last executing test programs: 2m42.773296603s ago: executing program 1 (id=303): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) readv(r2, &(0x7f0000001880)=[{&(0x7f00000003c0)=""/228, 0xe4}], 0x1) 2m42.160306572s ago: executing program 1 (id=309): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$kcm(0x2, 0xa, 0x2) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80003, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0xffd}], 0x3) 2m39.898860715s ago: executing program 1 (id=312): gettid() mknod(0x0, 0x1ffa, 0x0) acct(0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m35.611233522s ago: executing program 1 (id=323): socket$kcm(0xa, 0x3, 0x87) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[], 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_getevents(0x0, 0x9, 0x0, 0x0, &(0x7f0000001300)) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r1, &(0x7f0000000100)=""/67, 0x43) syz_usb_disconnect(r0) epoll_create1(0x80000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) 2m31.914931441s ago: executing program 1 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) creat(0x0, 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./file0\x00', &(0x7f0000000a80)=[0x7fff], 0x0, 0x4, 0x1, 0x1}}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 2m30.640645255s ago: executing program 1 (id=342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 2m14.964401753s ago: executing program 32 (id=342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 14.016013677s ago: executing program 5 (id=727): r0 = syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') read$FUSE(r0, &(0x7f0000002500)={0x2020}, 0x2020) 13.789965305s ago: executing program 5 (id=731): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$key(0x2d, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r3], 0x2c2) socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) 11.862813951s ago: executing program 0 (id=746): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 11.565707775s ago: executing program 4 (id=740): connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r2, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) 10.110715473s ago: executing program 4 (id=743): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x14011) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.838760434s ago: executing program 0 (id=744): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b301d506", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x10162, 0x0) 9.744542602s ago: executing program 0 (id=745): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x10000}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x8, 0xfffffffc}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000100), 0x400080, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="400f0700000007012fdb587078804b95c01b0101010000f4971d56c2878701010000"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) 8.871074633s ago: executing program 2 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 8.675976788s ago: executing program 4 (id=749): mkdir(&(0x7f0000000040)='./file0\x00', 0x50) setgroups(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r5, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x2}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setgroups(0x0, 0x0) syz_open_procfs(0x0, 0x0) getgroups(0x4, &(0x7f00000000c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) setregid(0x0, r6) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5e) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000300)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x78, 0xe5, 0x9, 0x4, 0x0, 0x6, "3d50726539fa3d933f0d1f31a22ec1aa98e16e4a535eee0faf736a9313b345c44f8e13020f6e3016c2661a133d752e0c4435420a351863bbae20aa73668c56fe5f17278f646e857066c0106b6515b5b4e2b4855347b92d85faa5b5e1a83f8580577589571031bff2a58363b69032c554a8e4f5b929dc809f"}}, 0x190) 7.741337434s ago: executing program 4 (id=750): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r0 = open(&(0x7f00000000c0)='.\x00', 0x518282, 0x78e22799f4a46e8e) io_uring_enter(r0, 0x440d, 0xc7a9, 0x10, &(0x7f00000002c0)={[0x4]}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[], 0x1, 0x122d, &(0x7f0000003540)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.600566356s ago: executing program 5 (id=752): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="0c00990eff070000700000001400040073797a6b616c6c657230000000001c000800050004"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 7.599813376s ago: executing program 2 (id=753): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000010, 0x0, 0x400000a5d6}]}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x1a0, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x178, 0x3, 0x0, 0x1, [{0x174, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x158, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9e5}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x48}]}}}, {0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x10001}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x30, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0xfa}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x1fc}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0x218}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x12, 0x13, 0x4, "0b464e7766d1d65041a3738992fa181a85c87ee444618c5de437d08a1ac6448b65c2892bf2f9f022f7795247a24b7236955020d6923fb0f9b3b736a6b591d249", "5c0437310f41f6063774a5b0a06f82c1511c6cf34636a269d23649e86cb0ef03b7d26a8fca1d7b2cc4e4e33446db93cf43b337d5a3e6662de1344320cb0498d7", "1421d2bdf354eebe5845b16615b23339238c9cc293a9b03cccad8cc5abe22a35", [0x8, 0x7fff]}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000780)={[&(0x7f00000006c0)='target\x00', &(0x7f0000000700)='--\'-,\xa3]\\@[![\x00', 0x0]}, &(0x7f0000000840)={[&(0x7f00000007c0)=',\x00', &(0x7f0000000800)='\x00']}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$vimc1(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timerfd_settime(0xffffffffffffffff, 0x7, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x5c}}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) 7.452465757s ago: executing program 5 (id=754): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)="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", 0xb61}], 0x2) bind$netlink(r2, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x7133}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f00000024c0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x400, 0x20006], [0x0, 0x0, 0x2, 0x0, 0x10000003, 0x0, 0x8, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x655, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x2, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) readv(r6, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$UI_DEV_DESTROY(r6, 0x5502) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 7.452300948s ago: executing program 3 (id=755): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 6.959459507s ago: executing program 2 (id=756): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route(r0, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x40d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 6.010118504s ago: executing program 2 (id=757): socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x2, 0xda48, 0x470d, 0xcc40, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0020000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/fscaps', 0x20040, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xb, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r1}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ldst={0x2, 0x2, 0x1, 0x0, 0xa, 0x30, 0x4}], &(0x7f00000001c0)='syzkaller\x00', 0xfffffff9, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x1a, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0x6, 0x0, 0xffff}, 0x10, 0x2e8c4, r1, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r0, r5], 0x0, 0x10, 0x1}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x168) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000002500)={0x2020}, 0x2020) 5.916631082s ago: executing program 0 (id=758): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x14011) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.973812248s ago: executing program 2 (id=759): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) 4.966881158s ago: executing program 0 (id=760): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904"], 0x0) 4.928875492s ago: executing program 3 (id=761): mkdir(&(0x7f0000000040)='./file0\x00', 0x50) setgroups(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) 4.884618435s ago: executing program 2 (id=762): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$key(0x2d, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r3], 0x2c2) socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) 3.901714005s ago: executing program 3 (id=763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') 3.241543478s ago: executing program 3 (id=764): unshare(0x22020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000180)={0x400000, r2}) 3.045374104s ago: executing program 3 (id=765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5], 0x1, 0x80800}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 2.833880661s ago: executing program 5 (id=766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000a80)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000bc0)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000000000)={&(0x7f0000000c00)=[0x0, 0x2, 0x8f1, 0x7, 0x7, 0x5, 0x80000001, 0x0, 0xb, 0x80000001, 0x2, 0x1, 0xf2, 0xa13, 0x2, 0x200, 0x7f, 0x49e, 0x1ff, 0xffffffff, 0xf, 0x5, 0x7, 0x8, 0x3f, 0x18c, 0x4, 0x9, 0xf946, 0xfffffff7, 0x2, 0x7fff, 0x7, 0x52, 0x1, 0x6, 0x9, 0x95, 0x57bd173f, 0x8497, 0xffffaf84, 0x2866, 0xb, 0x2, 0x1000, 0xfa7, 0x6, 0x2, 0x2, 0x688, 0x0, 0x3, 0x401, 0x62, 0x119e, 0x2, 0x3b, 0x91, 0x101, 0x3, 0x3, 0x8000, 0x7, 0x6, 0x0, 0x7, 0x5, 0x5, 0x1, 0x5fc5, 0x3, 0x8, 0xffffffff, 0x7264, 0x1, 0x4, 0xfe3, 0x2, 0x1, 0xfffffffd, 0x100, 0x10000, 0x9, 0x1ff, 0x3, 0x7, 0x25, 0x3b, 0x7, 0x8, 0x1f, 0x8, 0x80000001, 0x34, 0x7f, 0xfffffffc, 0x7, 0x7fff, 0x4, 0x0, 0xf1, 0x3, 0x8, 0x40, 0xd33f, 0xc2, 0xd42, 0x7fff, 0x2, 0x0, 0x8, 0xd584, 0x4, 0x1, 0xffffffff, 0x7f, 0x80, 0x4, 0x4, 0x6, 0x4, 0x10001, 0x54, 0x800000, 0x1, 0xffffffdf, 0x5, 0x6, 0x7ff, 0x4fa0, 0x4, 0xfffffffa, 0x101, 0x5, 0x7fffffff, 0xfffffff5, 0x9, 0x9759, 0x1, 0x7, 0x5, 0xc000000, 0x8, 0x10001, 0x9, 0x8000, 0x6, 0xa0, 0x3, 0x936f, 0x9aa, 0x6, 0x107, 0x3, 0x9, 0xfa28, 0xffffffff, 0xe, 0x1, 0x10001, 0x8, 0x2700, 0x4, 0x6, 0x3, 0x2, 0x6, 0xd2, 0x2, 0x2, 0x6, 0x5, 0x400, 0xc6, 0x4, 0x4, 0x3, 0x8, 0x1, 0xffffffff, 0x7, 0x5527, 0x9, 0x0, 0x10a, 0x7ff, 0x7, 0x5, 0x5, 0x3, 0x1, 0x9, 0x0, 0x6, 0x6, 0x1, 0x10001, 0x3, 0x6b6, 0x86f, 0x0, 0x7, 0xffffffc0, 0x80000000, 0xf089, 0x0, 0x4, 0x4, 0x9, 0x401, 0x1, 0x1, 0xa000, 0x8, 0x6, 0x7, 0x40000000, 0x8001, 0x0, 0x9, 0x8, 0x1, 0x9, 0xcc0, 0x8f, 0x10, 0x4, 0x4, 0x6, 0x2, 0x380, 0xe460, 0x5, 0x7, 0xa2d, 0x7, 0x80000001, 0x6, 0x10, 0x477a, 0x0, 0xa4e6, 0x0, 0x6, 0x3, 0x1, 0x6, 0x5, 0xfffffff9, 0x963, 0x83, 0x6b5, 0x8, 0x0, 0x6, 0x6, 0x1ff, 0x6, 0x10, 0xc, 0x40, 0x8, 0xfffffffc, 0x0, 0x885, 0x2, 0x7, 0x8, 0x1ff, 0x0, 0x4, 0x0, 0x4, 0x8f2, 0xb, 0xffffff58, 0x4, 0xe, 0x9, 0x81, 0x8, 0x9, 0x80000001, 0x85e, 0x4, 0x0, 0x81, 0x35, 0xd79c, 0x0, 0x3, 0x6, 0x1, 0x7, 0x8, 0xf, 0x4, 0x1, 0x400000d, 0x3, 0x3, 0x3ff, 0x3, 0xbba5, 0x2, 0xfb1, 0x192, 0xe043, 0xfffffff8, 0x10000, 0xb7a5, 0x59f6, 0x0, 0x8, 0x7, 0x3, 0x3, 0x8, 0x200, 0x9, 0x0, 0x0, 0x7, 0x21d6, 0x2, 0x0, 0xf, 0x10000, 0x81, 0x7, 0x8, 0x444a, 0x80000000, 0x2, 0x1, 0x0, 0xe, 0x2, 0x5, 0xffffffff, 0x6, 0x7, 0x2, 0x2, 0x519, 0x3ff, 0x3, 0x80e, 0x1caf, 0xfff, 0x81, 0x9, 0x0, 0xae, 0x7, 0x1, 0x328, 0x400, 0x3, 0xf, 0x51, 0x101, 0x3, 0x5, 0x33, 0x400, 0x1d, 0x4, 0x7, 0x0, 0x8, 0xf7, 0x8000, 0x5, 0x9, 0x6, 0x0, 0x2, 0x84, 0xa, 0xfffffffa, 0x5, 0x7ff, 0x4636, 0x1, 0xffff, 0x1, 0xa, 0x7, 0x1, 0x6, 0x81, 0x3, 0x1, 0x7, 0x7, 0x3, 0x6, 0x5, 0xfffffff1, 0x9900000, 0x7, 0xfffff000, 0x80, 0x80, 0x2, 0x3, 0x4, 0xfffffeff, 0x40, 0x8, 0x2, 0x40, 0x1, 0x0, 0xc, 0x0, 0x8, 0x1000, 0x9, 0x6f, 0x9c, 0x0, 0xbf3, 0x45a5, 0x5, 0x1000, 0x3, 0x4, 0x80000000, 0x4, 0x0, 0x2, 0x3, 0x7, 0xe, 0x6, 0xe9e, 0x8001, 0x4, 0x9, 0x9, 0x4000000, 0x4, 0x1, 0x3, 0x3377, 0xffffffff, 0x7, 0x80000000, 0xbb, 0x9, 0x1, 0x1e8d9990, 0x7, 0x1, 0x0, 0x2, 0xfffffe01, 0x7, 0x7, 0x1, 0x10001, 0xa, 0xc8c3, 0x8, 0x740f, 0xa87, 0x0, 0x3, 0x0, 0x4, 0x9, 0x1, 0x802, 0xfffffff9, 0x6, 0x0, 0x3, 0x200, 0x438c3538, 0x7ffffeff, 0x2, 0x2fa, 0x2, 0x7, 0xd, 0x1, 0x4, 0x27, 0xffffffff, 0x4, 0x6, 0x3, 0x6, 0xfffffffe, 0x22, 0x22, 0x101, 0x10001, 0x8000, 0x6, 0xc, 0x0, 0x3, 0x5, 0xfffffff9, 0x8, 0xffffffff, 0x4, 0x9, 0x9, 0x7fff, 0x6, 0x8, 0x966, 0x3, 0x7, 0x8, 0x6, 0x8, 0x850b, 0xfffffff7, 0x1, 0x4, 0x81, 0xb, 0xd8, 0x2, 0xdcf9, 0x9, 0x101, 0x1, 0x20000000, 0x604, 0x7c27, 0x80000001, 0xd, 0x8, 0x5, 0x967, 0x4, 0x1, 0x3ecb, 0xb, 0x6, 0x2, 0x8, 0x9, 0x7f, 0x9, 0x5, 0x4800000, 0x2, 0x8, 0x80, 0xd2b, 0x80000009, 0x0, 0xd, 0x3, 0x6, 0x80000000, 0x4, 0x0, 0x3ff, 0x656, 0x80, 0x68, 0x4, 0x3, 0xa, 0x7fb, 0x2, 0x5, 0x6, 0x2, 0x63, 0xfffffe01, 0x6, 0x694, 0xfffffffb, 0xb13, 0x9, 0x4, 0x9, 0x2a, 0x8, 0xb, 0xe, 0x1, 0x7, 0x4, 0x200, 0x4, 0x8a, 0x67, 0x3ff, 0x5, 0x559, 0x8, 0x3f50, 0x6, 0x5, 0x1, 0x5, 0x0, 0x1, 0x3, 0xfffffffa, 0xa, 0x40009, 0x3, 0x9, 0x930c, 0x1000, 0x5a, 0x8, 0x8, 0x1, 0x1, 0x2, 0x5, 0x7, 0x1, 0xfffffffc, 0xe, 0x3, 0xd, 0x400, 0x3, 0x0, 0xfc, 0x3, 0x80, 0x2, 0x3, 0x7, 0x9, 0x0, 0x8, 0x4, 0xfffffffb, 0x10001, 0x8, 0x7, 0x7, 0xd, 0x5, 0xfc, 0x6, 0x12c, 0x6, 0x7, 0x2, 0x28, 0x0, 0x5, 0x2, 0x7, 0x8, 0x0, 0x2, 0x100, 0x80000001, 0x10, 0x2, 0x4, 0x100, 0x3ff, 0x200, 0x9, 0x1001, 0x4, 0x72e, 0x7fff, 0x0, 0x236d, 0x2, 0x4, 0x9c, 0x7, 0x3, 0x227, 0x6, 0x3, 0xe, 0x0, 0x7, 0x4, 0x0, 0x5, 0x5, 0x8, 0xfff, 0x80, 0x401, 0xc0000, 0xb0, 0x200080, 0x10000, 0x5, 0x3, 0x547, 0x8, 0x81, 0x1, 0x4, 0x0, 0x9, 0x80002, 0x9, 0x7, 0x7, 0x7, 0x1, 0x7, 0x5, 0xffffffc0, 0x8, 0xb9, 0x6, 0x8, 0x4f57, 0x4, 0xe, 0x9, 0x800, 0x6, 0x4, 0x2, 0x5, 0xb, 0x8, 0x80000001, 0x5, 0x10000, 0x5, 0xfffffffe, 0x3, 0x1, 0x7, 0x8001, 0xda, 0x2, 0xfffffff7, 0x0, 0xb908, 0xb, 0x2, 0x1, 0x7, 0xfffffffa, 0x1, 0x6, 0xfffffff7, 0x4, 0x7, 0x2, 0x6, 0x9, 0x734, 0x7, 0x10002, 0x2195, 0x6, 0xfffffff0, 0x1d624e79, 0x0, 0x8, 0xdb, 0x4, 0x0, 0x0, 0x2, 0x1, 0xe1, 0x9, 0x9, 0xfffffffb, 0x2, 0x4, 0xba2, 0x8, 0x3, 0xfffffff8, 0x8000, 0xe7f5, 0x5, 0x4, 0xff, 0x1001, 0x4, 0x7, 0x48e6, 0x4, 0x1, 0x8000, 0x1000, 0x7, 0x2, 0xff, 0xc040000, 0x0, 0x8, 0x3, 0xa, 0x0, 0x40, 0x54e5abd6, 0x101, 0x404, 0x2, 0x0, 0x0, 0x9, 0x1, 0x6, 0x1, 0xffff06a3, 0x6, 0x0, 0x31c1, 0x7, 0x1004, 0x1, 0x1, 0x2, 0x4, 0xf8000000, 0x14000000, 0x62b, 0x8, 0x40, 0x8, 0xfffffffc, 0x3c9f, 0xffff2ddf, 0x8, 0x0, 0xc4, 0x7, 0x80000000, 0x4, 0x3, 0x2, 0xa9e, 0x8000, 0x7, 0x1ff, 0xc, 0x0, 0x0, 0x1, 0x2, 0x0, 0xde32, 0x1, 0x9, 0xf11e, 0x0, 0x6, 0x9aa4, 0x2, 0x7, 0x7, 0x819d, 0x64f, 0xa, 0x5, 0x3, 0x8, 0xfffffffe, 0x1000, 0x200, 0xff, 0x8, 0x0, 0xffffffff, 0x9, 0x0, 0x9, 0x1, 0x3, 0x3, 0x6, 0x0, 0x7fffffff, 0x3, 0x4, 0x3, 0x3bb6, 0xff, 0x1, 0x10, 0x5, 0x3, 0xff, 0x7, 0x1c0, 0xb585, 0x0, 0x8, 0x9, 0x4, 0x3, 0x101, 0x6, 0x6, 0x1, 0x50e, 0x60f2, 0x7, 0x81, 0x1, 0xb4, 0x7, 0x1, 0x4, 0x6, 0x8, 0x7ff, 0x76ac, 0x10000, 0x84c6, 0x8, 0x3, 0xe, 0x4, 0x5, 0x5, 0x7f, 0x8, 0xc5, 0x2, 0x5, 0x200, 0x1, 0x7fffffff, 0x6, 0x591, 0xcd, 0xfff, 0x0, 0x8, 0x9, 0x98, 0xd, 0x7ff, 0x16adb03, 0x59, 0x9, 0xe, 0x0, 0x9, 0x7, 0x1, 0x101, 0x3, 0x2, 0xb, 0x1, 0x4, 0x7, 0x0, 0x6, 0x9, 0x7, 0x5, 0x8, 0x7ff, 0x84bb, 0x7, 0x3, 0x401, 0x100, 0xf75, 0x8, 0xfff, 0x3ff, 0xbd89, 0x2, 0x7, 0xffffff6a, 0x9, 0x4, 0x1ff, 0x5, 0xadea, 0xc2, 0x9, 0x7, 0x3, 0x1, 0x0, 0xb, 0x625ba91b, 0x8, 0x2, 0x8, 0x3, 0x400, 0xffffffff, 0xe, 0x1, 0xbcbe, 0x6045, 0x6, 0x5, 0x425, 0x1000, 0x5, 0x8b22, 0x3, 0x2, 0x0, 0x3, 0x8, 0x1, 0x5, 0xf, 0x1, 0xa, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000000040)={@hyper=0x8f1}) 2.831653901s ago: executing program 4 (id=767): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb0}, 0x1, 0x7}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xb0, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0xd, 0x6, "9638ff", 0x7a, 0x6, 0x1, @private2, @empty, {[@srh={0x16, 0x4, 0x4, 0x2, 0x1, 0x40, 0xffff, [@private2={0xfc, 0x2, '\x00', 0x1}, @empty]}], {{0x4e24, 0x4e23, r8, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x6, {[@mss={0x2, 0x4, 