last executing test programs: 4m59.260733287s ago: executing program 1 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xf5e5, 0x6, &(0x7f00000001c0)=""/6, 0x41100, 0x20, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x2, 0x9, 0x5}, 0x10, 0x2303a, 0xffffffffffffffff, 0x6, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x4, 0xb, 0xb}, {0x2, 0x2, 0x4, 0xb}, {0x1, 0x5, 0xe, 0x3}, {0x1, 0x4, 0xb, 0x4}, {0x1, 0x3, 0x10, 0x9}, {0x0, 0x2, 0x10, 0x7}], 0x10, 0x4327032d}, 0x94) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={0xffffffffffffffff}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@setlink={0x60, 0x13, 0x5, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5}, @IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xb}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}]}]}, 0x60}}, 0x8084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3e8]}, 0x8) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') read$FUSE(r8, &(0x7f0000004100)={0x2020}, 0x2020) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) 4m59.061778571s ago: executing program 1 (id=82): syz_usb_connect$cdc_ecm(0x0, 0x64, &(0x7f0000000080)=ANY=[], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 4m55.33004377s ago: executing program 1 (id=92): syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x102) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x4, 0x0, @remote, @private=0x10000}}}}) 4m53.431035592s ago: executing program 1 (id=99): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000580)={0x0, 0x30, 0x14, "a354f2b602e7c719e147e5a6520bdd24c2426fe0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m50.096312032s ago: executing program 1 (id=109): syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x102) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x4, 0x0, @remote, @private=0x10000}}}}) 4m48.307238234s ago: executing program 1 (id=115): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = getpgid(r0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 4m31.577546567s ago: executing program 32 (id=115): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = getpgid(r0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 12.273449s ago: executing program 5 (id=898): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x92, 0x0, 0x1, 0x10}, 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 11.120196903s ago: executing program 0 (id=899): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) io_setup(0x9, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_async', 0x22041, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='\x00', 0x1, 0x0, 0x0, 0x2}]) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 10.499761927s ago: executing program 4 (id=901): read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000400)=ANY=[@ANYBLOB='umask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX=0xee00, @ANYBLOB="2c646f74732c636865636b3d7374726963742c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c64656275672c6e6f646f74732c6e6f646f74732c6e6f646f74732c646f7473061046b2c6a16376e1882c666c7573682c646f74732c6e66732c646f74732c73686f77657865632c646f74732c6e6f646f74732c636865636b"], 0x1, 0x1f5, &(0x7f0000000600)="$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") mmap(&(0x7f0000923000/0x2000)=nil, 0x2000, 0x0, 0x11012, 0xffffffffffffffff, 0x66d95000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x701, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 10.437093397s ago: executing program 5 (id=902): pipe(&(0x7f0000000400)) socket$inet6(0x10, 0x3, 0x9) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x2, 0x0, 0xfbfffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0xf, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) 10.331838908s ago: executing program 0 (id=903): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000008000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x23) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000040)={r1, 0xea}, 0x8) 10.254083505s ago: executing program 0 (id=906): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.303757533s ago: executing program 3 (id=908): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xf5e5, 0x6, &(0x7f00000001c0)=""/6, 0x41100, 0x20, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x2, 0x9, 0x5}, 0x10, 0x2303a, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0xffffffffffffffff], 0x0, 0x10, 0x4327032d}, 0x94) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={0xffffffffffffffff}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@setlink={0x60, 0x13, 0x5, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5}, @IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xb}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}]}]}, 0x60}}, 0x8084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r8, &(0x7f0000004100)={0x2020}, 0x2020) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) 9.2904954s ago: executing program 5 (id=910): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000780)={0x30, 0x5, 0x0, {0x0, 0x0, 0x1, 0x6}}, 0x30) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) 9.242114802s ago: executing program 0 (id=911): add_key$user(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) 7.081978622s ago: executing program 5 (id=912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 7.053393717s ago: executing program 4 (id=913): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) io_setup(0x9, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_async', 0x22041, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='\x00', 0x1, 0x0, 0x0, 0x2}]) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 7.046651166s ago: executing program 2 (id=914): syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) rename(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e61, 0x2, @loopback, 0x7fffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 5.150512522s ago: executing program 3 (id=915): r0 = memfd_create(&(0x7f0000000040)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.956781798s ago: executing program 5 (id=916): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xf5e5, 0x6, &(0x7f00000001c0)=""/6, 0x41100, 0x20, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x2, 0x9, 0x5}, 0x10, 0x2303a, 0xffffffffffffffff, 0x6, &(0x7f0000000280), &(0x7f00000002c0)=[{0x1, 0x4, 0xb, 0xb}, {0x2, 0x2, 0x4, 0xb}, {0x1, 0x5, 0xe, 0x3}, {0x1, 0x4, 0xb, 0x4}, {0x1, 0x3, 0x10, 0x9}, {0x0, 0x2, 0x10, 0x7}], 0x10, 0x4327032d}, 0x94) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={0xffffffffffffffff}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@setlink={0x60, 0x13, 0x5, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5}, @IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xb}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}]}]}, 0x60}}, 0x8084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3e8]}, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000003580)) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) 4.712659966s ago: executing program 2 (id=917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, r1, 0x301, 0xfffffffd, 0xffffffff, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x8000) 4.680801211s ago: executing program 2 (id=918): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2070) 4.651050596s ago: executing program 4 (id=919): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 4.502944651s ago: executing program 2 (id=920): syz_emit_ethernet(0x76, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c376f5", 0x40, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, @local, {[], @param_prob={0x4, 0x1, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x400, 0x88, 0xff, @private2, @rand_addr=' \x01\x00', [@dstopts={0x3a}, @hopopts={0xc}]}}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r1, &(0x7f00000000c0)='.