x129442, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x12) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r4, 0x0, 0xb}, 0x18) close(r3) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xbe, &(0x7f0000000580)=""/190, 0x41100, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, 0x0) read$FUSE(r2, &(0x7f0000002940)={0x2020}, 0xfffffffffffffcc5) timer_create(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x281847e, 0x0) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x0, 0x6, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0xfffffff8, 0x1, 0x1003, 0x6, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x40000010, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x1, 0x2001, 0x4, 0x8049]}) 2.882358447s ago: executing program 2 (id=168): syz_mount_image$udf(&(0x7f0000000580), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x47, 0xc22, &(0x7f0000001940)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) unlink(&(0x7f0000000d00)='./file1\x00') 2.140534169s ago: executing program 3 (id=170): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)=0x0) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x179c0641) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}}, 0x0) 2.099770654s ago: executing program 2 (id=172): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(anubis-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001040)="8af11dfbd2c6a2ce0af38dff9fe61678", 0x10}], 0x1, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000001}], 0x1, 0x81) recvmmsg(r1, &(0x7f000000bc40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/71, 0x47}], 0x1}, 0x9}], 0x1, 0x0, 0x0) 1.880143645s ago: executing program 1 (id=174): sendmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99", 0x64}], 0x1}}], 0x1, 0x11) syz_usb_connect(0x4, 0x171, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0xbc, 0x28, 0x31, 0x10, 0x10c4, 0xea63, 0xc567, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15f, 0x2, 0x7f, 0x1, 0x10, 0x1, [{{0x9, 0x4, 0x19, 0x3, 0x3, 0xf5, 0x2b, 0x79, 0xc, [], [{{0x9, 0x5, 0xe, 0x0, 0x400, 0x7, 0x90, 0x10, [@generic={0x40, 0x5, "4036515fbd0a220d6777accbf032fa8d38d9e4ad3eb1ca4f6995612088ec81f0a3af5b69b582505ab4e338ee02a72342191baca3b6e1375e13d28c68a94c"}, @generic={0x52, 0x0, "e8256445194ded166c47025635289e3f59c2de5201a1d43ab497cff4925424a6c8d359658451e12b7249972c8c869f6ef97d111286d64bf111a9d7999bb0bf2f34b22cbf013db8d50439b97e2ddaecc1"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x7, 0x9, 0xe9, [@generic={0x73, 0x0, "568c7ca1bf029d9cb2f634d37c03afe27999bffeb64fb4d06c5cc3cfe175e6861c22f28e9dcca288e75ec4566ee598af1af0b538472b43a486e372e397baaf963a9a6011ab1d436caabdefc65a82818911ce79bddd760bd4b2615f457ed18a18113a9d34f0e55b144ff3c2a0eff00dffef"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x7ff, 0x8, 0x9, 0x41}}]}}, {{0x9, 0x4, 0x3a, 0x4, 0x1, 0x33, 0x7f, 0x40, 0x9, [], [{{0x9, 0x5, 0xc, 0x0, 0x8, 0x0, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf8, 0x7}, @generic={0x14, 0x22, "4316cadb61892125cf20a2373284f2094718"}]}}]}}]}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.879717545s ago: executing program 3 (id=175): socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x7c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x7, 0x2, "fd918f"}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sync_file_range(r9, 0x9d0, 0x4000000006, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0xa}}, 0x20) 1.879542615s ago: executing program 0 (id=176): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 1.778076705s ago: executing program 0 (id=177): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="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", 0x174}, {&(0x7f0000000300)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d5", 0x8c}], 0x2, 0x0, 0x0, 0x44000}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000080)=""/203, 0xcb}, {&(0x7f0000000180)=""/213, 0xd5}, {&(0x7f0000000280)=""/95, 0x5f}], 0x3}, 0x5}], 0x1, 0x0, 0x0) 1.704358713s ago: executing program 0 (id=178): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x129442, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x12) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r4, 0x0, 0xb}, 0x18) close(r3) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xbe, &(0x7f0000000580)=""/190, 0x41100, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, 0x0) read$FUSE(r2, &(0x7f0000002940)={0x2020}, 0xfffffffffffffcc5) timer_create(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) mount(&(0x7f0000000400)=@nullb, &(0x7f0000000040)='./file0\x00', 0x0, 0x281847e, 0x0) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300), &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x0, 0x6, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0xfffffff8, 0x1, 0x1003, 0x6, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x40000010, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x1, 0x2001, 0x4, 0x8049]}) 1.556231877s ago: executing program 2 (id=179): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f00000002c0)={r2, 0x88, "0200000000000000703fcc09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d52248dc51b23de50b4c05268ed973a4485fa5f43833004f58041310b18d364b87808f6edfb597fae6ac116b5bc6c564674a8daa53764b3e1cf98676e592103c268225b716a78c48c8c8f8ec21e15e"}, &(0x7f0000000000)=0x90) 661.327325ms ago: executing program 1 (id=180): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)={'bond0\x00', 0x100}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) 625.316719ms ago: executing program 2 (id=181): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x36, &(0x7f0000001240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @generic={0x2, 0x6, "c34fd6", 0x0, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote}}}}, 0x0) 436.112197ms ago: executing program 1 (id=182): getpid() r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0xa, 0x1, 0x8}]}}, {0x2, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x39, 0x2, 0x0) 435.353477ms ago: executing program 0 (id=183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 355.966455ms ago: executing program 2 (id=184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000380)={0x2e, 0x0, [{0xc0000000, 0x8, 0x5, 0x80, 0x5, 0x8, 0x6c7}, {0x40000000, 0x9, 0x4, 0x6, 0x8, 0x2, 0xffff}, {0x4, 0x7, 0x6, 0x6, 0x6, 0xa19, 0x401}, {0xc0000000, 0x5, 0x6, 0x2, 0x0, 0x100, 0xd}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @sock_ops=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[]) 342.330146ms ago: executing program 3 (id=185): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x0, 0x0, 0xd2c, 0x1}) r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r0, &(0x7f0000000180)='fdinfo/3\x00') 288.739601ms ago: executing program 1 (id=186): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010104}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r2], 0x20, 0x6044}, 0x6) 148.207415ms ago: executing program 0 (id=187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x3, 0x4, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000180), &(0x7f0000000300)=r1}, 0x20) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 147.966955ms ago: executing program 3 (id=188): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) 143.017946ms ago: executing program 1 (id=189): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x40000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x3000809, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, 'mnt'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) getdents64(r0, &(0x7f0000000100)=""/134, 0x86) 70.735113ms ago: executing program 2 (id=190): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) setrlimit(0x0, &(0x7f0000000140)={0x95af, 0x7}) 0s ago: executing program 0 (id=191): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xf48f) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) sendto$inet(r0, &(0x7f00000004c0)='<', 0x1, 0x885, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.16' (ED25519) to the list of known hosts. [ 56.600264][ T5770] cgroup: Unknown subsys name 'net' [ 56.729389][ T5770] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.098504][ T5770] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.507401][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.507917][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.516145][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.523386][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.531146][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.536454][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.543490][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.558168][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.565908][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.573260][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.582578][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.588952][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.590439][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.597530][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.606032][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.612239][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.619468][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.632029][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.632703][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.640859][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.646840][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.674146][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.683852][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.692273][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.062996][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 