0xb}]}}, {"613cb06ba353358e5d1d42c84ff14774ae1dd2ef1ee80f654ee2b77f3796c63d7e6a2d6c71c82a9698aca25cdc37f8cfddb99bfabf957ec35df8"}}}}}}}, 0x0) r9 = signalfd4(r7, &(0x7f00000000c0)={[0xff]}, 0x8, 0x80800) io_uring_enter(r9, 0x43d0, 0x4add, 0x1, &(0x7f0000000140)={[0x8]}, 0x8) 997.64676ms ago: executing program 3 (id=768): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x10000}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x8, 0xfffffffc}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000100), 0x400080, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="400f0700000007012fdb587078804b95c01b0101010000f4971d56c2878701010000"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) 997.37188ms ago: executing program 0 (id=769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) creat(0x0, 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./file0\x00', &(0x7f0000000a80)=[0x7fff], 0x0, 0x4, 0x1, 0x1}}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 994.81908ms ago: executing program 5 (id=770): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x14011) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=771): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) kernel console output (not intermixed with test programs): 280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.616198][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.625184][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.634525][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.642331][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.656234][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.668203][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.682626][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.691608][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.709250][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.721797][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.731999][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.741493][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.782250][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.792992][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.809537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.818439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.830389][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.837492][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.846718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.855361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.863700][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.870779][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.879892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.888787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.897892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.906684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.916256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.925929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.934389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.943386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.953564][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.960667][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.968309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.977096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.986468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.995274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.003632][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.005110][ T4260] Bluetooth: hci1: command 0x041b tx timeout [ 64.010732][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.022964][ T4260] Bluetooth: hci0: command 0x041b tx timeout [ 64.026255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.038559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.085054][ T4260] Bluetooth: hci3: command 0x041b tx timeout [ 64.091101][ T4260] Bluetooth: hci2: command 0x041b tx timeout [ 64.100910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.116877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.131425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.140404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.155356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.163953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.173895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.174994][ T4175] Bluetooth: hci4: command 0x041b tx timeout [ 64.183018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.197095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.205782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.214334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.222836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.231229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.241240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.250651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.259833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.285559][ T4184] device veth0_vlan entered promiscuous mode [ 64.293777][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.307175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.317120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.327032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.336264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.345961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.354354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.363817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.373964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.396707][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.409055][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.422569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.436750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.448383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.459399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.471768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.485285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.492849][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.531236][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.558019][ T4184] device veth1_vlan entered promiscuous mode [ 64.596712][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.614156][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.643688][ T4184] device veth0_macvtap entered promiscuous mode [ 64.661206][ T4184] device veth1_macvtap entered promiscuous mode [ 64.677414][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.687941][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.698493][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.710977][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.720126][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.733918][ T4185] device veth0_vlan entered promiscuous mode [ 64.764542][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.778709][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.789398][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.798874][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.809403][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.818104][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.830240][ T4185] device veth1_vlan entered promiscuous mode [ 64.847815][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.857267][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.868804][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.877601][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.886552][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.895731][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.904042][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.913160][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.927593][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.936801][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.953776][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.971508][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.980064][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.989039][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.999288][ T4191] device veth0_vlan entered promiscuous mode [ 65.010415][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.020479][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.030319][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.039388][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.059380][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.068692][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.082764][ T4191] device veth1_vlan entered promiscuous mode [ 65.090769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.099965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.108204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.144273][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.157609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.168538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.180575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.193579][ T4185] device veth0_macvtap entered promiscuous mode [ 65.233073][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.248848][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.257728][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.271919][ T4193] device veth0_vlan entered promiscuous mode [ 65.282925][ T4185] device veth1_macvtap entered promiscuous mode [ 65.294380][ T4191] device veth0_macvtap entered promiscuous mode [ 65.303595][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.312244][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.321310][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.330430][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.358551][ T4191] device veth1_macvtap entered promiscuous mode [ 65.390072][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.409209][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.417267][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.427934][ T4193] device veth1_vlan entered promiscuous mode [ 65.470295][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.483138][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.497141][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.535275][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.544347][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.561171][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.573394][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.585096][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.598503][ T4193] device veth0_macvtap entered promiscuous mode [ 65.607132][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.618034][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.630264][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.634416][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.640370][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.640404][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.642174][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.677052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.689646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.698549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.706663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.716199][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.724970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.733539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.742496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.755095][ T4193] device veth1_macvtap entered promiscuous mode [ 65.767284][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.778069][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.788619][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.799321][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.810580][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.849239][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.858142][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.866961][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.875848][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.884406][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.896963][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.907252][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.916460][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.926246][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.937743][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.946616][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.955630][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.964420][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.025202][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.033216][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.041945][ T4199] device veth0_vlan entered promiscuous mode [ 66.062918][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.072035][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.080710][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.086902][ T1326] Bluetooth: hci0: command 0x040f tx timeout [ 66.088515][ T4175] Bluetooth: hci1: command 0x040f tx timeout [ 66.119341][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.138402][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.149614][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.160823][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.173586][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.175154][ T4175] Bluetooth: hci2: command 0x040f tx timeout [ 66.186587][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.190515][ T4175] Bluetooth: hci3: command 0x040f tx timeout [ 66.208647][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.229951][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.247103][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.255438][ T4175] Bluetooth: hci4: command 0x040f tx timeout [ 66.262137][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.287054][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.300569][ T4199] device veth1_vlan entered promiscuous mode [ 66.310163][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.321013][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.333732][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.344437][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.355304][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.365790][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.377605][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.403643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.413267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.448145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.459470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.471122][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.489928][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.502090][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.511427][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.518696][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.518757][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.545654][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.562205][ T4199] device veth0_macvtap entered promiscuous mode [ 66.584017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.592474][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.605544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.613771][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.625323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.673387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.695231][ T4199] device veth1_macvtap entered promiscuous mode [ 66.720890][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.740435][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.748310][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.759221][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.767313][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.783789][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.799689][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.818325][ T4241] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.826107][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.837553][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.848200][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.858923][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.869460][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.881585][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.890871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.899591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.909713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.918096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.927326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.950783][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.962673][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.974239][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.984919][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.995239][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.006030][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.017867][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.028670][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.040829][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.063512][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.072006][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.080706][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.102418][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.137480][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.154980][ T4241] usb 4-1: unable to get BOS descriptor or descriptor too short [ 67.171848][ T4199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.190072][ T4199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.231468][ T4199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.233767][ T4297] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.241827][ T4199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.256609][ T4241] usb 4-1: config 213 has an invalid interface number: 166 but max is 0 [ 67.292396][ T4241] usb 4-1: config 213 has no interface number 0 [ 67.303734][ T4241] usb 4-1: config 213 interface 166 has no altsetting 0 [ 67.339159][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.346887][ T4300] loop0: detected capacity change from 0 to 2048 [ 67.365540][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.387701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.461386][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.469530][ T4300] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.479437][ T4241] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0122, bcdDevice=e6.ef [ 67.505019][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.520459][ T4241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.532079][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.532119][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.532952][ T4241] usb 4-1: Product: syz [ 67.560463][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.562141][ T4241] usb 4-1: Manufacturer: syz [ 67.592488][ T4241] usb 4-1: SerialNumber: syz [ 67.619142][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.697256][ T4241] kvaser_usb 4-1:213.166: Cannot get usb endpoint(s) [ 67.904726][ T4292] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.052614][ T4318] loop4: detected capacity change from 0 to 64 [ 68.091320][ T4241] usb 4-1: USB disconnect, device number 2 [ 68.175139][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 68.187659][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 68.256247][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 68.271585][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 68.285242][ T4292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.312845][ T4292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.326881][ T4175] Bluetooth: hci4: command 0x0419 tx timeout [ 68.337289][ T4292] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.373625][ T4292] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.474919][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 68.484644][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 68.494649][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 68.504621][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 68.514615][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 68.524622][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 68.533808][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.560034][ T4292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.568769][ T4331] loop1: detected capacity change from 0 to 128 [ 68.628877][ T4292] usb 3-1: config 0 descriptor?? [ 68.673612][ T4331] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.702619][ T4331] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 68.760604][ T4335] loop3: detected capacity change from 0 to 1024 [ 68.807664][ T4335] ======================================================= [ 68.807664][ T4335] WARNING: The mand mount option has been deprecated and [ 68.807664][ T4335] and is ignored by this kernel. Remove the mand [ 68.807664][ T4335] option from the mount to silence this warning. [ 68.807664][ T4335] ======================================================= [ 68.846459][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 68.891845][ T4335] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.941791][ T26] audit: type=1800 audit(1756442249.291:2): pid=4335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 68.975179][ T7] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 69.028224][ T7] usb 1-1: config 0 has no interface number 0 [ 69.160269][ T4292] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 69.170427][ T7] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 69.189647][ T7] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 69.212211][ T7] usb 1-1: Product: syz [ 69.222612][ T7] usb 1-1: Manufacturer: syz [ 69.229536][ T4292] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 69.256225][ T7] usb 1-1: config 0 descriptor?? [ 69.520299][ T4322] udc-core: couldn't find an available UDC or it's busy [ 69.536025][ T4322] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 69.548649][ T4360] loop3: detected capacity change from 0 to 1024 [ 69.597802][ T1326] kernel write not supported for file 19/net/vlan/vlan1 (pid: 1326 comm: kworker/0:3) [ 69.622091][ T4360] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 69.663409][ T4360] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.670972][ T4322] loop0: detected capacity change from 0 to 8192 [ 69.717809][ T7] usb 1-1: USB disconnect, device number 2 [ 69.772664][ T4360] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 3: comm syz.3.22: lblock 3 mapped to illegal pblock 3 (length 1) [ 69.790320][ T4360] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 69.803155][ T4360] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.803155][ T4360] [ 70.024810][ T4232] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 70.274934][ T4186] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.349065][ T4372] loop0: detected capacity change from 0 to 1024 [ 70.375967][ T4372] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.536709][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.548649][ T4232] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 70.561588][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.572176][ T4232] usb 2-1: config 0 descriptor?? [ 70.680008][ T4186] usb 5-1: Using ep0 maxpacket: 16 [ 71.146003][ T4186] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 71.296740][ T4232] pantherlord 0003:0810:0001.0002: item fetching failed at offset 0/7 [ 71.333154][ T4186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.342908][ T4232] pantherlord 0003:0810:0001.0002: parse failed [ 71.374673][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.381250][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.381713][ T4385] loop2: detected capacity change from 0 to 512 [ 71.399133][ T4232] pantherlord: probe of 0003:0810:0001.0002 failed with error -22 [ 71.418737][ T4186] usb 5-1: config 0 descriptor?? [ 71.484379][ T4186] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 71.532382][ T2858] usb 2-1: USB disconnect, device number 2 [ 71.702041][ T4385] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000009,,errors=continue. Quota mode: writeback. [ 71.712693][ T4392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 71.731329][ T4385] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.967446][ T4400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.111414][ T4404] loop2: detected capacity change from 0 to 1024 [ 72.146701][ T1326] usb 3-1: USB disconnect, device number 2 [ 72.169809][ T4404] EXT4-fs (loop2): inline encryption not supported [ 72.179479][ T4404] EXT4-fs (loop2): Ignoring removed bh option [ 72.216502][ T4404] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,noquota,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 72.536797][ T4419] binder: 4418:4419 unknown command 0 [ 72.548836][ T4419] binder: 4418:4419 ioctl c0306201 200000000080 returned -22 [ 72.645217][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!! [ 72.655033][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #242!!! [ 72.684621][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 72.694622][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 72.925290][ T4186] gspca_sonixj: reg_w1 err -71 [ 72.954712][ T4186] sonixj: probe of 5-1:0.0 failed with error -71 [ 72.971142][ T4186] usb 5-1: USB disconnect, device number 2 [ 72.984818][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.068715][ T4267] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 73.165382][ T4435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 73.264675][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 73.385511][ T7] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 73.393721][ T7] usb 2-1: config 0 has no interface number 0 [ 73.414661][ T4292] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 73.485068][ T4267] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.504635][ T4267] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.555601][ T7] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 73.571416][ T7] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 73.586079][ T7] usb 2-1: Product: syz [ 73.590279][ T7] usb 2-1: Manufacturer: syz [ 73.608247][ T7] usb 2-1: config 0 descriptor?? [ 73.659892][ T4446] loop2: detected capacity change from 0 to 512 [ 73.672368][ T4446] EXT4-fs (loop2): Ignoring removed bh option [ 73.678669][ T4446] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 73.685930][ T4292] usb 4-1: Using ep0 maxpacket: 16 [ 73.691207][ T4446] EXT4-fs (loop2): Unrecognized mount option "=" or missing value [ 73.709718][ T4267] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.719246][ T4267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.731702][ T4267] usb 1-1: Product: syz [ 73.737100][ T4267] usb 1-1: Manufacturer: syz [ 73.741964][ T4267] usb 1-1: SerialNumber: syz [ 73.777725][ T4448] loop2: detected capacity change from 0 to 1024 [ 73.804994][ T4292] usb 4-1: config 0 interface 0 has no altsetting 0 [ 73.813752][ T4292] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 73.823115][ T4292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.834313][ T4292] usb 4-1: config 0 descriptor?? [ 73.855335][ T4417] udc-core: couldn't find an available UDC or it's busy [ 73.862317][ T4417] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 73.868634][ T4260] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 73.902582][ T4448] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.911045][ T7] usb 2-1: USB disconnect, device number 3 [ 74.195745][ T4267] usb 1-1: 0:2 : does not exist [ 74.739508][ T4267] usb 1-1: USB disconnect, device number 3 [ 74.898788][ T4292] usb 4-1: USB disconnect, device number 3 [ 74.924732][ T4260] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 75.246012][ T4461] syz.1.52 uses obsolete (PF_INET,SOCK_PACKET) [ 75.252382][ T4260] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.298739][ T4260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.329114][ T4260] usb 5-1: config 0 descriptor?? [ 75.332725][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.374880][ T4260] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 75.476800][ T4467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 75.583976][ T4267] usb 5-1: USB disconnect, device number 3 [ 75.794670][ T4260] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 75.835326][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 75.961328][ T26] audit: type=1800 audit(1756442256.311:3): pid=4480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.60" name="/newroot/15/bus/#97//deleted" dev="tmpfs" ino=97 res=0 errno=0 [ 76.034681][ T4260] usb 4-1: Using ep0 maxpacket: 16 [ 76.209895][ T4267] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 76.272309][ T4260] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 76.282615][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.293911][ T4260] usb 4-1: config 0 descriptor?? [ 76.345007][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 76.355493][ T4260] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 76.377161][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 76.776062][ T7] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 76.800887][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.849597][ T7] usb 1-1: Product: syz [ 76.873509][ T7] usb 1-1: Manufacturer: syz [ 76.900324][ T7] usb 1-1: SerialNumber: syz [ 77.068212][ T7] usb 1-1: config 0 descriptor?? [ 77.095089][ T4473] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 77.102340][ T4473] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 77.290225][ T4288] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.347218][ T4473] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 77.354451][ T4473] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 77.475458][ T4186] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.614916][ T4267] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 77.624026][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.632510][ T4267] usb 2-1: Product: syz [ 77.637054][ T4267] usb 2-1: Manufacturer: syz [ 77.641689][ T4267] usb 2-1: SerialNumber: syz [ 77.648088][ T4267] usb 2-1: config 0 descriptor?? [ 77.699781][ T4267] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 004 [ 77.704860][ T4260] gspca_sonixj: reg_w1 err -71 [ 77.725006][ T4288] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.735643][ T4288] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.738545][ T4260] sonixj: probe of 4-1:0.0 failed with error -71 [ 77.752614][ T4260] usb 4-1: USB disconnect, device number 4 [ 77.764767][ T4186] usb 5-1: Using ep0 maxpacket: 32 [ 77.814909][ T7] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 77.825649][ T4288] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 77.835002][ T4288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 77.843144][ T4288] usb 3-1: SerialNumber: syz [ 77.884915][ T4186] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 77.893237][ T4186] usb 5-1: config 0 has no interface number 0 [ 78.014962][ T4186] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 78.024253][ T4186] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 78.034966][ T7] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 78.037151][ T4186] usb 5-1: Product: syz [ 78.050127][ T4186] usb 5-1: Manufacturer: syz [ 78.059673][ T7] usb 1-1: USB disconnect, device number 4 [ 78.069833][ T4186] usb 5-1: config 0 descriptor?? [ 78.127762][ T4288] usb 3-1: 0:2 : does not exist [ 78.152233][ T4288] usb 3-1: USB disconnect, device number 3 [ 78.515953][ T4492] udc-core: couldn't find an available UDC or it's busy [ 78.530234][ T4492] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.556964][ T4186] usb 5-1: USB disconnect, device number 4 [ 78.615815][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.658439][ T4267] i2c i2c-1: failure reading functionality [ 78.670953][ T4267] i2c i2c-1: connected i2c-tiny-usb device [ 78.708538][ T4267] usb 2-1: USB disconnect, device number 4 [ 78.851804][ T4501] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 78.914737][ T4505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 78.951404][ T4507] loop3: detected capacity change from 0 to 128 [ 79.086927][ T4507] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 79.128052][ T4507] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.504807][ T4260] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 79.623432][ T4267] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 80.544683][ T4267] usb 2-1: Using ep0 maxpacket: 32 [ 80.614923][ T4260] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 80.660702][ T4529] Zero length message leads to an empty skb [ 80.801065][ T4267] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 81.237893][ T4260] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 81.451368][ T4267] usb 2-1: config 0 has no interface number 0 [ 81.463162][ T4267] usb 2-1: config 0 interface 12 has no altsetting 0 [ 81.506362][ T4260] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.534770][ T4260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.588723][ T4516] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 81.624861][ T4267] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 81.653205][ T4267] usb 2-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 81.663698][ T4267] usb 2-1: Product: syz [ 81.668118][ T4267] usb 2-1: Manufacturer: syz [ 81.672751][ T4267] usb 2-1: SerialNumber: syz [ 81.699325][ T4267] usb 2-1: config 0 descriptor?? [ 82.244064][ T4542] loop3: detected capacity change from 0 to 2048 [ 82.437772][ T4545] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.574786][ T4267] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 82.594916][ T4267] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 82.622650][ T4267] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 82.642300][ T4267] f81534: probe of 2-1:0.12 failed with error -71 [ 82.676530][ T4267] usb 2-1: USB disconnect, device number 5 [ 82.940019][ T4552] loop3: detected capacity change from 0 to 64 [ 84.097338][ T4292] usb 5-1: USB disconnect, device number 5 [ 84.112962][ T2858] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 84.388326][ T4578] binder: 4577:4578 unknown command 0 [ 84.393808][ T4578] binder: 4577:4578 ioctl c0306201 200000000080 returned -22 [ 84.453434][ T4580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 84.674955][ T2858] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 84.684041][ T2858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.694271][ T2858] usb 4-1: config 0 descriptor?? [ 84.747697][ T2858] cp210x 4-1:0.0: cp210x converter detected [ 84.824711][ T4292] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.968425][ T2858] usb 4-1: cp210x converter now attached to ttyUSB0 [ 84.990225][ T4587] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.178185][ T4267] usb 4-1: USB disconnect, device number 5 [ 85.194981][ T4292] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.227960][ T4267] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 85.237840][ T4267] cp210x 4-1:0.0: device disconnected [ 85.271864][ T4292] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 85.286051][ T4292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.319240][ T4292] usb 5-1: config 0 descriptor?? [ 85.368175][ T4292] pwc: Askey VC010 type 2 USB webcam detected. [ 85.798043][ T4292] pwc: recv_control_msg error -32 req 02 val 2b00 [ 85.848106][ T4292] pwc: recv_control_msg error -32 req 02 val 2700 [ 85.904736][ T4292] pwc: recv_control_msg error -32 req 02 val 2c00 [ 85.928328][ T4592] macvtap0: refused to change device tx_queue_len [ 85.945292][ T4292] pwc: recv_control_msg error -32 req 04 val 1000 [ 85.986265][ T4292] pwc: recv_control_msg error -32 req 04 val 1300 [ 86.148559][ T4599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.101'. [ 86.158503][ T4599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.101'. [ 86.165800][ T4292] pwc: recv_control_msg error -32 req 04 val 1400 [ 86.185523][ T4601] loop3: detected capacity change from 0 to 128 [ 86.512372][ T4601] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.621694][ T4601] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.669193][ T23] cfg80211: failed to load regulatory.db [ 86.982706][ T4292] pwc: recv_control_msg error -32 req 02 val 2000 [ 87.008913][ T4608] loop0: detected capacity change from 0 to 1024 [ 87.022935][ T4608] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.031024][ T4292] pwc: recv_control_msg error -32 req 02 val 2100 [ 87.072712][ T4608] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,nojournal_checksum,barrier=0x0000000000010002,dioread_lock,data_err=ignore,mb_optimize_scan=0x0000000000000000,dioread_nolock,nobarrier,abort,nogrpid,norecovery,errors=remount-ro,. Quota mode: none. [ 87.085232][ T4292] pwc: recv_control_msg error -32 req 04 val 1500 [ 87.134700][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 87.154208][ T4616] binder: 4615:4616 unknown command 0 [ 87.190103][ T4616] binder: 4615:4616 ioctl c0306201 200000000080 returned -22 [ 87.236518][ T4616] binder: BINDER_SET_CONTEXT_MGR already set [ 87.251506][ T4616] binder: 4615:4616 ioctl 4018620d 200000000040 returned -16 [ 87.286393][ T4618] loop0: detected capacity change from 0 to 1024 [ 87.314843][ T4292] pwc: recv_control_msg error -32 req 02 val 2400 [ 87.339866][ T4618] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 87.367738][ T4618] EXT4-fs (loop0): inline encryption not supported [ 87.385241][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 87.447344][ T4618] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.106: bad orphan inode 11 [ 87.467994][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 87.477856][ T4618] ext4_test_bit(bit=10, block=4) = 1 [ 87.483170][ T4618] is_bad_inode(inode)=0 [ 87.490301][ T4618] NEXT_ORPHAN(inode)=3254779904 [ 87.499401][ T4618] max_ino=32 [ 87.502707][ T4618] i_nlink=0 [ 87.542082][ T4618] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.106: lblock 2 mapped to illegal pblock 2 (length 1) [ 87.903680][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 87.941934][ T4618] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 87.962599][ T4618] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.106: lblock 0 mapped to illegal pblock 48 (length 1) [ 87.983705][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 87.990776][ T4618] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 88.006962][ T4618] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.106: Failed to acquire dquot type 0 [ 88.025927][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 88.032596][ T4618] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 88.049641][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 88.059983][ T4618] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.106: mark_inode_dirty error [ 88.076574][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 88.083305][ T4618] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 88.098391][ T4618] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,noblock_validity,mblk_io_submit,data_err=ignore,errors=remount-ro,inlinecrypt,. Quota mode: none. [ 88.134049][ T7] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 88.142447][ T4292] pwc: recv_control_msg error -71 req 02 val 2900 [ 88.149362][ T7] usb 2-1: config 0 has no interface number 0 [ 88.164926][ T4292] pwc: recv_control_msg error -71 req 02 val 2800 [ 88.190608][ T4292] pwc: recv_control_msg error -71 req 04 val 1100 [ 88.208413][ T4618] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 16: comm syz.0.106: lblock 0 mapped to illegal pblock 16 (length 1) [ 88.225676][ T4292] pwc: recv_control_msg error -71 req 04 val 1200 [ 88.234108][ T4618] EXT4-fs (loop0): Remounting filesystem read-only [ 88.241891][ T4292] pwc: Registered as video103. [ 88.255926][ T4292] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 88.274824][ T7] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 88.305179][ T4260] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 88.327880][ T4292] usb 5-1: USB disconnect, device number 6 [ 88.334679][ T7] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 88.355678][ T7] usb 2-1: Product: syz [ 88.359881][ T7] usb 2-1: Manufacturer: syz [ 88.372084][ T7] usb 2-1: config 0 descriptor?? [ 88.382166][ T4191] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 88.411321][ T4633] loop4: detected capacity change from 0 to 4096 [ 88.427265][ T4191] EXT4-fs (loop0): Remounting filesystem read-only [ 88.434323][ T4191] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 88.445119][ T4191] EXT4-fs (loop0): Remounting filesystem read-only [ 88.451684][ T4191] EXT4-fs error (device loop0): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 88.468045][ T4191] EXT4-fs (loop0): Remounting filesystem read-only [ 88.554765][ T4260] usb 4-1: Using ep0 maxpacket: 32 [ 88.583315][ T26] audit: type=1800 audit(1756442268.931:4): pid=4633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.110" name="file2" dev="loop4" ino=31 res=0 errno=0 [ 88.638864][ T4596] udc-core: couldn't find an available UDC or it's busy [ 88.756701][ T4596] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.775009][ T4260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.824083][ T4260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.837585][ T4260] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.847009][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.859963][ T4260] usb 4-1: config 0 descriptor?? [ 88.946834][ T4260] hub 4-1:0.0: USB hub found [ 89.126877][ T4596] loop1: detected capacity change from 0 to 8192 [ 89.233880][ T4260] hub 4-1:0.0: 1 port detected [ 89.954880][ T7] hub 4-1:0.0: activate --> -90 [ 90.006970][ T4186] usb 2-1: USB disconnect, device number 6 [ 90.029791][ T4646] loop4: detected capacity change from 0 to 128 [ 90.135648][ T4646] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.170636][ T4646] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.368611][ T4241] usb 4-1: USB disconnect, device number 6 [ 90.720979][ T4664] loop1: detected capacity change from 0 to 1024 [ 90.825723][ T4664] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.802905][ T4670] loop3: detected capacity change from 0 to 2048 [ 91.938301][ T4670] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.179255][ T4670] overlayfs: upper fs needs to support d_type. [ 92.408144][ T4670] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 93.013600][ T4689] loop4: detected capacity change from 0 to 128 [ 93.040919][ T4689] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.054413][ T4689] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.105398][ T4670] overlayfs: failed to set xattr on upper [ 93.111178][ T4670] overlayfs: ...falling back to index=off,metacopy=off. [ 93.120453][ T4670] overlayfs: conflicting lowerdir path [ 93.153945][ T4686] loop1: detected capacity change from 0 to 4096 [ 93.165865][ T4687] UDF-fs: warning (device loop3): udf_rmdir: empty directory has nlink != 2 (0) [ 93.658791][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 93.695277][ T4706] loop1: detected capacity change from 0 to 1024 [ 93.772561][ T4706] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 93.804859][ T4706] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.871787][ T4706] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: block 3: comm syz.1.132: lblock 3 mapped to illegal pblock 3 (length 1) [ 93.929656][ T4706] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 94.023204][ T4706] EXT4-fs (loop1): This should not happen!! Data will be lost [ 94.023204][ T4706] [ 94.038969][ T4713] loop0: detected capacity change from 0 to 128 [ 94.146928][ T4713] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 94.184750][ T23] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 94.229501][ T4713] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.275545][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.334115][ T23] usb 5-1: Product: syz [ 94.364907][ T23] usb 5-1: Manufacturer: syz [ 94.369542][ T23] usb 5-1: SerialNumber: syz [ 94.394699][ T23] usb 5-1: config 0 descriptor?? [ 94.661478][ T23] hso 5-1:0.0: Can't find BULK IN endpoint [ 94.692537][ T23] usb-storage 5-1:0.0: USB Mass Storage device detected [ 94.915213][ T23] usb 5-1: USB disconnect, device number 7 [ 94.977016][ T1108] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.346119][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.385210][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.386282][ T4736] device syzkaller0 entered promiscuous mode [ 95.486124][ T1108] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 95.504535][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.566104][ T1108] usb 1-1: config 0 descriptor?? [ 95.617136][ T4739] loop3: detected capacity change from 0 to 4096 [ 96.046529][ T1108] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 96.053640][ T1108] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 96.074754][ T4241] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 96.098002][ T1108] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 96.128532][ T1108] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 96.156435][ T1108] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 96.163451][ T1108] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 96.209105][ T1108] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 96.256263][ T1108] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 96.394932][ T1108] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00 [ 96.465788][ T4241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.484612][ T4241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.494471][ T4241] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 96.505598][ T4241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.523423][ T4241] usb 2-1: config 0 descriptor?? [ 97.077925][ T4728] cp2112 0003:10C4:EA90.0004: Error starting transaction: -38 [ 97.087598][ T4241] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 97.118000][ T4241] cp2112 0003:10C4:EA90.0005: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 97.144797][ T1108] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 97.191133][ T1108] usb 1-1: USB disconnect, device number 5 [ 97.314810][ T4241] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 97.416419][ T4774] fido_id[4774]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 98.022361][ T4779] loop0: detected capacity change from 0 to 512 [ 98.181517][ T1108] usb 2-1: USB disconnect, device number 7 [ 98.260265][ T4779] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.156: bg 0: block 248: padding at end of block bitmap is not set [ 98.337820][ T4779] Quota error (device loop0): write_blk: dquota write failed [ 98.355632][ T4779] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 98.415338][ T4779] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.156: Failed to acquire dquot type 1 [ 98.464888][ T4779] EXT4-fs (loop0): 1 truncate cleaned up [ 98.470906][ T4779] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.502917][ T4779] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.548022][ T4241] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 98.619092][ T26] audit: type=1800 audit(1756442278.971:5): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.156" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 98.753787][ T154] Quota error (device loop0): remove_tree: Getting block too big (0 >= 6) [ 98.796120][ T154] EXT4-fs error (device loop0): ext4_release_dquot:6245: comm kworker/u4:2: Failed to release dquot type 1 [ 98.841879][ T4793] loop4: detected capacity change from 0 to 2048 [ 98.970703][ T4793] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.997741][ T4793] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.105174][ T4241] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 99.114279][ T4241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.154710][ T4241] usb 4-1: Product: syz [ 99.158933][ T4241] usb 4-1: Manufacturer: syz [ 99.163554][ T4241] usb 4-1: SerialNumber: syz [ 99.209644][ T4805] loop4: detected capacity change from 0 to 128 [ 99.222426][ T4241] usb 4-1: config 0 descriptor?? [ 99.248628][ T4808] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.281249][ T4808] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 99.319624][ T4805] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.334931][ T4805] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.710270][ T4819] binder: 4817:4819 unknown command 0 [ 99.724990][ T4819] binder: 4817:4819 ioctl c0306201 200000000080 returned -22 [ 99.853459][ T4820] loop0: detected capacity change from 0 to 4096 [ 99.995023][ T26] audit: type=1800 audit(1756442280.351:6): pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.169" name="file2" dev="loop0" ino=31 res=0 errno=0 [ 100.116589][ T4816] udc-core: couldn't find an available UDC or it's busy [ 100.164867][ T1108] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 100.185099][ T4816] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 100.534687][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 100.654898][ T1108] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 100.697454][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.858949][ T1108] usb 5-1: config 0 descriptor?? [ 100.928263][ T4832] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 100.986331][ T1108] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 101.176907][ T26] audit: type=1326 audit(1756442281.531:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f691be9 code=0x7ffc0000 [ 101.345888][ T4847] loop0: detected capacity change from 0 to 1024 [ 101.387145][ T4847] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.466829][ T4847] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 101.496460][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.559735][ T4847] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 101.647952][ T4847] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 101.677771][ T4847] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 101.754769][ T4847] EXT4-fs (loop0): This should not happen!! Data will be lost [ 101.754769][ T4847] [ 101.801406][ T4847] EXT4-fs (loop0): Total free blocks count 0 [ 101.840040][ T4847] EXT4-fs (loop0): Free/Dirty block details [ 101.879128][ T1108] gspca_sonixj: reg_r err -71 [ 101.886508][ T1108] sonixj: probe of 5-1:0.0 failed with error -71 [ 101.894041][ T4847] EXT4-fs (loop0): free_blocks=20480 [ 101.940683][ T4847] EXT4-fs (loop0): dirty_blocks=32 [ 101.941293][ T1108] usb 5-1: USB disconnect, device number 8 [ 101.974721][ T4847] EXT4-fs (loop0): Block reservation details [ 102.033183][ T4847] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 102.140285][ T4382] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 102.175673][ T4382] EXT4-fs (loop0): This should not happen!! Data will be lost [ 102.175673][ T4382] [ 102.724801][ T4186] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 102.733062][ T4815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.764054][ T4241] usb 4-1: USB disconnect, device number 7 [ 102.980035][ T4186] usb 5-1: Using ep0 maxpacket: 8 [ 103.105981][ T4186] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 103.121583][ T4186] usb 5-1: config 2 has no interface number 0 [ 103.130025][ T4186] usb 5-1: config 2 interface 31 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 103.149224][ T4186] usb 5-1: config 2 interface 31 has no altsetting 0 [ 103.340633][ T4186] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 103.360111][ T4186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.371127][ T4186] usb 5-1: Product: syz [ 103.384018][ T4186] usb 5-1: Manufacturer: syz [ 103.392915][ T4186] usb 5-1: SerialNumber: syz [ 104.414851][ T4186] ch9200: probe of 5-1:2.31 failed with error -22 [ 104.443759][ T4186] usb 5-1: USB disconnect, device number 9 [ 104.574831][ T4241] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 104.634658][ T4288] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 104.844741][ T4241] usb 4-1: Using ep0 maxpacket: 16 [ 104.975329][ T4241] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 105.195358][ T4288] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 105.713952][ T4288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.725162][ T4288] usb 2-1: Product: syz [ 105.728169][ T4241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.729456][ T4288] usb 2-1: Manufacturer: syz [ 105.742176][ T4288] usb 2-1: SerialNumber: syz [ 105.759259][ T4288] usb 2-1: config 0 descriptor?? [ 105.773346][ T4241] usb 4-1: config 0 descriptor?? [ 105.847155][ T4241] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 106.052870][ T4931] loop4: detected capacity change from 0 to 4096 [ 106.104918][ T4931] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 106.407727][ T4937] sctp: [Deprecated]: syz.4.203 (pid 4937) Use of int in max_burst socket option. [ 106.407727][ T4937] Use struct sctp_assoc_value instead [ 106.730379][ T4241] gspca_sonixj: reg_r err -71 [ 106.736892][ T4241] sonixj: probe of 4-1:0.0 failed with error -71 [ 106.755649][ T4241] usb 4-1: USB disconnect, device number 8 [ 106.999154][ T4186] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 107.345284][ T4241] usb 2-1: USB disconnect, device number 8 [ 107.374707][ T4186] usb 5-1: Using ep0 maxpacket: 32 [ 107.479367][ T4956] loop3: detected capacity change from 0 to 512 [ 107.491499][ T4957] loop0: detected capacity change from 0 to 64 [ 107.534908][ T4186] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 107.553706][ T4186] usb 5-1: config 0 has no interface number 0 [ 107.570867][ T4956] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 107.600513][ T4956] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.804835][ T4186] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 107.819061][ T4186] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 107.828219][ T4186] usb 5-1: Product: syz [ 107.832498][ T4186] usb 5-1: Manufacturer: syz [ 107.849513][ T4186] usb 5-1: config 0 descriptor?? [ 107.894725][ T4241] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 108.254668][ T4241] usb 2-1: Using ep0 maxpacket: 16 [ 108.904176][ T4941] udc-core: couldn't find an available UDC or it's busy [ 108.954797][ T4941] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 108.973067][ T4971] loop3: detected capacity change from 0 to 512 [ 109.004843][ T4241] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.024819][ T4241] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 109.048784][ T4241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.078629][ T4241] usb 2-1: config 0 descriptor?? [ 109.150684][ T4973] loop0: detected capacity change from 0 to 4096 [ 109.192143][ T4941] loop4: detected capacity change from 0 to 8192 [ 109.199870][ T4971] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 109.267346][ T4186] usb 5-1: USB disconnect, device number 10 [ 109.325816][ T4971] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.637291][ T4241] usbhid 2-1:0.0: can't add hid device: -71 [ 109.645929][ T4241] usbhid: probe of 2-1:0.0 failed with error -71 [ 109.695236][ T4241] usb 2-1: USB disconnect, device number 9 [ 109.979288][ T4985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.217'. [ 111.354508][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 111.705015][ T5026] loop1: detected capacity change from 0 to 512 [ 111.783752][ T5026] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 111.823097][ T5026] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 111.835650][ T5026] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 111.934826][ T5026] EXT4-fs (loop1): orphan cleanup on readonly fs [ 111.941368][ T5026] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 112.007729][ T5033] loop3: detected capacity change from 0 to 64 [ 112.026268][ T5026] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 112.077643][ T5026] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 112.117784][ T5026] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.231: bg 0: block 40: padding at end of block bitmap is not set [ 112.169804][ T5026] EXT4-fs (loop1): Remounting filesystem read-only [ 112.189425][ T5026] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 112.214112][ T5026] EXT4-fs (loop1): Remounting filesystem read-only [ 112.260503][ T5026] EXT4-fs (loop1): 1 truncate cleaned up [ 112.304713][ T5026] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,dioread_lock,nouid32,nomblk_io_submit,. Quota mode: writeback. [ 112.612432][ T5041] loop0: detected capacity change from 0 to 128 [ 112.706522][ T5045] loop1: detected capacity change from 0 to 128 [ 112.799750][ T5041] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.853628][ T5041] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.895924][ T5045] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.995179][ T5045] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.085531][ T5045] syz.1.237 (pid 5045) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 113.337424][ T5041] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 113.450835][ T5059] netlink: 100 bytes leftover after parsing attributes in process `syz.4.240'. [ 113.585532][ T5059] input: syz1 as /devices/virtual/input/input6 [ 115.184390][ T5080] loop0: detected capacity change from 0 to 256 [ 115.833402][ T5080] FAT-fs (loop0): Directory bread(block 64) failed [ 115.870687][ T5080] FAT-fs (loop0): Directory bread(block 65) failed [ 115.892162][ T5080] FAT-fs (loop0): Directory bread(block 66) failed [ 115.973761][ T5080] FAT-fs (loop0): Directory bread(block 67) failed [ 115.980778][ T5080] FAT-fs (loop0): Directory bread(block 68) failed [ 115.993638][ T5080] FAT-fs (loop0): Directory bread(block 69) failed [ 116.000666][ T5080] FAT-fs (loop0): Directory bread(block 70) failed [ 116.017058][ T5080] FAT-fs (loop0): Directory bread(block 71) failed [ 116.030540][ T5080] FAT-fs (loop0): Directory bread(block 72) failed [ 116.038661][ T5080] FAT-fs (loop0): Directory bread(block 73) failed [ 117.214802][ T4241] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 118.524789][ T4260] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 119.134855][ T4241] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.164726][ T4241] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 119.173861][ T4241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.224653][ T4260] usb 4-1: Using ep0 maxpacket: 8 [ 119.358377][ T4260] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.369355][ T4260] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.385368][ T4260] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.400414][ T4260] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.176804][ T4241] usb 2-1: config 0 descriptor?? [ 120.311510][ T4260] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.356576][ T4241] usb 2-1: can't set config #0, error -71 [ 120.395790][ T4241] usb 2-1: USB disconnect, device number 10 [ 120.402460][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.531185][ T5118] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 120.533527][ T5120] IPVS: stopping master sync thread 5118 ... [ 121.504824][ T4260] usb 4-1: usb_control_msg returned -71 [ 121.510447][ T4260] usbtmc 4-1:16.0: can't read capabilities [ 121.554932][ T4260] usb 4-1: USB disconnect, device number 9 [ 121.864747][ T4241] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 124.384793][ T4241] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.409835][ T4241] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 124.450629][ T4241] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.483457][ T5144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.266'. [ 124.537954][ T4241] usb 2-1: config 0 descriptor?? [ 124.606181][ T4241] usb 2-1: can't set config #0, error -71 [ 124.620161][ T4241] usb 2-1: USB disconnect, device number 11 [ 125.215700][ T5154] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.275166][ T5159] binder: 5156:5159 unknown command 0 [ 125.280586][ T5159] binder: 5156:5159 ioctl c0306201 200000000080 returned -22 [ 125.798471][ T5169] loop4: detected capacity change from 0 to 128 [ 126.478403][ T5169] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.511982][ T5169] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.391049][ T5191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.399384][ T5191] IPv6: NLM_F_CREATE should be set when creating new route [ 128.984636][ T1326] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 129.004876][ T4241] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.254862][ T4241] usb 1-1: Using ep0 maxpacket: 16 [ 129.355149][ T1326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.375031][ T4241] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 129.402104][ T1326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.422602][ T1326] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.445084][ T1326] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.454268][ T1326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.496274][ T1326] usb 5-1: config 0 descriptor?? [ 130.266576][ T4241] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 130.334314][ T4241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.373508][ T4241] usb 1-1: Product: syz [ 130.410575][ T4241] usb 1-1: Manufacturer: syz [ 130.427561][ T4241] usb 1-1: SerialNumber: syz [ 130.445076][ T4241] usb 1-1: config 0 descriptor?? [ 130.527457][ T1326] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 130.688380][ T1326] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 131.058583][ T1326] usb 5-1: USB disconnect, device number 11 [ 132.235692][ T1326] usb 1-1: USB disconnect, device number 6 [ 132.355546][ T26] audit: type=1326 audit(1756442312.711:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5242 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f691be9 code=0x7ffc0000 [ 132.533108][ T26] audit: type=1326 audit(1756442312.711:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5242 comm="syz.2.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f691be9 code=0x7ffc0000 [ 132.560974][ T5251] netlink: 100 bytes leftover after parsing attributes in process `syz.0.297'. [ 132.792056][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.798509][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.951189][ T5265] loop1: detected capacity change from 0 to 1024 [ 134.063123][ T5265] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.774477][ T26] audit: type=1800 audit(1756442314.951:10): pid=5271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.301" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 135.194529][ T5275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.828246][ T5301] loop3: detected capacity change from 0 to 1024 [ 137.894799][ T5301] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.138212][ T5312] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 138.149410][ T5312] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 138.835182][ T26] audit: type=1800 audit(1756442319.091:11): pid=5313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.313" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 139.054748][ T1326] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 139.420837][ T4186] Bluetooth: hci5: command 0x1003 tx timeout [ 139.491064][ T5323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 139.822821][ T146] Bluetooth: hci5: sending frame failed (-49) [ 139.934530][ T1326] usb 2-1: Using ep0 maxpacket: 16 [ 141.560551][ T5332] sched: RT throttling activated [ 141.909773][ T4186] Bluetooth: hci5: command 0x1001 tx timeout [ 141.918715][ T146] Bluetooth: hci5: sending frame failed (-49) [ 142.028517][ T1326] usb 2-1: unable to read config index 0 descriptor/all [ 142.077091][ T1326] usb 2-1: can't read configurations, error -71 [ 142.485065][ T1326] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 142.814820][ T4186] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.134761][ T1326] usb 2-1: Using ep0 maxpacket: 32 [ 143.254861][ T1326] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 143.434855][ T1326] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 143.444164][ T1326] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 143.453053][ T1326] usb 2-1: Product: syz [ 143.457642][ T1326] usb 2-1: Manufacturer: syz [ 143.462424][ T1326] usb 2-1: SerialNumber: syz [ 143.496725][ T1326] usb 2-1: config 0 descriptor?? [ 143.514902][ T5341] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 143.635100][ T4186] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 143.649761][ T4186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.658266][ T4186] usb 1-1: Product: syz [ 143.662466][ T4186] usb 1-1: Manufacturer: syz [ 143.672869][ T4186] usb 1-1: SerialNumber: syz [ 143.693999][ T4186] usb 1-1: config 0 descriptor?? [ 143.800821][ T5341] udc-core: couldn't find an available UDC or it's busy [ 143.821795][ T5341] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 143.936771][ T4260] usb 2-1: USB disconnect, device number 13 [ 144.004878][ T4288] Bluetooth: hci5: command 0x1009 tx timeout [ 144.014041][ T5374] udc-core: couldn't find an available UDC or it's busy [ 144.022396][ T5374] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 144.052186][ T5344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.068720][ T4288] usb 1-1: USB disconnect, device number 7 [ 144.074755][ T4186] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 144.324727][ T4186] usb 4-1: Using ep0 maxpacket: 16 [ 144.445099][ T4186] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 144.455021][ T4186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.473364][ T4186] usb 4-1: config 0 descriptor?? [ 144.516820][ T4186] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 144.944695][ T4186] gspca_sonixj: reg_r err -32 [ 144.949529][ T4186] sonixj: probe of 4-1:0.0 failed with error -32 [ 146.980250][ T4260] usb 4-1: USB disconnect, device number 10 [ 147.986851][ C1] ODEBUG: Out of memory. ODEBUG disabled [ 149.374734][ T4241] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 149.434735][ T4260] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 149.684737][ T4260] usb 5-1: Using ep0 maxpacket: 16 [ 149.914783][ T4260] usb 5-1: config 0 has no interfaces? [ 150.014089][ T5433] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.352'. [ 150.711430][ T4241] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 150.724526][ T4241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.732956][ T4241] usb 4-1: Product: syz [ 150.737551][ T4241] usb 4-1: Manufacturer: syz [ 150.742206][ T4241] usb 4-1: SerialNumber: syz [ 150.750993][ T4241] usb 4-1: config 0 descriptor?? [ 150.756301][ T4260] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 150.766412][ T4260] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 150.774685][ T4260] usb 5-1: Product: syz [ 150.779375][ T4260] usb 5-1: SerialNumber: syz [ 150.794699][ T4292] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 150.809117][ T4260] usb 5-1: config 0 descriptor?? [ 150.814445][ T5437] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 151.061652][ T4260] usb 5-1: USB disconnect, device number 12 [ 151.067785][ T4292] usb 1-1: Using ep0 maxpacket: 16 [ 151.095148][ T5442] udc-core: couldn't find an available UDC or it's busy [ 151.108422][ T5442] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 151.139030][ T5422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.150326][ T4241] usb 4-1: USB disconnect, device number 11 [ 151.206735][ T4292] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 151.221031][ T4292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.249831][ T4292] usb 1-1: config 0 descriptor?? [ 151.306273][ T4292] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 151.734982][ T4292] gspca_sonixj: reg_r err -32 [ 151.739758][ T4292] sonixj: probe of 1-1:0.0 failed with error -32 [ 153.140945][ T4241] usb 1-1: USB disconnect, device number 8 [ 155.019317][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'. [ 155.264322][ T5481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.124633][ T4241] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 157.384692][ T4241] usb 4-1: Using ep0 maxpacket: 16 [ 157.514874][ T4241] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 157.540429][ T4241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.581705][ T4241] usb 4-1: config 0 descriptor?? [ 157.626808][ T4241] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 158.070583][ T4241] gspca_sonixj: reg_r err -32 [ 158.080624][ T4241] sonixj: probe of 4-1:0.0 failed with error -32 [ 160.399576][ T4186] usb 4-1: USB disconnect, device number 12 [ 162.950604][ T5540] netlink: 100 bytes leftover after parsing attributes in process `syz.3.385'. [ 164.300322][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.432456][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.649698][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.701696][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.892116][ T5552] chnl_net:caif_netlink_parms(): no params data found [ 166.014839][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 166.147215][ T5552] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.164657][ T5552] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.196003][ T5552] device bridge_slave_0 entered promiscuous mode [ 166.245627][ T5552] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.264275][ T5552] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.292606][ T5552] device bridge_slave_1 entered promiscuous mode [ 166.447505][ T5552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.525342][ T5552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.370615][ T5552] team0: Port device team_slave_0 added [ 167.421508][ T5591] binder: BC_ACQUIRE_RESULT not supported [ 167.444651][ T5591] binder: 5590:5591 ioctl c0306201 200000000640 returned -22 [ 167.453302][ T5552] team0: Port device team_slave_1 added [ 167.574424][ T5552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.619532][ T5552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.645482][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.715006][ T5552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.730608][ T5603] loop0: detected capacity change from 0 to 128 [ 167.749647][ T5552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.764637][ T5552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.790623][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.827834][ T5552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.837279][ T5605] capability: warning: `syz.3.404' uses 32-bit capabilities (legacy support in use) [ 167.858905][ T5605] loop2: detected capacity change from 0 to 7 [ 167.880965][ T5605] loop2: [ 167.884237][ T5605] loop2: partition table partially beyond EOD, truncated [ 167.893318][ T5603] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.945153][ T5603] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.971228][ T5552] device hsr_slave_0 entered promiscuous mode [ 168.016547][ T5552] device hsr_slave_1 entered promiscuous mode [ 168.024441][ T5552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.051726][ T5552] Cannot create hsr debugfs directory [ 168.085092][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 168.285676][ T5617] netlink: 100 bytes leftover after parsing attributes in process `syz.3.405'. [ 168.885358][ T5552] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.962100][ T5552] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.994019][ T5552] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 169.351706][ T9] device hsr_slave_0 left promiscuous mode [ 169.378536][ T9] device hsr_slave_1 left promiscuous mode [ 169.419994][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.484494][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.538854][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.553182][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.614797][ T9] device bridge_slave_1 left promiscuous mode [ 169.623384][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.680239][ T9] device bridge_slave_0 left promiscuous mode [ 169.724226][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.897396][ T9] device veth1_macvtap left promiscuous mode [ 169.965284][ T9] device veth0_macvtap left promiscuous mode [ 169.971405][ T9] device veth1_vlan left promiscuous mode [ 170.011918][ T9] device veth0_vlan left promiscuous mode [ 170.165036][ T4292] Bluetooth: hci5: command 0x040f tx timeout [ 170.276933][ T5664] loop3: detected capacity change from 0 to 128 [ 170.417072][ T5664] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.450511][ T5664] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.603100][ T9] team0 (unregistering): Port device team_slave_1 removed [ 171.631894][ T9] team0 (unregistering): Port device team_slave_0 removed [ 171.668184][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.722731][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.244752][ T4260] Bluetooth: hci5: command 0x0419 tx timeout [ 172.293006][ T9] bond0 (unregistering): Released all slaves [ 172.420288][ T5552] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 172.459544][ T5685] smc: net device bond0 applied user defined pnetid SYZ1 [ 172.741793][ T5552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.767296][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.793775][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.827516][ T5552] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.855137][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.875011][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.910252][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.917437][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.102090][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.953895][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.997319][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.042751][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.049911][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.142870][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.245275][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.280876][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.021291][ T4186] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 175.086543][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.264682][ T4186] usb 4-1: Using ep0 maxpacket: 32 [ 175.305181][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.332251][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.342609][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.384727][ T4186] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 176.157013][ T4186] usb 4-1: config 0 has no interface number 0 [ 176.193884][ T5552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.251689][ T5552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.274886][ T4186] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 176.305852][ T4186] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 176.343474][ T4186] usb 4-1: Product: syz [ 176.344106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.374646][ T4186] usb 4-1: Manufacturer: syz [ 176.386792][ T4186] usb 4-1: config 0 descriptor?? [ 176.393898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.432945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.504197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.543025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.741918][ T5725] udc-core: couldn't find an available UDC or it's busy [ 176.769799][ T5725] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 177.258230][ T5725] loop3: detected capacity change from 0 to 8192 [ 177.316680][ T5802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.413322][ T5802] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.429645][ T4186] usb 4-1: USB disconnect, device number 13 [ 177.540970][ T5552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.727346][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.751717][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.796144][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.821028][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.883303][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.883976][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.931042][ T5552] device veth0_vlan entered promiscuous mode [ 181.981042][ T5552] device veth1_vlan entered promiscuous mode [ 181.984700][ T4260] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 182.085420][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.115414][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.136382][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.166408][ T5796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.212617][ T5552] device veth0_macvtap entered promiscuous mode [ 182.265875][ T5552] device veth1_macvtap entered promiscuous mode [ 182.336710][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.404980][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.429583][ T4260] usb 1-1: Using ep0 maxpacket: 32 [ 182.467372][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.560982][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.726111][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.911039][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.153574][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.204938][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.307368][ T5552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.319687][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.330494][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.425914][ T4260] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 183.434138][ T4260] usb 1-1: config 0 has no interface number 0 [ 183.472137][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.047380][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.094745][ T4260] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 186.127355][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 186.136176][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.240332][ T4260] usb 1-1: config 0 descriptor?? [ 186.253937][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.331327][ T5552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.345127][ T4260] usb 1-1: can't set config #0, error -71 [ 186.370090][ T4260] usb 1-1: USB disconnect, device number 9 [ 186.433363][ T5552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.518892][ T5552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.566228][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.635724][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.661566][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.697219][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.720468][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.055967][ T2858] Bluetooth: hci2: command 0x0406 tx timeout [ 188.062204][ T2858] Bluetooth: hci3: command 0x0406 tx timeout [ 188.292505][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.432492][ T5552] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.576198][ T5552] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.711169][ T5552] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.856250][ T5552] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.224219][ T2858] Bluetooth: hci4: command 0x0406 tx timeout [ 189.231011][ T2858] Bluetooth: hci0: command 0x0406 tx timeout [ 189.965443][ T5793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.026129][ T5793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.414224][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 190.844722][ T5789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.855690][ T5789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.882786][ T5935] netlink: 'syz.2.467': attribute type 13 has an invalid length. [ 191.024661][ T5935] netlink: 'syz.2.467': attribute type 17 has an invalid length. [ 191.428078][ T5935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.006211][ T5935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.065475][ T5792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.147608][ T2858] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 192.454627][ T2858] usb 5-1: Using ep0 maxpacket: 32 [ 192.584760][ T2858] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 192.592971][ T2858] usb 5-1: config 0 has no interface number 0 [ 192.764893][ T2858] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 192.842869][ T2858] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 192.902994][ T2858] usb 5-1: Product: syz [ 192.919354][ T2858] usb 5-1: Manufacturer: syz [ 192.986873][ T2858] usb 5-1: config 0 descriptor?? [ 193.283669][ T5931] udc-core: couldn't find an available UDC or it's busy [ 193.313796][ T5931] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 