\x00', 0x0) 3.957578277s ago: executing program 3 (id=921): pipe(&(0x7f0000000400)) socket$inet6(0x10, 0x3, 0x9) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x2, 0x0, 0xfbfffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0xf, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) 3.91644122s ago: executing program 0 (id=922): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000003e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48881}, 0xc0) 3.161888861s ago: executing program 2 (id=923): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002040)={0xaa, 0x22c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x800000, 0x2}) unshare(0x22020600) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc00000021000100ffffffff00000000fc020000000000000000000000000001fe80000000000000008000000000003a00000000000000000a0000202e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000000000000000000013c04"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_usbip_server_init(0x1) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x15}, 0x6, r7}) 3.161673321s ago: executing program 4 (id=924): read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000400)=ANY=[@ANYBLOB='umask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX=0xee00, @ANYBLOB="2c646f74732c636865636b3d7374726963742c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c64656275672c6e6f646f74732c6e6f646f74732c6e6f646f74732c646f7473061046b2c6a16376e1882c666c7573682c646f74732c6e66732c646f74732c73686f77657865632c646f74732c6e6f646f74732c636865636b"], 0x1, 0x1f5, &(0x7f0000000600)="$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") mmap(&(0x7f0000923000/0x2000)=nil, 0x2000, 0x0, 0x11012, 0xffffffffffffffff, 0x66d95000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x701, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 2.875290652s ago: executing program 3 (id=925): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000009c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d91564530794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9", 0xe0}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.566363309s ago: executing program 0 (id=926): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000740)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 2.193953655s ago: executing program 3 (id=927): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0xffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14, 0x80000) bind$packet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYRESDEC], 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) shutdown(r5, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x5c, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10d}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x5, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x14, 0x4, @private0}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) 2.168367161s ago: executing program 5 (id=937): syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0xd, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xb, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x8, 0x6, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x240, 0xe, 0x4, 0x3}}]}}}]}}]}}, 0x0) syz_usb_connect(0x5, 0x27, 0x0, 0x0) 1.332782868s ago: executing program 4 (id=928): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x4000401, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffe, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x6, 0x0, 0xfffffffc, 0x0, 0x1, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 369.253863ms ago: executing program 3 (id=929): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) io_setup(0x9, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_async', 0x22041, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='\x00', 0x1, 0x0, 0x0, 0x2}]) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b00010062726964676500004800028005001900020000"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2.13754ms ago: executing program 4 (id=930): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r3, &(0x7f0000001f00)=""/4111, 0x100f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xea5bc50b6199d77e) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 0s ago: executing program 2 (id=931): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x4e681, 0x0) kernel console output (not intermixed with test programs): (NETDEV_CHANGE): hsr0: link becomes ready [ 61.009907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.033616][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.045198][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.053621][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 61.066062][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.067647][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 61.080361][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 61.098415][ T4192] device veth0_vlan entered promiscuous mode [ 61.106162][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 61.112267][ T4229] Bluetooth: hci1: command 0x041b tx timeout [ 61.129343][ T4192] device veth1_vlan entered promiscuous mode [ 61.139915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.150396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.159412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.168163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.177453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.186816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.194697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.223734][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.241507][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.264391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.272447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.281352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.291647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.306140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.318027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.327843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.337535][ T4193] device veth0_vlan entered promiscuous mode [ 