60.152090][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 60.171210][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 60.262535][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.270501][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.278577][ T5782] bridge_slave_0: entered allmulticast mode [ 60.286112][ T5782] bridge_slave_0: entered promiscuous mode [ 60.298221][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.305409][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.312494][ T5782] bridge_slave_1: entered allmulticast mode [ 60.319298][ T5782] bridge_slave_1: entered promiscuous mode [ 60.389477][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.402461][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.436546][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 60.483012][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.490178][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.497730][ T5780] bridge_slave_0: entered allmulticast mode [ 60.504792][ T5780] bridge_slave_0: entered promiscuous mode [ 60.515160][ T5782] team0: Port device team_slave_0 added [ 60.535756][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.542935][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.550044][ T5783] bridge_slave_0: entered allmulticast mode [ 60.557074][ T5783] bridge_slave_0: entered promiscuous mode [ 60.564315][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.571427][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.578850][ T5780] bridge_slave_1: entered allmulticast mode [ 60.585996][ T5780] bridge_slave_1: entered promiscuous mode [ 60.594058][ T5782] team0: Port device team_slave_1 added [ 60.607752][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.615448][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.622551][ T5783] bridge_slave_1: entered allmulticast mode [ 60.629452][ T5783] bridge_slave_1: entered promiscuous mode [ 60.708647][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.715681][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.742991][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.759712][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.771007][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.780646][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.787888][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.813828][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.847776][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.858687][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.885436][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.892629][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.900798][ T5781] bridge_slave_0: entered allmulticast mode [ 60.907603][ T5781] bridge_slave_0: entered promiscuous mode [ 60.946801][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.954216][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.961461][ T5781] bridge_slave_1: entered allmulticast mode [ 60.968377][ T5781] bridge_slave_1: entered promiscuous mode [ 60.988522][ T5783] team0: Port device team_slave_0 added [ 60.996790][ T5780] team0: Port device team_slave_0 added [ 61.029752][ T5783] team0: Port device team_slave_1 added [ 61.037330][ T5780] team0: Port device team_slave_1 added [ 61.046617][ T5782] hsr_slave_0: entered promiscuous mode [ 61.053069][ T5782] hsr_slave_1: entered promiscuous mode [ 61.083666][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.131146][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.162410][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.169405][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.196154][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.230963][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.237968][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.264397][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.281003][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.288391][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.314754][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.326798][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.333775][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.360421][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.375038][ T5781] team0: Port device team_slave_0 added [ 61.386786][ T5781] team0: Port device team_slave_1 added [ 61.462109][ T5783] hsr_slave_0: entered promiscuous mode [ 61.468384][ T5783] hsr_slave_1: entered promiscuous mode [ 61.474860][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.482572][ T5783] Cannot create hsr debugfs directory [ 61.489510][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.496612][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.522648][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.561249][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.568393][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.594432][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.670930][ T5780] hsr_slave_0: entered promiscuous mode [ 61.677261][ T5780] hsr_slave_1: entered promiscuous mode [ 61.683720][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.691298][ T5780] Cannot create hsr debugfs directory [ 61.703634][ T5103] Bluetooth: hci1: command tx timeout [ 61.707881][ T51] Bluetooth: hci3: command tx timeout [ 61.709336][ T5787] Bluetooth: hci0: command tx timeout [ 61.768825][ T5781] hsr_slave_0: entered promiscuous mode [ 61.775461][ T5781] hsr_slave_1: entered promiscuous mode [ 61.781446][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.783550][ T5787] Bluetooth: hci2: command tx timeout [ 61.790375][ T5781] Cannot create hsr debugfs directory [ 61.980869][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.000119][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.009184][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.018787][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.116667][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.129291][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.140412][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.167784][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.236596][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.247940][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.271660][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.281818][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.351532][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.376787][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.388137][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.406016][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.476343][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.513223][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.530181][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.551232][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.579035][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.586362][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.597786][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.604887][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.614259][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.621336][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.655933][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.663101][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.726237][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.767123][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.791767][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.805660][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.812766][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.866931][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.874119][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.889535][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.942723][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.949902][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.965264][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.972406][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.070778][ T5781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.095222][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.221841][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.346215][ T5782] veth0_vlan: entered promiscuous mode [ 63.364391][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.388594][ T5782] veth1_vlan: entered promiscuous mode [ 63.474309][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.512018][ T5783] veth0_vlan: entered promiscuous mode [ 63.527111][ T5782] veth0_macvtap: entered promiscuous mode [ 63.539901][ T5782] veth1_macvtap: entered promiscuous mode [ 63.557029][ T5783] veth1_vlan: entered promiscuous mode [ 63.575286][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.604491][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.629229][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.660315][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.669510][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.679455][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.688354][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.701617][ T5780] veth0_vlan: entered promiscuous mode [ 63.730978][ T5780] veth1_vlan: entered promiscuous mode [ 63.751632][ T5783] veth0_macvtap: entered promiscuous mode [ 63.773528][ T51] Bluetooth: hci1: command tx timeout [ 