194.170405][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.176766][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.437810][ T5961] loop4: detected capacity change from 0 to 8192 [ 195.042363][ T7] usb 5-1: USB disconnect, device number 13 [ 195.055943][ T906] hwrng: no data available [ 196.848210][ T5989] binder: BINDER_SET_CONTEXT_MGR already set [ 196.931791][ T5989] binder: 5988:5989 ioctl 4018620d 200000000040 returned -16 [ 200.074796][ T4175] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 200.700278][ T6034] netlink: 100 bytes leftover after parsing attributes in process `syz.4.487'. [ 200.714772][ T4175] usb 4-1: Using ep0 maxpacket: 32 [ 200.854837][ T4175] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 200.891128][ T4175] usb 4-1: config 0 has no interface number 0 [ 201.105458][ T4260] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 201.125204][ T4175] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 201.134279][ T4175] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 201.776868][ T4175] usb 4-1: Product: syz [ 201.928429][ T4175] usb 4-1: Manufacturer: syz [ 201.963963][ T6048] binder: BINDER_SET_CONTEXT_MGR already set [ 201.994614][ T4260] usb 1-1: Using ep0 maxpacket: 32 [ 201.996109][ T4175] usb 4-1: config 0 descriptor?? [ 202.065179][ T6048] binder: 6047:6048 ioctl 4018620d 200000000040 returned -16 [ 202.257776][ T4260] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 202.272354][ T4260] usb 1-1: config 0 has no interface number 0 [ 202.278955][ T4260] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 202.290222][ T4260] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 202.314635][ T4260] usb 1-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 202.330870][ T6026] udc-core: couldn't find an available UDC or it's busy [ 202.360381][ T4260] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 202.360397][ T6026] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 202.360417][ T4260] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 202.479393][ T4260] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.566116][ T6061] binder: 6060:6061 unknown command 0 [ 202.591635][ T6061] binder: 6060:6061 ioctl c0306201 200000000080 returned -22 [ 202.674843][ T4260] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 202.692299][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.722421][ T4260] usb 1-1: Product: syz [ 202.729317][ T4260] usb 1-1: Manufacturer: syz [ 202.738329][ T4260] usb 1-1: SerialNumber: syz [ 202.750397][ T6026] loop3: detected capacity change from 0 to 8192 [ 202.752351][ T4260] usb 1-1: config 0 descriptor?? [ 202.784878][ T6036] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 202.793645][ T6036] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 202.826325][ T4260] microtek usb (rev 0.4.3): expecting 3 got 1 endpoints! Bailing out. [ 202.900049][ T4175] usb 4-1: USB disconnect, device number 14 [ 203.267083][ T2858] usb 1-1: USB disconnect, device number 10 [ 205.461978][ T6094] binder: BINDER_SET_CONTEXT_MGR already set [ 205.520123][ T6094] binder: 6093:6094 ioctl 4018620d 2000000002c0 returned -16 [ 205.911902][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 210.484891][ T6162] binder: 6161:6162 ioctl c0306201 0 returned -14 [ 211.998894][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805e97b400: rx timeout, send abort [ 212.364655][ T4232] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 212.500145][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801f293000: rx timeout, send abort [ 212.643158][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805e97b400: abort rx timeout. Force session deactivation [ 213.764921][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 213.894711][ T4232] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 213.982142][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801f293000: abort rx timeout. Force session deactivation [ 214.065355][ T4232] usb 5-1: config 0 has no interface number 0 [ 215.994668][ T4232] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 216.105837][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 216.165464][ T4232] usb 5-1: config 0 descriptor?? [ 216.211483][ T4232] usb 5-1: can't set config #0, error -71 [ 216.243680][ T4232] usb 5-1: USB disconnect, device number 14 [ 218.216843][ T6261] netlink: 100 bytes leftover after parsing attributes in process `syz.3.537'. [ 218.864786][ T4241] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 219.114634][ T4241] usb 5-1: Using ep0 maxpacket: 32 [ 219.234845][ T4241] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 219.247262][ T4241] usb 5-1: config 0 has no interface number 0 [ 219.384899][ T4241] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 219.406755][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 219.457355][ T4241] usb 5-1: Product: syz [ 219.463411][ T4241] usb 5-1: Manufacturer: syz [ 219.511337][ T4241] usb 5-1: config 0 descriptor?? [ 220.619078][ T6272] udc-core: couldn't find an available UDC or it's busy [ 220.664690][ T6272] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 221.118006][ T6272] loop4: detected capacity change from 0 to 8192 [ 221.175369][ T4186] usb 5-1: USB disconnect, device number 15 [ 223.647341][ T6334] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 228.594764][ T4232] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 229.734696][ T4232] usb 6-1: Using ep0 maxpacket: 8 [ 229.874787][ T4232] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 230.114848][ T4232] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 230.123955][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.189969][ T4232] usb 6-1: Product: syz [ 230.194187][ T4232] usb 6-1: Manufacturer: syz [ 230.234709][ T4232] usb 6-1: SerialNumber: syz [ 230.272093][ T4232] usb 6-1: config 0 descriptor?? [ 230.356710][ T4232] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 230.375363][ T4232] usb 6-1: setting power ON [ 230.380577][ T4232] dvb-usb: bulk message failed: -22 (2/0) [ 230.448254][ T4232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 230.525073][ T4232] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 230.560454][ T6386] dvb-usb: bulk message failed: -22 (3/0) [ 230.574792][ T4232] usb 6-1: media controller created [ 230.574852][ T6386] cxusb: i2c wr: len=80 is too big! [ 230.574852][ T6386] [ 230.653557][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.871989][ T4232] usb 6-1: selecting invalid altsetting 6 [ 230.880400][ T4232] usb 6-1: digital interface selection failed (-22) [ 230.889841][ T4232] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 230.936415][ T4232] usb 6-1: setting power OFF [ 230.942502][ T4232] dvb-usb: bulk message failed: -22 (2/0) [ 230.953582][ T4232] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 230.964471][ T4232] (NULL device *): no alternate interface [ 230.997719][ T4232] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 231.033534][ T4232] usb 6-1: USB disconnect, device number 2 [ 232.361781][ T26] audit: type=1326 audit(1756442412.711:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcabbbfbe9 code=0x7ffc0000 [ 232.434389][ T26] audit: type=1326 audit(1756442412.711:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcabbbfbe9 code=0x7ffc0000 [ 232.771645][ T26] audit: type=1326 audit(1756442412.721:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcabbbfbe9 code=0x7ffc0000 [ 232.871160][ T26] audit: type=1326 audit(1756442412.721:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcabbbfbe9 code=0x7ffc0000 [ 232.899674][ T26] audit: type=1326 audit(1756442412.721:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcabbbfbe9 code=0x7ffc0000 [ 233.285159][ T4186] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 233.312582][ T26] audit: type=1800 audit(1756442413.661:17): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.576" name="/newroot/108/bus/#594//deleted" dev="tmpfs" ino=594 res=0 errno=0 [ 235.408048][ T6483] overlayfs: failed to clone upperpath [ 235.424715][ T4186] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.452202][ T4186] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.484426][ T4186] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.498243][ T4186] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.511639][ T4186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.525099][ T4186] usb 6-1: config 0 descriptor?? [ 235.706759][ T6494] vivid-001: ================= START STATUS ================= [ 235.715102][ T6494] vivid-001: Test Pattern: 75% Colorbar [ 235.721870][ T6494] vivid-001: Fill Percentage of Frame: 100 [ 235.727924][ T6494] vivid-001: Horizontal Movement: No Movement [ 235.734166][ T6494] vivid-001: Vertical Movement: No Movement [ 235.740251][ T6494] vivid-001: OSD Text Mode: All [ 235.745344][ T6494] vivid-001: Show Border: false [ 235.750368][ T6494] vivid-001: Show Square: false [ 235.755364][ T6494] vivid-001: Sensor Flipped Horizontally: false [ 235.939446][ T6494] vivid-001: Sensor Flipped Vertically: false [ 235.963519][ T6494] vivid-001: Insert SAV Code in Image: false [ 235.993821][ T6494] vivid-001: Insert EAV Code in Image: false [ 236.007098][ T4186] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 236.025188][ T4186] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 236.040772][ T4186] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 236.069949][ T6494] vivid-001: Reduced Framerate: false [ 236.094403][ T6494] vivid-001: Enable Capture Cropping: true [ 236.130354][ T6494] vivid-001: Enable Capture Composing: true [ 236.265017][ T6494] vivid-001: Enable Capture Scaler: true [ 236.270752][ T6494] vivid-001: Timestamp Source: End of Frame [ 236.288050][ T6494] vivid-001: Colorspace: sRGB [ 236.294820][ T6494] vivid-001: Transfer Function: Default [ 236.306921][ T6494] vivid-001: Y'CbCr Encoding: Default [ 236.315031][ T6494] vivid-001: HSV Encoding: Hue 0-179 [ 237.048186][ T6494] vivid-001: Quantization: Default [ 237.053362][ T6494] vivid-001: Apply Alpha To Red Only: false [ 237.074750][ T2858] usb 6-1: USB disconnect, device number 3 [ 237.142704][ T6494] vivid-001: Standard Aspect Ratio: 4x3 [ 237.198741][ T6494] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 237.210272][ T6498] fido_id[6498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 237.234648][ T6494] vivid-001: DV Timings: 640x480p59 inactive [ 237.243271][ T6494] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 237.267642][ T6494] vivid-001: Maximum EDID Blocks: 2 [ 238.540277][ T6494] vivid-001: Limited RGB Range (16-235): false [ 238.554647][ T6512] block device autoloading is deprecated and will be removed. [ 238.666384][ T6494] vivid-001: Rx RGB Quantization Range: Automatic [ 238.713799][ T6494] vivid-001: Power Present: 0x00000001 [ 238.914774][ T6494] tpg source WxH: 640x360 (Y'CbCr) [ 238.919963][ T6494] tpg field: 1 [ 238.923443][ T6494] tpg crop: 640x360@0x0 [ 239.214439][ T6494] tpg compose: 640x360@0x0 [ 239.234220][ T6494] tpg colorspace: 8 [ 239.243266][ T6494] tpg transfer function: 0/0 [ 239.252144][ T6494] tpg Y'CbCr encoding: 0/0 [ 239.261581][ T6494] tpg quantization: 0/0 [ 239.269254][ T6494] tpg RGB range: 0/2 [ 239.273362][ T6494] vivid-001: ================== END STATUS ================== [ 239.963450][ T5796] Bluetooth: hci1: Frame reassembly failed (-84) [ 242.136572][ T6479] Bluetooth: hci1: command 0x1003 tx timeout [ 242.142704][ T4197] Bluetooth: hci1: sending frame failed (-49) [ 244.423577][ T2858] Bluetooth: hci1: command 0x1001 tx timeout [ 244.432482][ T4197] Bluetooth: hci1: sending frame failed (-49) [ 246.746861][ T23] Bluetooth: hci1: command 0x1009 tx timeout [ 250.815575][ T6644] dlm: dev_write: no op 0 0 [ 253.277685][ T6662] block nbd3: shutting down sockets [ 255.608633][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.615096][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.054601][ T4260] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 260.954583][ T4260] usb 1-1: Using ep0 maxpacket: 8 [ 261.074952][ T4260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.098473][ T4260] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 261.134535][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.330827][ T4260] usb 1-1: config 0 descriptor?? [ 261.596330][ T4260] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 261.827223][ T4260] usb 1-1: USB disconnect, device number 11 [ 263.461812][ T6772] process 'syz.0.655' launched './file1' with NULL argv: empty string added [ 267.400395][ T6801] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 267.411326][ T6803] IPVS: stopping master sync thread 6801 ... [ 267.474062][ T6793] block nbd4: shutting down sockets [ 270.004917][ T4260] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 270.004965][ T4292] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 270.464009][ T4292] usb 4-1: Using ep0 maxpacket: 16 [ 270.615489][ T6837] IPVS: stopping master sync thread 6839 ... [ 270.621740][ T6839] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 270.884898][ T4260] usb 6-1: device descriptor read/64, error -71 [ 270.891649][ T4292] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 271.595922][ T4292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.729927][ T4292] usb 4-1: Product: syz [ 271.734620][ T4292] usb 4-1: Manufacturer: syz [ 271.739252][ T4292] usb 4-1: SerialNumber: syz [ 271.747508][ T4292] usb 4-1: config 0 descriptor?? [ 272.774638][ T4292] dvb_usb_dtv5100: probe of 4-1:0.0 failed with error -110 [ 273.666933][ T4186] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 273.720671][ T4292] usb 4-1: USB disconnect, device number 15 [ 273.924589][ T4186] usb 5-1: Using ep0 maxpacket: 16 [ 274.044679][ T4186] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.139112][ T4186] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 274.156874][ T4186] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 274.176463][ T4186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.954878][ T4186] usb 5-1: config 0 descriptor?? [ 275.278189][ T6901] netlink: 'syz.3.694': attribute type 10 has an invalid length. [ 276.063766][ T2858] usb 5-1: USB disconnect, device number 16 [ 276.100628][ T6901] team0: Port device netdevsim0 added [ 276.144845][ T4260] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 276.374789][ T4260] usb 6-1: device descriptor read/64, error -71 [ 277.030048][ T4260] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 277.405418][ T4190] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 277.422528][ T4190] CPU: 0 PID: 4190 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 277.430127][ T4190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.440209][ T4190] Workqueue: hci4 hci_rx_work [ 277.444966][ T4190] Call Trace: [ 277.448263][ T4190] [ 277.451208][ T4190] dump_stack_lvl+0x168/0x230 [ 277.455953][ T4190] ? show_regs_print_info+0x20/0x20 [ 277.461189][ T4190] ? load_image+0x3b0/0x3b0 [ 277.465717][ T4190] sysfs_create_dir_ns+0x252/0x280 [ 277.470847][ T4190] ? __lock_acquire+0x7c60/0x7c60 [ 277.475880][ T4190] ? sysfs_warn_dup+0xa0/0xa0 [ 277.480601][ T4190] ? le_conn_complete_evt+0xcbc/0x1590 [ 277.486067][ T4190] ? hci_event_packet+0xe05/0x12f0 [ 277.491182][ T4190] ? process_one_work+0x863/0x1000 [ 277.496324][ T4190] ? do_raw_spin_unlock+0x11d/0x230 [ 277.501525][ T4190] kobject_add_internal+0x662/0xd00 [ 277.506731][ T4190] kobject_add+0x152/0x210 [ 277.511148][ T4190] ? kobject_init+0x1d0/0x1d0 [ 277.515826][ T4190] ? klist_children_get+0x50/0x50 [ 277.520854][ T4190] ? get_device_parent+0x121/0x3f0 [ 277.525970][ T4190] device_add+0x483/0xfb0 [ 277.530406][ T4190] hci_conn_add_sysfs+0xd1/0x1e0 [ 277.535353][ T4190] le_conn_complete_evt+0xcbc/0x1590 [ 277.540636][ T4190] ? asm_sysvec_call_function_single+0x16/0x20 [ 277.546808][ T4190] ? cs_le_create_conn+0x5e0/0x5e0 [ 277.551957][ T4190] ? __schedule+0x1464/0x4390 [ 277.556641][ T4190] ? __mutex_trylock_common+0x14f/0x250 [ 277.562199][ T4190] hci_le_meta_evt+0x289/0x3b80 [ 277.567064][ T4190] ? hci_event_packet+0x36d/0x12f0 [ 277.572179][ T4190] ? hci_event_packet+0x2e2/0x12f0 [ 277.577377][ T4190] ? __lock_acquire+0x7c60/0x7c60 [ 277.582401][ T4190] ? release_firmware_map_entry+0x190/0x190 [ 277.588293][ T4190] ? hci_remote_host_features_evt+0x280/0x280 [ 277.594360][ T4190] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 