61.363882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.379127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.388693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.402276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.411300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.425634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.437263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.451671][ T4193] device veth1_vlan entered promiscuous mode [ 61.466549][ T4186] device veth0_vlan entered promiscuous mode [ 61.475519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.484658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.495431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.503181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.515562][ T4192] device veth0_macvtap entered promiscuous mode [ 61.541335][ T4192] device veth1_macvtap entered promiscuous mode [ 61.552428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.561991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.575546][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.598402][ T4186] device veth1_vlan entered promiscuous mode [ 61.616730][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.636861][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.645786][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.654526][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.663670][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.682280][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.692637][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.704159][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.712864][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.721925][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.739171][ T4186] device veth0_macvtap entered promiscuous mode [ 61.747591][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.755328][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.762764][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.771329][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.780288][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.790339][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.798991][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.818307][ T4186] device veth1_macvtap entered promiscuous mode [ 61.826088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.837429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.847022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.857375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.867010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.878705][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.888179][ T4193] device veth0_macvtap entered promiscuous mode [ 61.925536][ T4193] device veth1_macvtap entered promiscuous mode [ 61.940521][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.949542][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.958046][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.966758][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.977592][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.985827][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.003300][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.015115][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.027581][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.041068][ T4185] device veth0_vlan entered promiscuous mode [ 62.054684][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.064743][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.095853][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.118498][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.130350][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.149605][ T4185] device veth1_vlan entered promiscuous mode [ 62.178981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.187228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.200934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.212533][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.230638][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.239778][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.257393][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.273423][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.283952][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.294742][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.306101][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.317472][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.328566][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.340294][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.350366][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.360846][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.372861][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.392384][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.400956][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.410852][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.421274][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.434080][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.474559][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.477278][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.482627][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.495844][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.517773][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.531715][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.541119][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.551467][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.562606][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.573408][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.581329][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.592184][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.624403][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.633488][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.642318][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.653665][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.661899][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.671439][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.682004][ T4185] device veth0_macvtap entered promiscuous mode [ 62.705272][ T4184] device veth0_vlan entered promiscuous mode [ 62.715563][ T4185] device veth1_macvtap entered promiscuous mode [ 62.784426][ T4184] device veth1_vlan entered promiscuous mode [ 62.815546][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.827385][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.837492][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.847977][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.858385][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.871194][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.882269][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.928466][ T304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.954552][ T304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.978501][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.991033][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.017406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.047593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.069279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.082514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.091229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.099290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.108324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.117057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.126087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.135486][ T4263] Bluetooth: hci2: command 0x040f tx timeout [ 63.135880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.141738][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 63.155612][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 63.163321][ T4263] Bluetooth: hci4: command 0x040f tx timeout [ 63.171855][ T4184] device veth0_macvtap entered promiscuous mode [ 63.181881][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.186526][ T4265] syz.3.4 (4265) used greatest stack depth: 21104 bytes left [ 63.200403][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.215116][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.228979][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.240883][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.255379][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.270050][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.292126][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.306793][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.318696][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.328322][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 63.339203][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.357018][ T4184] device veth1_macvtap entered promiscuous mode [ 63.366346][ T304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.381844][ T304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.488742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.513842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.536483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.562238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.571332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.922387][ T4274] loop3: detected capacity change from 0 to 1024 [ 64.020533][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.130265][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.271800][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.449422][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.570760][ T4280] loop0: detected capacity change from 0 to 256 [ 64.625970][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.727732][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.820993][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.852911][ C0] sched: RT throttling activated [ 64.871777][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.884256][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.885243][ T4274] ======================================================= [ 64.885243][ T4274] WARNING: The mand mount option has been deprecated and [ 64.885243][ T4274] and is ignored by this kernel. Remove the mand [ 64.885243][ T4274] option from the mount to silence this warning. [ 64.885243][ T4274] ======================================================= [ 65.108459][ T304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.287801][ T304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.327137][ T4274] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.262659][ T26] audit: type=1800 audit(1772570081.398:2): pid=4274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 66.383435][ T304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.391556][ T304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.423722][ T304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.431553][ T304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.573232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.582076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.590721][ T4263] Bluetooth: hci4: command 0x0419 tx timeout [ 66.597409][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 66.603537][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 66.609827][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 66.617550][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 66.627557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.635422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.643810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.660777][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.677080][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.691033][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.708433][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.726924][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.740140][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.756399][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.768317][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.784727][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.829755][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.905810][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.931074][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.939837][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.955593][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.967829][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.534613][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.544742][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.552573][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.583440][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.759168][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.813095][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.714113][ T4308] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5'. [ 68.762595][ T4313] loop3: detected capacity change from 0 to 256 [ 68.775577][ T4311] loop1: detected capacity change from 0 to 256 [ 68.818273][ T4311] exfat: Bad value for 'umask' [ 68.991641][ T4313] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 69.003333][ T4313] FAT-fs (loop3): Filesystem has been set read-only [ 69.010112][ T4313] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 69.020250][ T4313] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 69.031048][ T26] audit: type=1800 audit(1772570084.168:3): pid=4313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.12" name="file1" dev="loop3" ino=1048590 res=0 errno=0 [ 69.257384][ T4313] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 70.865441][ T4229] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.113042][ T4229] usb 1-1: Using ep0 maxpacket: 16 [ 71.283140][ T4229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 71.373168][ T4229] usb 1-1: config 159 has an invalid interface