63.773929][ T5103] Bluetooth: hci3: command tx timeout [ 63.778989][ T5787] Bluetooth: hci0: command tx timeout [ 63.820045][ T5781] veth0_vlan: entered promiscuous mode [ 63.835828][ T5783] veth1_macvtap: entered promiscuous mode [ 63.854081][ T5787] Bluetooth: hci2: command tx timeout [ 63.895509][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.897962][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.916829][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.928935][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.935787][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.940108][ T5780] veth0_macvtap: entered promiscuous mode [ 63.953727][ T5780] veth1_macvtap: entered promiscuous mode [ 63.960967][ T5781] veth1_vlan: entered promiscuous mode [ 63.976833][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.987812][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.998729][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.032381][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.041702][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.050669][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.060300][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.083232][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.096026][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.110360][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.120945][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.131496][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.142514][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.154999][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.194248][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.212237][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.224903][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.235444][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.249597][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.261082][ T5781] veth0_macvtap: entered promiscuous mode [ 64.280933][ T5781] veth1_macvtap: entered promiscuous mode [ 64.297355][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.311599][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.321732][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.335871][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.410283][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.432190][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.442272][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.454237][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.464169][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.474660][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.485963][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.512167][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.528290][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.529649][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.548190][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.558413][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.569516][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.579660][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.590155][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.601017][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.619069][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.628061][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.637077][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.647924][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.683214][ T5865] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.716305][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.724141][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.724160][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.750117][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.805593][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.817634][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.890429][ T5865] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 64.921293][ T5865] usb 3-1: config 0 has no interface number 0 [ 64.936634][ T5865] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 64.959985][ T5865] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 64.973747][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.978362][ T5865] usb 3-1: config 0 interface 255 has no altsetting 0 [ 64.987879][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.989844][ T5865] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 65.011923][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.040470][ T5865] usb 3-1: config 0 descriptor?? [ 65.075760][ T5865] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 65.093760][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.127434][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.228476][ T5876] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.407400][ T5879] syz.0.1[5879]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 65.417577][ T5865] usb 3-1: USB disconnect, device number 2 [ 65.450506][ T5879] loop0: detected capacity change from 0 to 256 [ 65.495900][ T5879] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 65.576837][ T5879] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 65.582342][ T5881] loop2: detected capacity change from 0 to 7 [ 65.598805][ T5797] Dev loop2: unable to read RDB block 7 [ 65.606770][ T5797] loop2: unable to read partition table [ 65.613394][ T5879] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 65.613534][ T5797] loop2: partition table beyond EOD, [ 65.621033][ T5879] UDF-fs: Scanning with blocksize 512 failed [ 65.636346][ T5879] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 65.646442][ T5797] truncated [ 65.652376][ T5881] Dev loop2: unable to read RDB block 7 [ 65.659000][ T5881] loop2: unable to read partition table [ 65.665090][ T5879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.668282][ T5881] loop2: partition table beyond EOD, truncated [ 65.703253][ T5881] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 65.839992][ T27] audit: type=1804 audit(1761256221.014:2): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1" name="/newroot/0/file0/file1" dev="loop0" ino=57 res=1 errno=0 [ 65.877035][ T5787] Bluetooth: hci3: command tx timeout [ 65.877656][ T5103] Bluetooth: hci0: command tx timeout [ 65.883585][ T5787] Bluetooth: hci1: command tx timeout [ 65.926763][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 65.940778][ T5787] Bluetooth: hci2: command tx timeout [ 66.369910][ T5899] vivid-007: disconnect [ 66.381434][ T5898] vivid-007: reconnect [ 66.397638][ T5904] warning: `syz.1.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.474166][ T5865] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.539606][ T5908] loop2: detected capacity change from 0 to 2048 [ 66.605852][ T5913] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.670483][ T5865] usb 1-1: config 0 has no interfaces? [ 66.683253][ T5865] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 66.715367][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.747687][ T5865] usb 1-1: config 0 descriptor?? [ 67.196794][ T5913] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 67.209991][ T5913] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 67.224197][ T5913] Remounting filesystem read-only [ 67.229396][ T2960] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 67.237633][ T2960] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 67.245179][ T23] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 67.245403][ T2960] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.262025][ T2960] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.271027][ T2960] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.280038][ T2960] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 67.287154][ T2960] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 67.295423][ T2960] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 67.302714][ T2960] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 67.310062][ T2960] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.319791][ T2960] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 67.326939][ T2960] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.336063][ T2960] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.345295][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.352506][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.359782][ T2960] NILFS (loop2): discard dirty page: offset=69632, ino=3 [ 67.366832][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.374437][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.381637][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.388968][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.396245][ T2960] NILFS (loop2): discard dirty page: offset=73728, ino=3 [ 67.403636][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.410860][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.418611][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.426525][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.434144][ T2960] NILFS (loop2): discard dirty page: offset=77824, ino=3 [ 67.441195][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.448508][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.456371][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.468608][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.474109][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.476377][ T2960] NILFS (loop2): discard dirty page: offset=81920, ino=3 [ 