277.600031][ T4190] ? mutex_unlock+0x10/0x10 [ 277.604561][ T4190] ? lock_chain_count+0x20/0x20 [ 277.609505][ T4190] hci_event_packet+0xe05/0x12f0 [ 277.614449][ T4190] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 277.620092][ T4190] ? rcu_lock_release+0x20/0x20 [ 277.624974][ T4190] ? kasan_check_range+0x7b/0x290 [ 277.630007][ T4190] ? hci_send_to_monitor+0x9c/0x4a0 [ 277.635204][ T4190] hci_rx_work+0x255/0xa10 [ 277.639626][ T4190] process_one_work+0x863/0x1000 [ 277.644582][ T4190] ? worker_detach_from_pool+0x240/0x240 [ 277.650221][ T4190] ? lockdep_hardirqs_off+0x70/0x100 [ 277.655539][ T4190] ? _raw_spin_lock_irq+0xab/0xe0 [ 277.660598][ T4190] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 277.666062][ T4190] ? wq_worker_running+0x97/0x170 [ 277.671094][ T4190] worker_thread+0xaa8/0x12a0 [ 277.675803][ T4190] kthread+0x436/0x520 [ 277.679869][ T4190] ? rcu_lock_release+0x20/0x20 [ 277.684869][ T4190] ? kthread_blkcg+0xd0/0xd0 [ 277.689466][ T4190] ret_from_fork+0x1f/0x30 [ 277.693905][ T4190] [ 277.696987][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.815372][ T4190] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 277.831647][ T4190] Bluetooth: hci4: failed to register connection device [ 278.733504][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 278.770183][ T23] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 279.094863][ T4260] usb usb6-port1: attempt power cycle [ 279.424634][ T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 279.514659][ T4260] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 279.644776][ T4260] usb 6-1: Using ep0 maxpacket: 32 [ 279.787650][ T4260] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 279.794696][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.818642][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.828520][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.844755][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.854802][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.872440][ T23] usb 4-1: config 0 descriptor?? [ 279.914826][ T4241] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 279.954878][ T4260] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 279.964617][ T4260] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 279.973302][ T4260] usb 6-1: Product: syz [ 279.979053][ T4260] usb 6-1: Manufacturer: syz [ 279.987914][ T4260] usb 6-1: SerialNumber: syz [ 279.996472][ T4260] usb 6-1: config 0 descriptor?? [ 280.014846][ T6940] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 280.124762][ T4241] usb 5-1: device descriptor read/64, error -71 [ 280.253545][ T6940] udc-core: couldn't find an available UDC or it's busy [ 280.261025][ T4260] Bluetooth: hci4: command 0x2016 tx timeout [ 280.274822][ T6940] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 280.346931][ T23] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 280.368339][ T23] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 280.403802][ T4260] usb 6-1: USB disconnect, device number 8 [ 280.424690][ T4241] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 280.644745][ T4241] usb 5-1: device descriptor read/64, error -71 [ 280.777053][ T4241] usb usb5-port1: attempt power cycle [ 281.184658][ T4241] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 281.904826][ T4241] usb 5-1: device descriptor read/8, error -71 [ 282.330412][ T4186] usb 4-1: USB disconnect, device number 16 [ 283.544031][ T4241] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 283.763584][ T4241] usb 5-1: device descriptor read/8, error -71 [ 283.895271][ T4241] usb usb5-port1: unable to enumerate USB device [ 284.705897][ T6966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.769386][ T7030] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.732'. [ 285.874817][ T4186] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 288.774677][ T4186] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 288.783767][ T4186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.099311][ T4186] usb 4-1: Product: syz [ 289.103577][ T4186] usb 4-1: Manufacturer: syz [ 289.267528][ T7080] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.749'. [ 289.595128][ T4186] usb 4-1: can't set config #1, error -71 [ 289.621842][ T1326] Bluetooth: hci5: command 0x0406 tx timeout [ 289.663187][ T4186] usb 4-1: USB disconnect, device number 17 [ 289.714639][ T1108] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 289.984664][ T1108] usb 1-1: device descriptor read/64, error -71 [ 290.154635][ T1326] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 290.285719][ T1108] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 290.301212][ T7094] input: syz1 as /devices/virtual/input/input9 [ 290.425742][ T1326] usb 5-1: Using ep0 maxpacket: 32 [ 290.484998][ T1108] usb 1-1: device descriptor read/64, error -71 [ 290.554768][ T1326] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 290.571928][ T1326] usb 5-1: config 0 has no interface number 0 [ 290.615625][ T1108] usb usb1-port1: attempt power cycle [ 290.795028][ T1326] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 290.810976][ T1326] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 290.819513][ T1326] usb 5-1: Product: syz [ 291.584051][ T1326] usb 5-1: Manufacturer: syz [ 291.610721][ T1326] usb 5-1: config 0 descriptor?? [ 292.263771][ T7110] udc-core: couldn't find an available UDC or it's busy [ 292.363579][ T7110] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 292.855644][ T1108] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 292.967061][ T7121] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.761'. [ 293.083555][ T7082] loop4: detected capacity change from 0 to 8192 [ 293.711223][ T23] usb 5-1: USB disconnect, device number 21 [ 293.724738][ T1108] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 294.354714][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 294.474752][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.654684][ T1108] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 294.736155][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.134851][ T1108] usb 1-1: Product: syz [ 296.148529][ T1108] usb 1-1: Manufacturer: syz [ 296.153205][ T1108] usb 1-1: SerialNumber: syz [ 296.555998][ T1108] usb 1-1: config 0 descriptor?? [ 296.585424][ T1108] usb 1-1: can't set config #0, error -71 [ 296.606891][ T1108] usb 1-1: USB disconnect, device number 15 [ 297.605746][ T6977] [ 297.608103][ T6977] ====================================================== [ 297.615118][ T6977] WARNING: possible circular locking dependency detected [ 297.622164][ T6977] syzkaller #0 Not tainted [ 297.626613][ T6977] ------------------------------------------------------ [ 297.633618][ T6977] udevd/6977 is trying to acquire lock: [ 297.639150][ T6977] ffff8880232bf938 ((wq_completion)loop4){+.+.}-{0:0}, at: flush_workqueue+0x126/0x1380 [ 297.649001][ T6977] [ 297.649001][ T6977] but task is already holding lock: [ 297.656531][ T6977] ffff888020282468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 297.665360][ T6977] [ 297.665360][ T6977] which lock already depends on the new lock. [ 297.665360][ T6977] [ 297.675910][ T6977] [ 297.675910][ T6977] the existing dependency chain (in reverse order) is: [ 297.684931][ T6977] [ 297.684931][ T6977] -> #7 (&lo->lo_mutex){+.+.}-{3:3}: [ 297.692406][ T6977] __mutex_lock_common+0x1eb/0x2390 [ 297.698158][ T6977] mutex_lock_killable_nested+0x17/0x20 [ 297.704225][ T6977] lo_open+0x6a/0x100 [ 297.708722][ T6977] blkdev_get_whole+0x90/0x390 [ 297.714016][ T6977] blkdev_get_by_dev+0x2d0/0xa60 [ 297.719471][ T6977] blkdev_open+0x12d/0x2c0 [ 297.724408][ T6977] do_dentry_open+0x7ff/0xf80 [ 297.729625][ T6977] path_openat+0x2682/0x2f30 [ 297.734748][ T6977] do_filp_open+0x1b3/0x3e0 [ 297.739771][ T6977] do_sys_openat2+0x142/0x4a0 [ 297.744968][ T6977] __x64_sys_openat+0x135/0x160 [ 297.750351][ T6977] do_syscall_64+0x4c/0xa0 [ 297.755301][ T6977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.761708][ T6977] [ 297.761708][ T6977] -> #6 (&disk->open_mutex){+.+.}-{3:3}: [ 297.769520][ T6977] __mutex_lock_common+0x1eb/0x2390 [ 297.775252][ T6977] mutex_lock_nested+0x17/0x20 [ 297.780531][ T6977] blkdev_get_by_dev+0x157/0xa60 [ 297.785993][ T6977] swsusp_check+0x9b/0x2a0 [ 297.790923][ T6977] software_resume+0xc6/0x3b0 [ 297.796117][ T6977] resume_store+0xe4/0x130 [ 297.801090][ T6977] kernfs_fop_write_iter+0x379/0x4c0 [ 297.806916][ T6977] vfs_write+0x712/0xd00 [ 297.811687][ T6977] ksys_write+0x14d/0x250 [ 297.816531][ T6977] do_syscall_64+0x4c/0xa0 [ 297.821488][ T6977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.827924][ T6977] [ 297.827924][ T6977] -> #5 (system_transition_mutex/1){+.+.}-{3:3}: [ 297.836463][ T6977] __mutex_lock_common+0x1eb/0x2390 [ 297.842211][ T6977] mutex_lock_nested+0x17/0x20 [ 297.847517][ T6977] software_resume+0x7c/0x3b0 [ 297.852719][ T6977] resume_store+0xe4/0x130 [ 297.857680][ T6977] kernfs_fop_write_iter+0x379/0x4c0 [ 297.863480][ T6977] vfs_write+0x712/0xd00 [ 297.868286][ T6977] ksys_write+0x14d/0x250 [ 297.873128][ T6977] do_syscall_64+0x4c/0xa0 [ 297.878071][ T6977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.884523][ T6977] [ 297.884523][ T6977] -> #4 (&of->mutex){+.+.}-{3:3}: [ 297.891732][ T6977] __mutex_lock_common+0x1eb/0x2390 [ 297.897488][ T6977] mutex_lock_nested+0x17/0x20 [ 297.902771][ T6977] kernfs_seq_start+0x51/0x3c0 [ 297.908057][ T6977] seq_read_iter+0x3c4/0xd50 [ 297.913172][ T6977] vfs_read+0x725/0xcf0 [ 297.917849][ T6977] ksys_read+0x14d/0x250 [ 297.922617][ T6977] do_syscall_64+0x4c/0xa0 [ 297.927553][ T6977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.933976][ T6977] [ 297.933976][ T6977] -> #3 (&p->lock){+.+.}-{3:3}: [ 297.941033][ T6977] __mutex_lock_common+0x1eb/0x2390 [ 297.946836][ T6977] mutex_lock_nested+0x17/0x20 [ 297.952119][ T6977] seq_read_iter+0xad/0xd50 [ 297.957139][ T6977] generic_file_splice_read+0x3a2/0x590 [ 297.963212][ T6977] splice_direct_to_actor+0x413/0xb50 [ 297.969186][ T6977] do_splice_direct+0x1b9/0x2c0 [ 297.974554][ T6977] do_sendfile+0x5d5/0xec0 [ 297.979491][ T6977] __se_sys_sendfile64+0x13b/0x190 [ 297.985145][ T6977] do_syscall_64+0x4c/0xa0 [ 297.990074][ T6977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.996498][ T6977] [ 297.996498][ T6977] -> #2 (sb_writers#3){.+.+}-{0:0}: [ 298.003876][ T6977] lo_write_bvec+0x193/0x770 [ 298.009083][ T6977] loop_process_work+0x1d62/0x2480 [ 298.014745][ T6977] process_one_work+0x863/0x1000 [ 298.020227][ T6977] worker_thread+0xaa8/0x12a0 [ 298.025431][ T6977] kthread+0x436/0x520 [ 298.030044][ T6977] ret_from_fork+0x1f/0x30 [ 298.035004][ T6977] [ 298.035004][ T6977] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 298.044126][ T6977] process_one_work+0x7bf/0x1000 [ 298.049686][ T6977] worker_thread+0xaa8/0x12a0 [ 298.054891][ T6977] kthread+0x436/0x520 [ 298.059494][ T6977] ret_from_fork+0x1f/0x30 [ 298.064460][ T6977] [ 298.064460][ T6977] -> #0 ((wq_completion)loop4){+.+.}-{0:0}: [ 298.072549][ T6977] __lock_acquire+0x2c33/0x7c60 [ 298.077919][ T6977] lock_acquire+0x197/0x3f0 [ 298.082939][ T6977] flush_workqueue+0x142/0x1380 [ 298.088411][ T6977] drain_workqueue+0xcf/0x380 [ 298.093602][ T6977] destroy_workqueue+0x7b/0xb20 [ 298.098967][ T6977] __loop_clr_fd+0x234/0xb90 [ 298.104163][ T6977] blkdev_put+0x53f/0x7d0 [ 298.109006][ T6977] blkdev_close+0x76/0xa0 [ 298.113845][ T6977] __fput+0x234/0x930 [ 298.118340][ T6977] task_work_run+0x125/0x1a0 [ 298.123447][ T6977] exit_to_user_mode_loop+0x10f/0x130 [ 298.129342][ T6977] exit_to_user_mode_prepare+0xb1/0x140 [ 298.135405][ T6977] syscall_exit_to_user_mode+0x16/0x40 [ 298.141375][ T6977] do_syscall_64+0x58/0xa0 [ 298.146310][ T6977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.152717][ T6977] [ 298.152717][ T6977] other info that might help us debug this: [ 298.152717][ T6977] [ 298.162936][ T6977] Chain exists of: [ 298.162936][ T6977] (wq_completion)loop4 --> &disk->open_mutex --> &lo->lo_mutex [ 298.162936][ T6977] [ 298.176393][ T6977] Possible unsafe locking scenario: [ 298.176393][ T6977] [ 298.183828][ T6977] CPU0 CPU1 [ 298.189182][ T6977] ---- ---- [ 298.194535][ T6977] lock(&lo->lo_mutex); [ 298.198765][ T6977] lock(&disk->open_mutex); [ 298.205863][ T6977] lock(&lo->lo_mutex); [ 298.212609][ T6977] lock((wq_completion)loop4); [ 298.217447][ T6977] [ 298.217447][ T6977] *** DEADLOCK *** [ 298.217447][ T6977] [ 298.225599][ T6977] 2 locks held by udevd/6977: [ 298.230267][ T6977] #0: ffff888020122118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 298.239566][ T6977] #1: ffff888020282468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 298.248775][ T6977] [ 298.248775][ T6977] stack backtrace: [ 298.254655][ T6977] CPU: 0 PID: 6977 Comm: udevd Not tainted syzkaller #0 [ 298.261583][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.271626][ T6977] Call Trace: [ 298.274897][ T6977] [ 298.277821][ T6977] dump_stack_lvl+0x168/0x230 [ 298.282583][ T6977] ? load_image+0x3b0/0x3b0 [ 298.287092][ T6977] ? show_regs_print_info+0x20/0x20 [ 298.292306][ T6977] ? print_circular_bug+0x12b/0x1a0 [ 298.297497][ T6977] check_noncircular+0x274/0x310 [ 298.302429][ T6977] ? add_chain_block+0x940/0x940 [ 298.307373][ T6977] ? lockdep_lock+0xdc/0x1e0 [ 298.311958][ T6977] ? mark_lock+0x94/0x320 [ 298.316280][ T6977] __lock_acquire+0x2c33/0x7c60 [ 298.321130][ T6977] ? __lock_acquire+0x13ad/0x7c60 [ 298.326164][ T6977] ? verify_lock_unused+0x140/0x140 [ 298.331374][ T6977] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 298.337348][ T6977] ? verify_lock_unused+0x140/0x140 [ 298.342544][ T6977] ? verify_lock_unused+0x140/0x140 [ 298.347737][ T6977] ? memset+0x1e/0x40 [ 298.351716][ T6977] lock_acquire+0x197/0x3f0 [ 298.356210][ T6977] ? flush_workqueue+0x126/0x1380 [ 298.361229][ T6977] ? finish_task_switch+0x1e4/0x640 [ 298.366420][ T6977] ? __mutex_trylock_common+0x14f/0x250 [ 298.371958][ T6977] ? read_lock_is_recursive+0x10/0x10 [ 298.377325][ T6977] ? __init_swait_queue_head+0xa5/0x150 [ 298.382960][ T6977] flush_workqueue+0x142/0x1380 [ 298.387801][ T6977] ? flush_workqueue+0x126/0x1380 [ 298.392820][ T6977] ? __lock_acquire+0x7c60/0x7c60 [ 298.397931][ T6977] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 298.403322][ T6977] ? rcu_work_rcufn+0x110/0x110 [ 298.408208][ T6977] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 298.413949][ T6977] ? finish_wait+0xc0/0x1d0 [ 298.418447][ T6977] drain_workqueue+0xcf/0x380 [ 298.423119][ T6977] destroy_workqueue+0x7b/0xb20 [ 298.427966][ T6977] __loop_clr_fd+0x234/0xb90 [ 298.432555][ T6977] ? lo_release+0x172/0x1f0 [ 298.437072][ T6977] ? lo_open+0x100/0x100 [ 298.441309][ T6977] blkdev_put+0x53f/0x7d0 [ 298.445641][ T6977] blkdev_close+0x76/0xa0 [ 298.449978][ T6977] ? blkdev_open+0x2c0/0x2c0 [ 298.454574][ T6977] __fput+0x234/0x930 [ 298.458568][ T6977] task_work_run+0x125/0x1a0 [ 298.463160][ T6977] exit_to_user_mode_loop+0x10f/0x130 [ 298.468545][ T6977] exit_to_user_mode_prepare+0xb1/0x140 [ 298.474114][ T6977] syscall_exit_to_user_mode+0x16/0x40 [ 298.479576][ T6977] do_syscall_64+0x58/0xa0 [ 298.483986][ T6977] ? clear_bhb_loop+0x30/0x80 [ 298.488674][ T6977] ? clear_bhb_loop+0x30/0x80 [ 298.493346][ T6977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.499265][ T6977] RIP: 0033:0x7f59eaae0407 [ 298.503674][ T6977] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 298.523364][ T6977] RSP: 002b:00007ffc4c3dc350 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 298.531787][ T6977] RAX: 0000000000000000 RBX: 00007f59ea9f2880 RCX: 00007f59eaae0407 [ 298.539749][ T6977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 298.547709][ T6977] RBP: 00007f59ea9f26e8 R08: 0000000000000000 R09: 0000000000000000 [ 298.555686][ T6977] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 298.563645][ T6977] R13: 0000559a0c114410 R14: 0000000000000008 R15: 0000559a0c1a7ff0 [ 298.571699][ T6977] [ 298.574792][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.274559][ T4260] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 299.474542][ T4260] usb 4-1: device descriptor read/64, error -71 [ 299.744556][ T4260] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 299.944603][ T4260] usb 4-1: device descriptor read/64, error -71 [ 300.116594][ T4260] usb usb4-port1: attempt power cycle