number: 195 but max is 0 [ 71.381866][ T4229] usb 1-1: config 159 has no interface number 0 [ 71.433014][ T4229] usb 1-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.487762][ T4229] usb 1-1: config 159 interface 195 has no altsetting 0 [ 71.861910][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.873026][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.943007][ T4229] usb 1-1: string descriptor 0 read error: -71 [ 71.949377][ T4229] usb 1-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 72.030662][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.173538][ T4229] usb 1-1: can't set config #159, error -71 [ 72.203061][ T4263] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.283513][ T4229] usb 1-1: USB disconnect, device number 2 [ 72.473076][ T4263] usb 3-1: Using ep0 maxpacket: 32 [ 72.527577][ T4332] loop1: detected capacity change from 0 to 40427 [ 72.594964][ T4263] usb 3-1: config 2 has an invalid interface number: 45 but max is 0 [ 72.611249][ T4263] usb 3-1: config 2 has no interface number 0 [ 72.674466][ T4263] usb 3-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 72.720410][ T4263] usb 3-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 72.906078][ T4263] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 72.915701][ T4263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.938990][ T4263] usb 3-1: Product: syz [ 72.959625][ T4263] usb 3-1: Manufacturer: syz [ 72.977951][ T4263] usb 3-1: SerialNumber: syz [ 73.013935][ T4334] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 73.034863][ T4263] kobil_sct 3-1:2.45: KOBIL USB smart card terminal converter detected [ 73.058715][ T4263] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 73.224847][ T4352] loop0: detected capacity change from 0 to 40427 [ 73.242268][ T4263] usb 3-1: USB disconnect, device number 2 [ 73.265045][ T4263] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 73.299273][ T4263] kobil_sct 3-1:2.45: device disconnected [ 73.380906][ T4331] syz.1.16 (4331) used greatest stack depth: 21072 bytes left [ 76.114128][ T4393] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.273021][ T4402] 9pnet_virtio: no channels available for device syz [ 78.192974][ T7] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 78.563232][ T7] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 78.575734][ T7] usb 1-1: config 0 has no interface number 0 [ 78.592071][ T7] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 78.622207][ T7] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 78.662172][ T4430] loop2: detected capacity change from 0 to 512 [ 78.668644][ T7] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 78.695843][ T7] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 78.733043][ T7] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 78.743240][ T4430] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 78.752288][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.766496][ T7] usb 1-1: config 0 descriptor?? [ 78.799038][ T4422] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.821319][ T4422] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.865597][ T4430] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nogrpid,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 78.885621][ T7] ldusb 1-1:0.55: Interrupt in endpoint not found [ 78.891413][ T4430] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.131880][ T4229] usb 1-1: USB disconnect, device number 3 [ 80.849074][ T4462] loop4: detected capacity change from 0 to 256 [ 81.885729][ T1336] cfg80211: failed to load regulatory.db [ 82.460767][ T4490] loop2: detected capacity change from 0 to 512 [ 82.559471][ T4490] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 82.671598][ T4490] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nogrpid,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 82.739290][ T4490] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.780746][ T4229] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.052949][ T4229] usb 5-1: device descriptor read/64, error -71 [ 84.172986][ T4263] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.174794][ T4515] loop1: detected capacity change from 0 to 256 [ 84.337788][ T4229] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.303026][ T4229] usb 5-1: device descriptor read/64, error -71 [ 85.381226][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 85.433986][ T4229] usb usb5-port1: attempt power cycle [ 85.543719][ T4263] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 85.571370][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.619118][ T4263] usb 1-1: Product: syz [ 85.645468][ T4263] usb 1-1: Manufacturer: syz [ 85.672164][ T4263] usb 1-1: SerialNumber: syz [ 85.749013][ T4263] usb 1-1: config 0 descriptor?? [ 85.829171][ T4263] hub 1-1:0.0: bad descriptor, ignoring hub [ 85.853097][ T4229] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.897956][ T4263] hub: probe of 1-1:0.0 failed with error -5 [ 86.084030][ T4263] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 86.143193][ T4229] usb 5-1: device descriptor read/8, error -71 [ 86.263856][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #41!!! [ 86.274984][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #01!!! [ 86.303145][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #2c0!!! [ 86.345114][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 86.354041][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 86.362931][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 86.371806][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 86.381098][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 86.390000][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 86.706979][ T4263] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 86.892692][ T4263] dib0700: firmware download failed at 7 with -22 [ 87.196128][ T4263] usb 1-1: USB disconnect, device number 4 [ 88.178717][ T4552] loop0: detected capacity change from 0 to 256 [ 88.232651][ T4554] loop3: detected capacity change from 0 to 512 [ 88.294386][ T4552] exfat: Bad value for 'umask' [ 88.299078][ T4554] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 88.514221][ T4554] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nogrpid,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 88.563788][ T4554] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.611237][ T4573] loop0: detected capacity change from 0 to 128 [ 88.631542][ T4573] EXT4-fs (loop0): Test dummy encryption mode enabled [ 88.827930][ T4573] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 88.844524][ T4573] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.315221][ T4578] 9pnet_virtio: no channels available for device syz [ 89.493006][ T4276] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.383347][ T4276] usb 2-1: device descriptor read/64, error -71 [ 90.666703][ T4276] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.766532][ T4590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 90.887555][ T4276] usb 