67.485843][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.497421][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.506207][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 67.517871][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.524318][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.530204][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.545458][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.552751][ T2960] NILFS (loop2): discard dirty page: offset=86016, ino=3 [ 67.560168][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.568291][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.575599][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.582921][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.590157][ T2960] NILFS (loop2): discard dirty page: offset=90112, ino=3 [ 67.597460][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.605062][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.612332][ T2960] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 67.620775][ T2960] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.630958][ T2960] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 67.638236][ T2960] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.647336][ T2960] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.656280][ T2960] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 67.663621][ T2960] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.672541][ T2960] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 67.679740][ T2960] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 67.687469][ T2960] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.696388][ T5866] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.704211][ T2960] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.713294][ T2960] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.723659][ T5782] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 67.751366][ T5782] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 67.759026][ T5782] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 67.766745][ T5782] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 67.767413][ T23] usb 4-1: GET_CAPABILITIES returned 0 [ 67.780395][ T23] usbtmc 4-1:16.0: can't read capabilities [ 67.781232][ T5782] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 67.798152][ T5782] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 67.808879][ T5782] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 67.816032][ T5782] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 67.823558][ T5782] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.832767][ T5782] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.841904][ T5782] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 67.873063][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 67.890904][ T5866] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 67.918923][ T5866] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 67.933524][ T5866] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 67.940041][ T5103] Bluetooth: hci3: command tx timeout [ 67.948238][ T5866] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.952161][ T51] Bluetooth: hci1: command tx timeout [ 67.961671][ T5787] Bluetooth: hci0: command tx timeout [ 67.982895][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 67.990917][ T5866] usb 2-1: SerialNumber: syz [ 68.013692][ T5926] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 68.021554][ T5787] Bluetooth: hci2: command tx timeout [ 68.063254][ T23] usb 4-1: USB disconnect, device number 2 [ 68.246076][ T5866] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 68.257376][ T5866] usb 2-1: USB disconnect, device number 2 [ 69.213192][ T5784] usb 1-1: USB disconnect, device number 2 [ 69.649362][ T5970] loop1: detected capacity change from 0 to 1024 [ 69.656804][ T5970] EXT4-fs: Ignoring removed orlov option [ 69.662558][ T5970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.726669][ T5970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.772749][ T5828] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 69.832008][ T27] audit: type=1800 audit(1761256225.014:3): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.31" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 69.854022][ T5784] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 69.974909][ T5828] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 70.008128][ T5828] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 70.039328][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.055877][ T5784] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.074607][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.088186][ T5828] usb 4-1: Product: syz [ 70.092369][ T5828] usb 4-1: Manufacturer: syz [ 70.098335][ T5784] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.108406][ T5828] usb 4-1: SerialNumber: syz [ 70.121409][ T5784] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 70.131692][ T5968] loop0: detected capacity change from 0 to 32768 [ 70.132659][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 70.164975][ T5828] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 70.176665][ T5968] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.30 (5968) [ 70.192985][ T5784] usb 3-1: SerialNumber: syz [ 70.300633][ T5968] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 70.315391][ T5987] loop1: detected capacity change from 0 to 128 [ 70.337749][ T5968] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 70.351513][ T5987] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 70.371410][ T5968] BTRFS info (device loop0): metadata ratio 2 [ 70.400793][ T5968] BTRFS info (device loop0): allowing degraded mounts [ 70.413745][ T5968] BTRFS info (device loop0): force zlib compression, level 3 [ 70.443694][ T5968] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 70.466938][ T5784] usb 3-1: 0:2 : does not exist [ 70.477647][ T5987] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 70.498873][ T5968] BTRFS info (device loop0): use zstd compression, level 3 [ 70.530656][ T5968] BTRFS info (device loop0): force clearing of disk cache [ 70.530733][ T5784] usb 3-1: USB disconnect, device number 3 [ 70.557993][ T5968] BTRFS info (device loop0): max_inline at 0 [ 70.608248][ T5968] BTRFS info (device loop0): using free space tree [ 70.867160][ T5968] BTRFS info (device loop0): enabling ssd optimizations [ 70.898028][ T5968] BTRFS info (device loop0): rebuilding free space tree [ 70.925465][ T6013] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 71.169326][ T27] audit: type=1800 audit(1761256226.354:4): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.30" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 71.234905][ T5828] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 71.249410][ T27] audit: type=1804 audit(1761256226.444:5): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.30" name="/newroot/3/file1/bus" dev="loop0" ino=263 res=1 errno=0 [ 71.403409][ T5866] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 71.457107][ T5781] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 71.478019][ T23] usb 4-1: USB disconnect, device number 3 [ 71.542736][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.557729][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.622946][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 71.632119][ T5866] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 71.670527][ T5866] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 71.693286][ T5866] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.741216][ T5866] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.771800][ T5866] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 71.833078][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.115808][ T5866] usb 2-1: GET_CAPABILITIES returned 0 [ 72.121357][ T5866] usbtmc 2-1:16.0: can't read capabilities [ 72.292610][ T6049] Illegal XDP return value 4294967274 on prog (id 7) dev syz_tun, expect packet loss! [ 72.375360][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 72.431036][ T5866] usb 2-1: USB disconnect, device number 3 [ 72.475650][ T6053] loop3: detected capacity change from 0 to 47 [ 72.482600][ T6053] ======================================================= [ 72.482600][ T6053] WARNING: The mand mount option has been deprecated and [ 72.482600][ T6053] and is ignored by this kernel. Remove the mand [ 72.482600][ T6053] option from the mount to silence this warning. [ 72.482600][ T6053] ======================================================= [ 72.602883][ T6055] syz.0.41 uses obsolete (PF_INET,SOCK_PACKET) [ 72.706673][ T6030] loop2: detected capacity change from 0 to 32768 [ 72.794854][ T6030] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 72.819791][ T6030] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 72.984693][ T6030] XFS (loop2): Ending clean mount [ 73.043784][ T6030] XFS (loop2): Quotacheck needed: Please wait. [ 73.105324][ T6030] XFS (loop2): Quotacheck: Done. [ 73.172984][ T5784] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 73.191404][ T5782] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 73.399470][ T5784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.433308][ T5784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.458104][ T5784] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.485143][ T5784] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.503273][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.552427][ T5784] usb 1-1: config 0 descriptor?? [ 73.703716][ T6090] loop2: detected capacity change from 0 to 4096 [ 73.862918][ T5828] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 73.926644][ T6097] loop3: detected capacity change from 0 to 16 [ 73.979872][ T6097] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 74.035058][ T5784] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 74.066492][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.099823][ T6090] ntfs3: loop2: ino=0, "file0" failed to parse mft record [ 74.123386][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.143754][ T6090] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 74.147061][ T5784] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 74.173931][ T5828] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.209911][ T5828] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.273008][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.330798][ T5828] usb 2-1: config 0 descriptor?? [ 74.496015][ T5784] usb 1-1: USB disconnect, device number 3 [ 74.774524][ T5828] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xe [ 74.792361][ T5828] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 74.800957][ T5828] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 74.829487][ T5828] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 75.029670][ T6121] input: syz0 as /devices/virtual/input/input5 [ 75.096100][ T5828] usb 2-1: USB disconnect, device number 4 [ 75.561919][ T6136] loop2: detected capacity change from 0 to 2048 [ 75.593441][ T6137] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.141077][ T6149] loop3: detected capacity change from 0 to 2048 [ 76.156165][ T6149] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 76.190283][ T6149] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.224723][ T6153] loop1: detected capacity change from 0 to 256 [ 76.244917][ T6153] exfat: Deprecated parameter 'utf8' [ 76.289554][ T6153] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 76.413012][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.622942][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 76.641300][ T23] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 76.659908][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.691136][ T23] usb 1-1: Product: syz [ 76.709210][ T23] usb 1-1: Manufacturer: syz [ 76.731353][ T23] usb 1-1: SerialNumber: syz [ 76.750792][ T23] usb 1-1: config 0 descriptor?? [ 77.229477][ T23] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 77.233782][ T6167] loop3: detected capacity change from 0 to 2048 [ 77.258760][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 77.306001][ T23] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 77.317267][ T6167] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 77.329257][ T23] usb 1-1: media controller created [ 77.341572][ T6167] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.431120][ T6151] dtv5100: wlen = 0, aborting. [ 77.442776][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 77.608458][ T23] zl10353_read_register: readreg error (reg=127, ret==0) [ 77.622997][ T23] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 77.630942][ T23] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 77.683161][ T23] usb 1-1: USB disconnect, device number 4 [ 77.754405][ T23] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 77.887352][ T6161] IPVS: You probably need to specify IP address on multicast interface. [ 77.905356][ T6172] sp0: Synchronizing with TNC [ 77.913615][ T6161] IPVS: Error connecting to the multicast addr [ 78.288730][ T6175] loop3: detected capacity change from 0 to 1024 [ 78.468438][ T6175] hfsplus: xattr searching failed [ 78.503307][ T6175] process 'syz.3.73' launched './file0' with NULL argv: empty string added [ 78.573915][ T6175] hfsplus: xattr searching failed [ 78.602641][ T6175] hfsplus: xattr searching failed [ 78.872980][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 78.982375][ T6177] loop1: detected capacity change from 0 to 32768 [ 79.008256][ T6177] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.74 (6177) [ 79.063250][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 79.071016][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.083852][ T6177] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 79.089291][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.103148][ T6177] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 79.122934][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.128536][ T23] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 79.131819][ T6177] BTRFS info (device loop1): using free space tree [ 79.152271][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.195433][ T23] usb 1-1: config 0 descriptor?? [ 79.261933][ T6177] BTRFS info (device loop1): enabling ssd optimizations [ 79.290126][ T6177] BTRFS info (device loop1): auto enabling async discard [ 79.334020][ T8] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 79.347298][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.355698][ T8] usb 4-1: Product: syz [ 79.359875][ T8] usb 4-1: Manufacturer: syz [ 79.366224][ T8] usb 4-1: SerialNumber: syz [ 79.378880][ T8] usb 4-1: config 0 descriptor?? [ 79.569334][ T5780] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 79.692731][ T23] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 80.046364][ T5828] usb 1-1: USB disconnect, device number 5 [ 80.424521][ T8] usb 4-1: Firmware version (0.0) predates our first public release. [ 80.433638][ T8] usb 4-1: Please update to version 0.2 or newer [ 80.595510][ T8] usb 4-1: USB disconnect, device number 4 [ 80.725335][ T6209] capability: warning: `syz.1.80' uses deprecated v2 capabilities in a way that may be insecure [ 80.781348][ T6209] loop1: detected capacity change from 0 to 1024 [ 80.807679][ T6209] EXT4-fs: Ignoring removed orlov option [ 80.831444][ T6209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.888402][ T6209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.188576][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.194894][ T6143] Set syz1 is full, maxelem 65536 reached [ 81.408650][ T6225] binder: 6223:6225 ioctl c018620c 200000000200 returned -1 [ 81.425060][ T6222] loop1: detected capacity change from 0 to 4096 [ 81.442910][ T6222] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 81.473201][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 81.533883][ T6229] loop3: detected capacity change from 0 to 1024 [ 81.549791][ T6229] EXT4-fs: Ignoring removed nobh option [ 81.565711][ T6229] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.624581][ T6229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.668943][ T6229] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #12: comm syz.3.88: Deleting old file: nlink 2, error=-2 [ 81.751549][ T23] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 81.764152][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.774007][ T23] usb 1-1: Product: syz [ 81.779172][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.783822][ T787] cfg80211: failed to load regulatory.db [ 81.788564][ T23] usb 1-1: Manufacturer: syz [ 81.803051][ T23] usb 1-1: SerialNumber: syz [ 81.834278][ T23] usb 1-1: config 0 descriptor?? [ 82.005823][ T6238] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 82.423467][ T6234] loop2: detected capacity change from 0 to 40427 [ 82.446089][ T6234] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 82.468198][ T6234] F2FS-fs (loop2): invalid crc value [ 82.483557][ T6234] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.493144][ T787] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 82.508519][ T6237] loop1: detected capacity change from 0 to 32768 [ 82.543007][ T6237] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 82.598522][ T6234] F2FS-fs (loop2): Start checkpoint disabled! [ 82.648308][ T6237] XFS (loop1): Ending clean mount [ 82.653694][ T6234] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 82.712764][ T6237] XFS (loop1): Quotacheck needed: Please wait. [ 82.720588][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 82.766607][ T787] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.793367][ T27] audit: type=1800 audit(1761256237.974:6): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.89" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 82.795709][ T787] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.819369][ T6234] F2FS-fs (loop2): inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x3ab/0x470 [ 82.862928][ T787] usb 4-1: config 0 interface 0 has no altsetting 0 [ 82.869580][ T787] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 82.871808][ T6237] XFS (loop1): Quotacheck: Done. [ 82.880488][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.893049][ T23] usb 1-1: non-Atmel transceiver xxxx0008 [ 82.896295][ T787] usb 4-1: config 0 descriptor?? [ 83.049790][ T3003] kworker/u4:9: attempt to access beyond end of device [ 83.049790][ T3003] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 83.070383][ T3003] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 83.092783][ T3003] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 83.100108][ T23] usb 1-1: Firmware version (0.0) predates our first public release. [ 83.109271][ T5780] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 83.132143][ T23] usb 1-1: Please update to version 0.2 or newer [ 83.157841][ T23] usb 1-1: atusb_probe: initialization failed, error = -19 [ 83.198267][ T23] usb 1-1: USB disconnect, device number 6 [ 83.359444][ T787] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 83.382915][ T787] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 83.390349][ T787] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 83.413562][ T787] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 83.420994][ T787] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 83.459074][ T787] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 83.596364][ T787] usb 4-1: USB disconnect, device number 5 [ 83.635931][ T6252] fido_id[6252]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 83.948923][ T6263] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.346766][ T6261] loop1: detected capacity change from 0 to 32768 [ 84.404671][ T6261] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 84.464351][ T6261] XFS (loop1): Ending clean mount [ 84.488070][ T6261] XFS (loop1): Quotacheck needed: Please wait. [ 84.567623][ T6261] XFS (loop1): Quotacheck: Done. [ 84.625670][ T6261] XFS (loop1): User initiated shutdown received. [ 84.638134][ T6261] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 84.667254][ T6261] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 84.727444][ T5780] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 84.827873][ T6281] loop6: detected capacity change from 0 to 7 [ 84.844936][ T6281] Dev loop6: unable to read RDB block 7 [ 84.869153][ T6281] loop6: AHDI p3 p4 [ 84.883334][ T6281] loop6: partition table partially beyond EOD, truncated [ 84.903487][ T6281] loop6: p3 start 1869967406 is beyond EOD, truncated [ 85.129251][ T6285] Bluetooth: MGMT ver 1.22 [ 85.444502][ T6301] loop3: detected capacity change from 0 to 256 [ 85.542584][ T6303] loop2: detected capacity change from 0 to 4096 [ 85.553091][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 85.555812][ T6303] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 85.572337][ T6301] FAT-fs (loop3): Directory bread(block 64) failed [ 85.574762][ T6303] ntfs3: loop2: It is recommened to use chkdsk. [ 85.601253][ T6301] FAT-fs (loop3): Directory bread(block 65) failed [ 85.621557][ T6301] FAT-fs (loop3): Directory bread(block 66) failed [ 85.647319][ T6301] FAT-fs (loop3): Directory bread(block 67) failed [ 85.659808][ T6301] FAT-fs (loop3): Directory bread(block 68) failed [ 85.667441][ T6301] FAT-fs (loop3): Directory bread(block 69) failed [ 85.682530][ T6301] FAT-fs (loop3): Directory bread(block 70) failed [ 85.690546][ T6301] FAT-fs (loop3): Directory bread(block 71) failed [ 85.700450][ T6301] FAT-fs (loop3): Directory bread(block 72) failed [ 85.710235][ T6301] FAT-fs (loop3): Directory bread(block 73) failed [ 85.778294][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 85.823024][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.859233][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.882474][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 85.911537][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 85.943590][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.984011][ T23] usb 1-1: config 0 descriptor?? [ 86.407767][ T23] HID 045e:07da: Invalid code 65791 type 1 [ 86.431854][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input6 [ 86.466675][ T23] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 86.627606][ T6329] loop3: detected capacity change from 0 to 256 [ 86.645370][ T6329] exfat: Deprecated parameter 'utf8' [ 86.647699][ T6164] usb 1-1: USB disconnect, device number 7 [ 86.680594][ T6329] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 88.232255][ T6336] loop2: detected capacity change from 0 to 32768 [ 88.240516][ T6336] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.128 (6336) [ 88.288293][ T6336] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 88.322278][ T6336] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 88.352503][ T6336] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 88.373441][ T6336] BTRFS info (device loop2): use lzo compression, level 0 [ 88.390822][ T6336] BTRFS info (device loop2): using free space tree [ 88.548239][ T6336] BTRFS info (device loop2): enabling ssd optimizations [ 88.587166][ T6336] BTRFS info (device loop2): auto enabling async discard [ 89.393592][ T6393] comedi comedi0: Minor 3 could not be opened [ 89.822827][ C0] sched: RT throttling activated [ 90.253989][ T5782] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 90.328680][ T6406] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 90.795052][ T6416] loop2: detected capacity change from 0 to 7 [ 90.810576][ T6020] Dev loop2: unable to read RDB block 7 [ 90.835443][ T6020] loop2: AHDI p1 p2 p3 [ 90.839648][ T6020] loop2: partition table partially beyond EOD, truncated [ 90.949401][ T6020] loop2: p1 start 1601398130 is beyond EOD, truncated [ 90.980777][ T6020] loop2: p2 start 1702059890 is beyond EOD, truncated [ 91.031924][ T6416] Dev loop2: unable to read RDB block 7 [ 91.037757][ T6416] loop2: AHDI p1 p2 p3 [ 91.042694][ T6416] loop2: partition table partially beyond EOD, truncated [ 91.055243][ T6416] loop2: p1 start 1601398130 is beyond EOD, truncated [ 91.062140][ T6416] loop2: p2 start 1702059890 is beyond EOD, truncated [ 92.051782][ T6433] comedi comedi0: Minor 3 could not be opened [ 92.762709][ T6445] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.823274][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 92.881606][ T6450] GUP no longer grows the stack in syz.0.161 (6450): 200000004000-20000000a000 (200000002000) [ 92.913255][ T6450] CPU: 1 PID: 6450 Comm: syz.0.161 Not tainted syzkaller #0 [ 92.920586][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.930758][ T6450] Call Trace: [ 92.934049][ T6450] [ 92.936994][ T6450] dump_stack_lvl+0x16c/0x230 [ 92.941699][ T6450] ? show_regs_print_info+0x20/0x20 [ 92.946919][ T6450] ? load_image+0x3b0/0x3b0 [ 92.951444][ T6450] ? find_vma+0x12e/0x1b0 [ 92.955810][ T6450] __get_user_pages+0xfb9/0x1470 [ 92.960794][ T6450] ? populate_vma_page_range+0x370/0x370 [ 92.966468][ T6450] get_user_pages_remote+0x3de/0xc10 [ 92.971780][ T6450] ? get_dump_page+0x200/0x200 [ 92.976558][ T6450] __access_remote_vm+0x1ff/0x570 [ 92.981583][ T6450] ? generic_access_phys+0x650/0x650 [ 92.986870][ T6450] ? alloc_pages+0x4dc/0x740 [ 92.991461][ T6450] ? do_raw_spin_unlock+0x121/0x230 [ 92.996655][ T6450] proc_pid_cmdline_read+0x551/0x830 [ 93.001933][ T6450] ? schedule+0xc7/0x170 [ 93.006174][ T6450] ? comm_show+0x150/0x150 [ 93.010666][ T6450] ? common_file_perm+0xb0/0x1f0 [ 93.015597][ T6450] ? fsnotify_perm+0x271/0x5e0 [ 93.020353][ T6450] do_iter_read+0x506/0xc80 [ 93.024865][ T6450] ? comm_show+0x150/0x150 [ 93.029272][ T6450] ? vfs_iter_read+0xa0/0xa0 [ 93.033854][ T6450] ? __import_iovec+0x5f2/0x860 [ 93.038709][ T6450] ? import_iovec+0x73/0xa0 [ 93.043214][ T6450] do_preadv+0x1fa/0x330 [ 93.047455][ T6450] ? do_writev+0x410/0x410 [ 93.051876][ T6450] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 93.057851][ T6450] ? lock_chain_count+0x20/0x20 [ 93.062699][ T6450] ? lockdep_hardirqs_on+0x98/0x150 [ 93.067888][ T6450] do_syscall_64+0x55/0xb0 [ 93.072296][ T6450] ? clear_bhb_loop+0x40/0x90 [ 93.076964][ T6450] ? clear_bhb_loop+0x40/0x90 [ 93.081632][ T6450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.087515][ T6450] RIP: 0033:0x7f8ff018efc9 [ 93.091939][ T6450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.111624][ T6450] RSP: 002b:00007f8ff0f80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 93.120031][ T6450] RAX: ffffffffffffffda RBX: 00007f8ff03e5fa0 RCX: 00007f8ff018efc9 [ 93.127992][ T6450] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 93.135954][ T6450] RBP: 00007f8ff0211f91 R08: 0000000000000000 R09: 0000000000000000 [ 93.143914][ T6450] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 93.151876][ T6450] R13: 00007f8ff03e6038 R14: 00007f8ff03e5fa0 R15: 00007ffd18963e48 [ 93.159851][ T6450] [ 93.162879][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.195357][ T6454] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 93.204464][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 93.216626][ T8] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 93.228383][ T8] usb 2-1: config 0 has no interface number 0 [ 93.235707][ T8] usb 2-1: config 0 interface 184 has no altsetting 0 [ 93.250654][ T8] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 93.261196][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.279576][ T8] usb 2-1: Product: syz [ 93.286337][ T8] usb 2-1: Manufacturer: syz [ 93.291260][ T8] usb 2-1: SerialNumber: syz [ 93.330025][ T8] usb 2-1: config 0 descriptor?? [ 93.359732][ T8] smsc75xx v1.0.0 [ 93.410908][ T6454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.286190][ T6472] comedi comedi0: Minor 3 could not be opened [ 94.990926][ T6476] loop2: detected capacity change from 0 to 2048 [ 95.037692][ T6476] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.210642][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 95.254045][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 95.292973][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 95.332590][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 95.347885][ T6471] comedi comedi0: Minor 3 could not be opened [ 95.361607][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 95.401394][ T8] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 95.411940][ T8] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 95.436482][ T8] usb 2-1: USB disconnect, device number 5 [ 96.707659][ T6509] comedi comedi0: Minor 3 could not be opened [ 97.664544][ T6533] loop1: detected capacity change from 0 to 128 [ 97.735050][ T6533] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.765871][ T6541] [ 97.768233][ T6541] ===================================================== [ 97.775170][ T6541] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 97.778066][ T6533] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.782626][ T6541] syzkaller #0 Not tainted [ 97.782636][ T6541] ----------------------------------------------------- [ 97.782642][ T6541] syz.0.191/6541 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 97.782659][ T6541] ffffffff8ca0a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigurg+0xf0/0x3c0 [ 97.820287][ T6541] [ 97.820287][ T6541] and this task is already holding: [ 97.827640][ T6541] ffff88807e3d6d98 (&f->f_owner.lock){....}-{2:2}, at: send_sigurg+0x29/0x3c0 [ 97.836503][ T6541] which would create a new lock dependency: [ 97.842375][ T6541] (&f->f_owner.lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 97.850118][ T6541] [ 97.850118][ T6541] but this new dependency connects a HARDIRQ-irq-safe lock: [ 97.859557][ T6541] (&dev->event_lock#2){-...}-{2:2} [ 97.859590][ T6541] [ 97.859590][ T6541] ... which became HARDIRQ-irq-safe at: [ 97.872454][ T6541] lock_acquire+0x197/0x410 [ 97.877035][ T6541] _raw_spin_lock_irqsave+0xa8/0xf0 [ 97.882309][ T6541] input_event+0x7a/0xc0 [ 97.886627][ T6541] psmouse_report_standard_packet+0x53/0x200 [ 97.892684][ T6541] psmouse_process_byte+0x478/0x670 [ 97.897960][ T6541] psmouse_handle_byte+0x43/0x490 [ 97.903059][ T6541] ps2_interrupt+0x164/0x980 [ 97.907722][ T6541] serio_interrupt+0x8b/0x130 [ 97.912466][ T6541] i8042_interrupt+0x394/0x730 [ 97.917300][ T6541] __handle_irq_event_percpu+0x276/0x930 [ 97.923008][ T6541] handle_irq_event+0x8b/0x1e0 [ 97.927845][ T6541] handle_edge_irq+0x247/0xb30 [ 97.932677][ T6541] __common_interrupt+0x13b/0x230 [ 97.937774][ T6541] common_interrupt+0xb4/0xd0 [ 97.942525][ T6541] asm_common_interrupt+0x26/0x40 [ 97.947620][ T6541] _raw_spin_unlock_irqrestore+0xa9/0x110 [ 97.953410][ T6541] i8042_aux_write+0x109/0x170 [ 97.958243][ T6541] ps2_do_sendbyte+0x1ff/0x6d0 [ 97.963081][ T6541] ps2_sendbyte+0x5f/0x120 [ 97.967570][ T6541] cypress_send_ext_cmd+0x23d/0x920 [ 97.972852][ T6541] cypress_detect+0x8d/0x190 [ 97.977536][ T6541] psmouse_extensions+0x467/0xbe0 [ 97.982645][ T6541] psmouse_switch_protocol+0xdc/0x610 [ 97.988092][ T6541] psmouse_connect+0x89f/0x1470 [ 97.993019][ T6541] serio_driver_probe+0x7a/0xa0 [ 97.997947][ T6541] really_probe+0x25b/0xb40 [ 98.002536][ T6541] __driver_probe_device+0x18c/0x330 [ 98.007905][ T6541] driver_probe_device+0x4f/0x420 [ 98.013010][ T6541] __driver_attach+0x44e/0x6f0 [ 98.017861][ T6541] bus_for_each_dev+0x22d/0x2a0 [ 98.022793][ T6541] serio_handle_event+0x1a2/0x860 [ 98.027894][ T6541] process_scheduled_works+0xa45/0x15b0 [ 98.033516][ T6541] worker_thread+0xa55/0xfc0 [ 98.038184][ T6541] kthread+0x2fa/0x390 [ 98.042325][ T6541] ret_from_fork+0x48/0x80 [ 98.046812][ T6541] ret_from_fork_asm+0x11/0x20 [ 98.051650][ T6541] [ 98.051650][ T6541] to a HARDIRQ-irq-unsafe lock: [ 98.058651][ T6541] (tasklist_lock){.+.+}-{2:2} [ 98.058673][ T6541] [ 98.058673][ T6541] ... which became HARDIRQ-irq-unsafe at: [ 98.071274][ T6541] ... [ 98.071280][ T6541] lock_acquire+0x197/0x410 [ 98.078421][ T6541] _raw_read_lock+0x36/0x50 [ 98.082999][ T6541] do_wait+0x294/0xaf0 [ 98.087151][ T6541] kernel_wait+0xac/0x170 [ 98.091553][ T6541] call_usermodehelper_exec_work+0xb9/0x220 [ 98.097532][ T6541] process_scheduled_works+0xa45/0x15b0 [ 98.103149][ T6541] worker_thread+0xa55/0xfc0 [ 98.107808][ T6541] kthread+0x2fa/0x390 [ 98.111954][ T6541] ret_from_fork+0x48/0x80 [ 98.116445][ T6541] ret_from_fork_asm+0x11/0x20 [ 98.121282][ T6541] [ 98.121282][ T6541] other info that might help us debug this: [ 98.121282][ T6541] [ 98.131498][ T6541] Chain exists of: [ 98.131498][ T6541] &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock [ 98.131498][ T6541] [ 98.144698][ T6541] Possible interrupt unsafe locking scenario: [ 98.144698][ T6541] [ 98.152998][ T6541] CPU0 CPU1 [ 98.158343][ T6541] ---- ---- [ 98.163688][ T6541] lock(tasklist_lock); [ 98.167913][ T6541] local_irq_disable(); [ 98.174648][ T6541] lock(&dev->event_lock#2); [ 98.181830][ T6541] lock(&f->f_owner.lock); [ 98.188834][ T6541] [ 98.192274][ T6541] lock(&dev->event_lock#2); [ 98.197111][ T6541] [ 98.197111][ T6541] *** DEADLOCK *** [ 98.197111][ T6541] [ 98.205235][ T6541] 2 locks held by syz.0.191/6541: [ 98.210237][ T6541] #0: ffff88807ce94ab0 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 98.219366][ T6541] #1: ffff88807e3d6d98 (&f->f_owner.lock){....}-{2:2}, at: send_sigurg+0x29/0x3c0 [ 98.228661][ T6541] [ 98.228661][ T6541] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 98.239045][ T6541] -> (&dev->event_lock#2){-...}-{2:2} { [ 98.244852][ T6541] IN-HARDIRQ-W at: [ 98.249078][ T6541] lock_acquire+0x197/0x410 [ 98.255736][ T6541] _raw_spin_lock_irqsave+0xa8/0xf0 [ 98.263094][ T6541] input_event+0x7a/0xc0 [ 98.269494][ T6541] psmouse_report_standard_packet+0x53/0x200 [ 98.277634][ T6541] psmouse_process_byte+0x478/0x670 [ 98.284989][ T6541] psmouse_handle_byte+0x43/0x490 [ 98.292170][ T6541] ps2_interrupt+0x164/0x980 [ 98.298914][ T6541] serio_interrupt+0x8b/0x130 [ 98.305751][ T6541] i8042_interrupt+0x394/0x730 [ 98.312669][ T6541] __handle_irq_event_percpu+0x276/0x930 [ 98.320461][ T6541] handle_irq_event+0x8b/0x1e0 [ 98.327380][ T6541] handle_edge_irq+0x247/0xb30 [ 98.334295][ T6541] __common_interrupt+0x13b/0x230 [ 98.341478][ T6541] common_interrupt+0xb4/0xd0 [ 98.348312][ T6541] asm_common_interrupt+0x26/0x40 [ 98.355490][ T6541] _raw_spin_unlock_irqrestore+0xa9/0x110 [ 98.363364][ T6541] i8042_aux_write+0x109/0x170 [ 98.370282][ T6541] ps2_do_sendbyte+0x1ff/0x6d0 [ 98.377202][ T6541] ps2_sendbyte+0x5f/0x120 [ 98.383774][ T6541] cypress_send_ext_cmd+0x23d/0x920 [ 98.391128][ T6541] cypress_detect+0x8d/0x190 [ 98.397870][ T6541] psmouse_extensions+0x467/0xbe0 [ 98.405052][ T6541] psmouse_switch_protocol+0xdc/0x610 [ 98.412581][ T6541] psmouse_connect+0x89f/0x1470 [ 98.419594][ T6541] serio_driver_probe+0x7a/0xa0 [ 98.426605][ T6541] really_probe+0x25b/0xb40 [ 98.433265][ T6541] __driver_probe_device+0x18c/0x330 [ 98.440704][ T6541] driver_probe_device+0x4f/0x420 [ 98.447887][ T6541] __driver_attach+0x44e/0x6f0 [ 98.454803][ T6541] bus_for_each_dev+0x22d/0x2a0 [ 98.461804][ T6541] serio_handle_event+0x1a2/0x860 [ 98.468988][ T6541] process_scheduled_works+0xa45/0x15b0 [ 98.476689][ T6541] worker_thread+0xa55/0xfc0 [ 98.483437][ T6541] kthread+0x2fa/0x390 [ 98.489662][ T6541] ret_from_fork+0x48/0x80 [ 98.496232][ T6541] ret_from_fork_asm+0x11/0x20 [ 98.503154][ T6541] INITIAL USE at: [ 98.507294][ T6541] lock_acquire+0x197/0x410 [ 98.513865][ T6541] _raw_spin_lock_irqsave+0xa8/0xf0 [ 98.521132][ T6541] input_inject_event+0xab/0x320 [ 98.528142][ T6541] led_trigger_event+0x133/0x210 [ 98.535147][ T6541] kbd_led_trigger_activate+0xbd/0x100 [ 98.542671][ T6541] led_trigger_set+0x524/0x940 [ 98.549504][ T6541] led_trigger_set_default+0x1a0/0x1e0 [ 98.557030][ T6541] led_classdev_register_ext+0x6e9/0x940 [ 98.564734][ T6541] input_leds_connect+0x4eb/0x6b0 [ 98.571825][ T6541] input_register_device+0xcdc/0x1070 [ 98.579267][ T6541] atkbd_connect+0x6fb/0x9a0 [ 98.585926][ T6541] serio_driver_probe+0x7a/0xa0 [ 98.592844][ T6541] really_probe+0x25b/0xb40 [ 98.599417][ T6541] __driver_probe_device+0x18c/0x330 [ 98.606772][ T6541] driver_probe_device+0x4f/0x420 [ 98.613865][ T6541] __driver_attach+0x44e/0x6f0 [ 98.620695][ T6541] bus_for_each_dev+0x22d/0x2a0 [ 98.627614][ T6541] serio_handle_event+0x1a2/0x860 [ 98.634709][ T6541] process_scheduled_works+0xa45/0x15b0 [ 98.642321][ T6541] worker_thread+0xa55/0xfc0 [ 98.648977][ T6541] kthread+0x2fa/0x390 [ 98.655129][ T6541] ret_from_fork+0x48/0x80 [ 98.661615][ T6541] ret_from_fork_asm+0x11/0x20 [ 98.668450][ T6541] } [ 98.671192][ T6541] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 98.680466][ T6541] -> (&client->buffer_lock){....}-{2:2} { [ 98.686360][ T6541] INITIAL USE at: [ 98.690408][ T6541] lock_acquire+0x197/0x410 [ 98.696816][ T6541] _raw_spin_lock+0x2e/0x40 [ 98.703214][ T6541] evdev_pass_values+0xcb/0xab0 [ 98.709958][ T6541] evdev_events+0x1d8/0x330 [ 98.716353][ T6541] input_pass_values+0x907/0x1300 [ 98.723275][ T6541] input_event_dispose+0x346/0x6c0 [ 98.730280][ T6541] input_inject_event+0x1f9/0x320 [ 98.737199][ T6541] evdev_write+0x32a/0x470 [ 98.743512][ T6541] vfs_write+0x288/0x940 [ 98.749651][ T6541] ksys_write+0x147/0x250 [ 98.755874][ T6541] do_syscall_64+0x55/0xb0 [ 98.762186][ T6541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.769973][ T6541] } [ 98.772626][ T6541] ... key at: [] evdev_open.__key.28+0x0/0x20 [ 98.780935][ T6541] ... acquired at: [ 98.784892][ T6541] _raw_spin_lock+0x2e/0x40 [ 98.789548][ T6541] evdev_pass_values+0xcb/0xab0 [ 98.794557][ T6541] evdev_events+0x1d8/0x330 [ 98.799215][ T6541] input_pass_values+0x907/0x1300 [ 98.804397][ T6541] input_event_dispose+0x346/0x6c0 [ 98.809664][ T6541] input_inject_event+0x1f9/0x320 [ 98.814856][ T6541] evdev_write+0x32a/0x470 [ 98.819429][ T6541] vfs_write+0x288/0x940 [ 98.823832][ T6541] ksys_write+0x147/0x250 [ 98.828316][ T6541] do_syscall_64+0x55/0xb0 [ 98.832891][ T6541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.838939][ T6541] [ 98.841248][ T6541] -> (&new->fa_lock){....}-{2:2} { [ 98.846443][ T6541] INITIAL USE at: [ 98.850405][ T6541] lock_acquire+0x197/0x410 [ 98.856630][ T6541] _raw_write_lock_irq+0xa3/0xe0 [ 98.863287][ T6541] fasync_remove_entry+0xf4/0x1c0 [ 98.870034][ T6541] __fput+0x7f3/0x970 [ 98.875738][ T6541] task_work_run+0x1ce/0x250 [ 98.882048][ T6541] exit_to_user_mode_loop+0xe6/0x110 [ 98.889054][ T6541] exit_to_user_mode_prepare+0xf6/0x180 [ 98.896320][ T6541] syscall_exit_to_user_mode+0x1a/0x50 [ 98.903500][ T6541] do_syscall_64+0x61/0xb0 [ 98.909637][ T6541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.917254][ T6541] INITIAL READ USE at: [ 98.921654][ T6541] lock_acquire+0x197/0x410 [ 98.928334][ T6541] _raw_read_lock_irqsave+0xb0/0x100 [ 98.935793][ T6541] kill_fasync+0x192/0x4b0 [ 98.942387][ T6541] evdev_pass_values+0x54b/0xab0 [ 98.949506][ T6541] evdev_events+0x1d8/0x330 [ 98.956167][ T6541] input_pass_values+0x907/0x1300 [ 98.963354][ T6541] input_event_dispose+0x346/0x6c0 [ 98.970628][ T6541] input_inject_event+0x1f9/0x320 [ 98.977813][ T6541] evdev_write+0x32a/0x470 [ 98.984386][ T6541] vfs_write+0x288/0x940 [ 98.990786][ T6541] ksys_write+0x147/0x250 [ 98.997270][ T6541] do_syscall_64+0x55/0xb0 [ 99.003844][ T6541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.011890][ T6541] } [ 99.014461][ T6541] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 99.023213][ T6541] ... acquired at: [ 99.027082][ T6541] _raw_read_lock_irqsave+0xb0/0x100 [ 99.032525][ T6541] kill_fasync+0x192/0x4b0 [ 99.037099][ T6541] evdev_pass_values+0x54b/0xab0 [ 99.042194][ T6541] evdev_events+0x1d8/0x330 [ 99.046854][ T6541] input_pass_values+0x907/0x1300 [ 99.052042][ T6541] input_event_dispose+0x346/0x6c0 [ 99.057311][ T6541] input_inject_event+0x1f9/0x320 [ 99.062492][ T6541] evdev_write+0x32a/0x470 [ 99.067069][ T6541] vfs_write+0x288/0x940 [ 99.071472][ T6541] ksys_write+0x147/0x250 [ 99.075959][ T6541] do_syscall_64+0x55/0xb0 [ 99.080534][ T6541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.086585][ T6541] [ 99.088893][ T6541] -> (&f->f_owner.lock){....}-{2:2} { [ 99.094263][ T6541] INITIAL USE at: [ 99.098139][ T6541] lock_acquire+0x197/0x410 [ 99.104191][ T6541] _raw_write_lock_irq+0xa3/0xe0 [ 99.110674][ T6541] __f_setown+0x3b/0x330 [ 99.116461][ T6541] f_setown+0x14b/0x200 [ 99.122160][ T6541] sock_ioctl+0x68e/0x7a0 [ 99.128036][ T6541] __se_sys_ioctl+0xfd/0x170 [ 99.134171][ T6541] do_syscall_64+0x55/0xb0 [ 99.140134][ T6541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.147573][ T6541] INITIAL READ USE at: [ 99.151884][ T6541] lock_acquire+0x197/0x410 [ 99.158367][ T6541] _raw_read_lock_irqsave+0xb0/0x100 [ 99.165641][ T6541] send_sigio+0x33/0x360 [ 99.171869][ T6541] kill_fasync+0x228/0x4b0 [ 99.178267][ T6541] evdev_pass_values+0x54b/0xab0 [ 99.185188][ T6541] evdev_events+0x1d8/0x330 [ 99.191672][ T6541] input_pass_values+0x907/0x1300 [ 99.198681][ T6541] input_event_dispose+0x346/0x6c0 [ 99.205776][ T6541] input_inject_event+0x1f9/0x320 [ 99.212781][ T6541] evdev_write+0x32a/0x470 [ 99.219180][ T6541] vfs_write+0x288/0x940 [ 99.225411][ T6541] ksys_write+0x147/0x250 [ 99.231726][ T6541] do_syscall_64+0x55/0xb0 [ 99.238124][ T6541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.245998][ T6541] } [ 99.248481][ T6541] ... key at: [] init_file.__key+0x0/0x20 [ 99.256274][ T6541] ... acquired at: [ 99.260061][ T6541] _raw_read_lock_irqsave+0xb0/0x100 [ 99.265504][ T6541] send_sigio+0x33/0x360 [ 99.269905][ T6541] kill_fasync+0x228/0x4b0 [ 99.274477][ T6541] evdev_pass_values+0x54b/0xab0 [ 99.279579][ T6541] evdev_events+0x1d8/0x330 [ 99.284239][ T6541] input_pass_values+0x907/0x1300 [ 99.289423][ T6541] input_event_dispose+0x346/0x6c0 [ 99.294693][ T6541] input_inject_event+0x1f9/0x320 [ 99.299875][ T6541] evdev_write+0x32a/0x470 [ 99.304448][ T6541] vfs_write+0x288/0x940 [ 99.308849][ T6541] ksys_write+0x147/0x250 [ 99.313338][ T6541] do_syscall_64+0x55/0xb0 [ 99.317914][ T6541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.323964][ T6541] [ 99.326271][ T6541] [ 99.326271][ T6541] the dependencies between the lock to be acquired [ 99.326277][ T6541] and HARDIRQ-irq-unsafe lock: [ 99.339764][ T6541] -> (tasklist_lock){.+.+}-{2:2} { [ 99.344877][ T6541] HARDIRQ-ON-R at: [ 99.348841][ T6541] lock_acquire+0x197/0x410 [ 99.354981][ T6541] _raw_read_lock+0x36/0x50 [ 99.361131][ T6541] do_wait+0x294/0xaf0 [ 99.366836][ T6541] kernel_wait+0xac/0x170 [ 99.372804][ T6541] call_usermodehelper_exec_work+0xb9/0x220 [ 99.380337][ T6541] process_scheduled_works+0xa45/0x15b0 [ 99.387521][ T6541] worker_thread+0xa55/0xfc0 [ 99.393744][ T6541] kthread+0x2fa/0x390 [ 99.399442][ T6541] ret_from_fork+0x48/0x80 [ 99.405493][ T6541] ret_from_fork_asm+0x11/0x20 [ 99.411903][ T6541] SOFTIRQ-ON-R at: [ 99.415867][ T6541] lock_acquire+0x197/0x410 [ 99.422008][ T6541] _raw_read_lock+0x36/0x50 [ 99.428142][ T6541] do_wait+0x294/0xaf0 [ 99.433848][ T6541] kernel_wait+0xac/0x170 [ 99.439814][ T6541] call_usermodehelper_exec_work+0xb9/0x220 [ 99.447341][ T6541] process_scheduled_works+0xa45/0x15b0 [ 99.454531][ T6541] worker_thread+0xa55/0xfc0 [ 99.460753][ T6541] kthread+0x2fa/0x390 [ 99.466453][ T6541] ret_from_fork+0x48/0x80 [ 99.472502][ T6541] ret_from_fork_asm+0x11/0x20 [ 99.478902][ T6541] INITIAL USE at: [ 99.482782][ T6541] lock_acquire+0x197/0x410 [ 99.488835][ T6541] _raw_write_lock_irq+0xa3/0xe0 [ 99.495324][ T6541] copy_process+0x225d/0x3d70 [ 99.501546][ T6541] kernel_clone+0x21b/0x840 [ 99.507593][ T6541] user_mode_thread+0xde/0x130 [ 99.513908][ T6541] rest_init+0x27/0x300 [ 99.519617][ T6541] arch_call_rest_init+0xe/0x10 [ 99.526023][ T6541] start_kernel+0x459/0x4e0 [ 99.532071][ T6541] x86_64_start_reservations+0x2a/0x30 [ 99.539074][ T6541] copy_bootdata+0x0/0xe0 [ 99.544962][ T6541] secondary_startup_64_no_verify+0x179/0x17b [ 99.552594][ T6541] INITIAL READ USE at: [ 99.556919][ T6541] lock_acquire+0x197/0x410 [ 99.563409][ T6541] _raw_read_lock+0x36/0x50 [ 99.569911][ T6541] do_wait+0x294/0xaf0 [ 99.575979][ T6541] kernel_wait+0xac/0x170 [ 99.582306][ T6541] call_usermodehelper_exec_work+0xb9/0x220 [ 99.590196][ T6541] process_scheduled_works+0xa45/0x15b0 [ 99.597742][ T6541] worker_thread+0xa55/0xfc0 [ 99.604339][ T6541] kthread+0x2fa/0x390 [ 99.610411][ T6541] ret_from_fork+0x48/0x80 [ 99.616823][ T6541] ret_from_fork_asm+0x11/0x20 [ 99.623578][ T6541] } [ 99.626069][ T6541] ... key at: [] tasklist_lock+0x18/0x40 [ 99.633777][ T6541] ... acquired at: [ 99.637568][ T6541] _raw_read_lock+0x36/0x50 [ 99.642234][ T6541] send_sigurg+0xf0/0x3c0 [ 99.646723][ T6541] sk_send_sigurg+0x6f/0xc0 [ 99.651389][ T6541] tcp_check_urg+0x200/0x750 [ 99.656143][ T6541] tcp_urg+0x161/0x3f0 [ 99.660377][ T6541] tcp_rcv_established+0xa2e/0x1cf0 [ 99.665737][ T6541] tcp_v4_do_rcv+0x4ed/0xb80 [ 99.670488][ T6541] __release_sock+0x1bd/0x430 [ 99.675411][ T6541] release_sock+0x5f/0x1c0 [ 99.679984][ T6541] tcp_sendmsg+0x39/0x50 [ 99.684383][ T6541] __sys_sendto+0x46a/0x620 [ 99.689045][ T6541] __x64_sys_sendto+0xde/0xf0 [ 99.693880][ T6541] do_syscall_64+0x55/0xb0 [ 99.698458][ T6541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.704510][ T6541] [ 99.706815][ T6541] [ 99.706815][ T6541] stack backtrace: [ 99.712684][ T6541] CPU: 0 PID: 6541 Comm: syz.0.191 Not tainted syzkaller #0 [ 99.719948][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.729988][ T6541] Call Trace: [ 99.733258][ T6541] [ 99.736177][ T6541] dump_stack_lvl+0x16c/0x230 [ 99.740842][ T6541] ? load_image+0x3b0/0x3b0 [ 99.745328][ T6541] ? show_regs_print_info+0x20/0x20 [ 99.750518][ T6541] ? load_image+0x3b0/0x3b0 [ 99.755010][ T6541] ? print_shortest_lock_dependencies+0xf4/0x160 [ 99.761340][ T6541] __lock_acquire+0x678f/0x7c80 [ 99.766252][ T6541] ? verify_lock_unused+0x140/0x140 [ 99.771447][ T6541] ? cubictcp_acked+0xc6/0xe90 [ 99.776204][ T6541] lock_acquire+0x197/0x410 [ 99.780698][ T6541] ? send_sigurg+0xf0/0x3c0 [ 99.785195][ T6541] ? read_lock_is_recursive+0x20/0x20 [ 99.790560][ T6541] ? do_raw_read_lock+0x3d/0x90 [ 99.795406][ T6541] ? _raw_read_lock_irqsave+0xbc/0x100 [ 99.800853][ T6541] ? _raw_read_lock+0x50/0x50 [ 99.805519][ T6541] _raw_read_lock+0x36/0x50 [ 99.810009][ T6541] ? send_sigurg+0xf0/0x3c0 [ 99.814507][ T6541] send_sigurg+0xf0/0x3c0 [ 99.818825][ T6541] sk_send_sigurg+0x6f/0xc0 [ 99.823317][ T6541] tcp_check_urg+0x200/0x750 [ 99.827898][ T6541] tcp_urg+0x161/0x3f0 [ 99.831956][ T6541] ? tcp_validate_incoming+0x2250/0x2250 [ 99.837581][ T6541] ? read_tsc+0x9/0x20 [ 99.841635][ T6541] ? inet_sk_rx_dst_set+0x15f/0x1d0 [ 99.846846][ T6541] tcp_rcv_established+0xa2e/0x1cf0 [ 99.852036][ T6541] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 99.858002][ T6541] ? lock_chain_count+0x20/0x20 [ 99.862842][ T6541] ? tcp_check_space+0xae0/0xae0 [ 99.867772][ T6541] tcp_v4_do_rcv+0x4ed/0xb80 [ 99.872350][ T6541] __release_sock+0x1bd/0x430 [ 99.877016][ T6541] release_sock+0x5f/0x1c0 [ 99.881416][ T6541] tcp_sendmsg+0x39/0x50 [ 99.885645][ T6541] __sys_sendto+0x46a/0x620 [ 99.890140][ T6541] ? __ia32_sys_getpeername+0x90/0x90 [ 99.895510][ T6541] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 99.901476][ T6541] ? lock_chain_count+0x20/0x20 [ 99.906317][ T6541] __x64_sys_sendto+0xde/0xf0 [ 99.910983][ T6541] do_syscall_64+0x55/0xb0 [ 99.915384][ T6541] ? clear_bhb_loop+0x40/0x90 [ 99.920049][ T6541] ? clear_bhb_loop+0x40/0x90 [ 99.924711][ T6541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.930586][ T6541] RIP: 0033:0x7f8ff018efc9 [ 99.934988][ T6541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.954591][ T6541] RSP: 002b:00007f8ff0f80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 99.963000][ T6541] RAX: ffffffffffffffda RBX: 00007f8ff03e5fa0 RCX: 00007f8ff018efc9 [ 99.970963][ T6541] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 99.978944][ T6541] RBP: 00007f8ff0211f91 R08: 0000000000000000 R09: 0000000000000000 [ 99.986917][ T6541] R10: 0000000000000885 R11: 0000000000000246 R12: 0000000000000000 [ 99.994882][ T6541] R13: 00007f8ff03e6038 R14: 00007f8ff03e5fa0 R15: 00007ffd18963e48 [ 100.002851][ T6541] [ 100.110507][ T5780] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.