2-1: device descriptor read/64, error -71 [ 91.013690][ T4276] usb usb2-port1: attempt power cycle [ 91.793806][ T4276] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.883115][ T4276] usb 2-1: device descriptor read/8, error -71 [ 94.244803][ T4635] netlink: 52 bytes leftover after parsing attributes in process `syz.0.98'. [ 94.282410][ T4637] loop2: detected capacity change from 0 to 512 [ 94.290314][ T4635] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.298857][ T4635] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.365302][ T4637] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 94.423976][ T4637] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nogrpid,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 94.482517][ T4637] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.680792][ T4276] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.798436][ T4276] usb 2-1: Using ep0 maxpacket: 32 [ 94.937372][ T4276] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 94.945604][ T4276] usb 2-1: config 0 has no interface number 0 [ 94.968488][ T4276] usb 2-1: config 0 interface 184 has no altsetting 0 [ 95.022915][ T4227] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.166494][ T4276] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 95.183211][ T4276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.202317][ T4276] usb 2-1: Product: syz [ 95.213099][ T4276] usb 2-1: Manufacturer: syz [ 95.223871][ T4276] usb 2-1: SerialNumber: syz [ 95.226634][ T4227] usb 1-1: device descriptor read/64, error -71 [ 95.244046][ T4276] usb 2-1: config 0 descriptor?? [ 95.316454][ T4276] smsc75xx v1.0.0 [ 95.536033][ T4227] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 95.739371][ T4227] usb 1-1: device descriptor read/64, error -71 [ 95.899097][ T4656] loop4: detected capacity change from 0 to 512 [ 95.987949][ T4656] EXT4-fs (loop4): Ignoring removed orlov option [ 96.007710][ T4276] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 96.154827][ T4656] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,,errors=continue. Quota mode: writeback. [ 96.167033][ T4656] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.235312][ T4276] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 96.909444][ T4276] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 96.926319][ T4276] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 96.952260][ T4276] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 96.976996][ T4276] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 97.021997][ T4276] usb 2-1: USB disconnect, device number 5 [ 97.264044][ T4227] usb usb1-port1: attempt power cycle [ 98.016328][ T4227] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 98.145605][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.272968][ T4227] usb 1-1: device not accepting address 7, error -71 [ 98.798051][ T7] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 98.798366][ T7] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.798474][ T7] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 99.011454][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.011635][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.011794][ T7] usb 3-1: Product: syz [ 99.011889][ T7] usb 3-1: Manufacturer: щ [ 99.012052][ T7] usb 3-1: SerialNumber: syz [ 99.598928][ T7] cdc_ncm 3-1:1.0: bind() failure [ 99.615367][ T7] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 99.633273][ T7] cdc_ncm 3-1:1.1: bind() failure [ 99.667476][ T7] usb 3-1: USB disconnect, device number 3 [ 102.298896][ T4709] 9pnet_virtio: no channels available for device syz [ 102.662899][ T4714] loop2: detected capacity change from 0 to 512 [ 104.856534][ T4714] EXT4-fs (loop2): Ignoring removed orlov option [ 105.029724][ T4585] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.286265][ T4585] usb 4-1: device descriptor read/64, error -71 [ 105.392992][ T4714] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 105.588262][ T4585] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.801778][ T4585] usb 4-1: device descriptor read/64, error -71 [ 105.940006][ T4585] usb usb4-port1: attempt power cycle [ 106.468607][ T4585] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.022739][ T4585] usb 4-1: device descriptor read/8, error -71 [ 108.385666][ T4743] loop0: detected capacity change from 0 to 256 [ 108.418664][ T4748] netlink: 76 bytes leftover after parsing attributes in process `syz.4.134'. [ 108.427677][ T4748] netlink: 52 bytes leftover after parsing attributes in process `syz.4.134'. [ 109.123838][ T4748] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.131244][ T4748] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.145746][ T4743] exfat: Bad value for 'umask' [ 109.659263][ T4743] loop0: detected capacity change from 0 to 128 [ 110.684593][ T4762] loop3: detected capacity change from 0 to 1024 [ 111.204544][ T4743] EXT4-fs (loop0): Test dummy encryption mode enabled [ 112.277660][ T4743] EXT4-fs: error -4 creating inode table initialization thread [ 112.285705][ T4743] EXT4-fs (loop0): mount failed [ 113.294064][ T4762] EXT4-fs: failed to create workqueue [ 113.299491][ T4762] EXT4-fs (loop3): mount failed [ 117.131822][ T4796] sctp: failed to load transform for md5: -2 [ 118.156908][ T4827] loop3: detected capacity change from 0 to 256 [ 118.228226][ T4827] exfat: Bad value for 'umask' [ 118.551667][ T4831] loop3: detected capacity change from 0 to 128 [ 118.739085][ T4831] EXT4-fs (loop3): Test dummy encryption mode enabled [ 118.982914][ T4831] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 118.999286][ T4831] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.480626][ T4822] chnl_net:caif_netlink_parms(): no params data found [ 120.378240][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 120.544629][ T4822] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.754313][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.800869][ T4822] device bridge_slave_0 entered promiscuous mode [ 120.820623][ T4822] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.827693][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.867468][ T4822] device bridge_slave_1 entered promiscuous mode [ 122.014477][ T4822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.416213][ T4865] vivid-004: disconnect [ 122.836015][ T4850] vivid-004: reconnect [ 122.852854][ T4229] Bluetooth: hci5: command 0x041b tx timeout [ 123.900662][ T4822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.108756][ T4876] vivid-001: disconnect [ 124.235580][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.625317][ T4866] vivid-001: reconnect [ 124.679249][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.734486][ T4822] team0: Port device team_slave_0 added [ 124.744200][ T4822] team0: Port device team_slave_1 added [ 124.762968][ T4822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.771555][ T4822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.797812][ T4822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.810141][ T4822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.820971][ T4822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.850748][ T4822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.939912][ T4888] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.042240][ T4263] Bluetooth: hci5: command 0x040f tx timeout [ 125.122885][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.638046][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.883870][ T4822] device hsr_slave_0 entered promiscuous mode [ 125.951098][ T4822] device hsr_slave_1 entered promiscuous mode [ 126.025635][ T4822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.033232][ T4822] Cannot create hsr debugfs directory [ 127.375370][ T4229] Bluetooth: hci5: command 0x0419 tx timeout [ 128.913870][ T4822] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.960831][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 129.035956][ T4928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.176'. [ 129.171850][ T4822] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.488717][ T4822] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.513503][ T4822] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.498989][ T4822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.301722][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.337803][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.257193][ T4822] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.198338][ T4965] ODEBUG: Out of memory. ODEBUG disabled [ 135.622770][ T4965] syz.4.185 (4965): drop_caches: 2 [ 135.685710][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.692037][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.155417][ T4972] loop3: detected capacity change from 0 to 1024 [ 140.882017][ T4978] netlink: 52 bytes leftover after parsing attributes in process `syz.2.188'. [ 140.897228][ T4978] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.904604][ T4978] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.588709][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.604456][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.639026][ T4236] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.646151][ T4236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.664463][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.682705][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.720150][ T4236] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.727242][ T4236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.767411][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.798965][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.836679][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.860489][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.903159][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.929442][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.959819][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.979855][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 142.009118][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.021297][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.061605][ T1108] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 142.905331][ T4822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.937756][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.946432][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.955493][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.810009][ T1108] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 143.820316][ T1108] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.833597][ T1108] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 143.842853][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.961452][ T1108] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 144.069909][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.106149][ T144] device hsr_slave_0 left promiscuous mode [ 145.125502][ T144] device hsr_slave_1 left promiscuous mode [ 145.160771][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.169117][ T4585] usb 3-1: USB disconnect, device number 4 [ 145.180666][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.189503][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.203362][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.211525][ T144] device bridge_slave_1 left promiscuous mode [ 145.227147][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.268308][ T144] device bridge_slave_0 left promiscuous mode [ 145.295326][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.363566][ T144] device veth1_macvtap left promiscuous mode [ 145.418133][ T144] device veth0_macvtap left promiscuous mode [ 145.432527][ T5045] Zero length message leads to an empty skb [ 145.478109][ T5045] netlink: 168 bytes leftover after parsing attributes in process `syz.4.199'. [ 145.530693][ T144] device veth1_vlan left promiscuous mode [ 145.585360][ T144] device veth0_vlan left promiscuous mode [ 146.561251][ T5059] loop4: detected capacity change from 0 to 1024 [ 146.849174][ T5059] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.262920][ T26] audit: type=1800 audit(1772570158.895:4): pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.201" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 147.454622][ T144] team0 (unregistering): Port device team_slave_1 removed [ 147.505795][ T144] team0 (unregistering): Port device team_slave_0 removed [ 147.526974][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.554066][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.608452][ T144] bond0 (unregistering): Released all slaves [ 147.708508][ T4822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.255993][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.302446][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.352923][ T5068] netlink: 76 bytes leftover after parsing attributes in process `syz.0.203'. [ 148.405656][ T5068] netlink: 52 bytes leftover after parsing attributes in process `syz.0.203'. [ 148.584863][ T5082] binder: 5081:5082 ioctl c018620c 2000000000c0 returned -1 [ 149.541673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.562168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.620029][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.657964][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.676928][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.707968][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.728260][ T4822] device veth0_vlan entered promiscuous mode [ 149.750657][ T4822] device veth1_vlan entered promiscuous mode [ 149.769940][ T1108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.165586][ T1108] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 150.308529][ T1108] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.401327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.614726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.659627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.680241][ T1108] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.706413][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.740151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.852876][ T4822] device veth0_macvtap entered promiscuous mode [ 150.894085][ T4822] device veth1_macvtap entered promiscuous mode [ 150.920106][ T1108] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 150.950681][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.970309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.007892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.068791][ T5123] loop0: detected capacity change from 0 to 1024 [ 152.902568][ T5123] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.043718][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.054305][ T26] audit: type=1800 audit(1772570164.292:5): pid=5123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.215" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 153.146470][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.233330][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.288544][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.353250][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.407501][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.461304][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.520779][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.574364][ T4822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.599132][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.618069][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.627894][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.660883][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.670798][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.721733][ T23] usb 3-1: USB disconnect, device number 5 [ 153.742429][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.768947][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.814318][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.845534][ T4822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.866473][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.896688][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.950503][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.002755][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.066425][ T4822] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.123334][ T4822] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.198268][ T4822] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.231869][ T4822] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.254612][ T5143] crypto_alloc_aead failed rc=-2 [ 154.382386][ T5153] netlink: 76 bytes leftover after parsing attributes in process `syz.0.219'. [ 154.675220][ T5153] netlink: 52 bytes leftover after parsing attributes in process `syz.0.219'. [ 154.958071][ T4415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.991843][ T4415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.068800][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.236514][ T4415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.253724][ T4415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.276667][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.377679][ T5186] loop4: detected capacity change from 0 to 1024 [ 157.232447][ T5186] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.477459][ T26] audit: type=1800 audit(1772570168.445:6): pid=5186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.225" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 158.364753][ T4263] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 158.395220][ T5217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 158.656484][ T5227] netlink: 76 bytes leftover after parsing attributes in process `syz.0.233'. [ 158.981625][ T5227] netlink: 52 bytes leftover after parsing attributes in process `syz.0.233'. [ 159.139315][ T5238] loop2: detected capacity change from 0 to 256 [ 159.373816][ T5238] exfat: Bad value for 'umask' [ 159.468448][ T4263] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 159.480097][ T4263] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.493330][ T4263] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 159.502412][ T4263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.621588][ T4263] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 159.744537][ T5241] loop2: detected capacity change from 0 to 512 [ 159.868861][ T5241] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 159.876450][ T5241] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 159.936644][ T5241] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 159.944784][ T5241] System zones: 1-12 [ 160.048539][ T5253] loop4: detected capacity change from 0 to 1024 [ 160.106132][ T5241] EXT4-fs error (device loop2): ext4_iget_extra_inode:4566: inode #15: comm syz.2.237: corrupted in-inode xattr [ 160.136201][ T5241] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.237: couldn't read orphan inode 15 (err -117) [ 160.149727][ T5241] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 160.922169][ T5253] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.416690][ T26] audit: type=1800 audit(1772570172.140:7): pid=5253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.238" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 161.447929][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.980372][ T21] usb 4-1: USB disconnect, device number 6 [ 163.129337][ T4187] Bluetooth: unknown link type 93 [ 163.291313][ T5281] netlink: 52 bytes leftover after parsing attributes in process `syz.3.245'. [ 163.315189][ T5281] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.322624][ T5281] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.530702][ T5286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 164.560040][ T4227] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 164.654274][ T4289] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 164.701479][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'. [ 164.960858][ T4289] usb 3-1: Using ep0 maxpacket: 16 [ 165.036050][ T4227] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.057819][ T4227] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.078481][ T4227] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 165.089163][ T1108] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 165.100763][ T4227] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.110796][ T4289] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.142615][ T4289] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 165.274936][ T4289] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.305329][ T4289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 165.329945][ T4289] usb 3-1: SerialNumber: syz [ 165.335300][ T4227] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 165.365938][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 165.376739][ T4227] usb 6-1: Product: syz [ 165.398293][ T4227] usb 6-1: Manufacturer: syz [ 165.404588][ T4289] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 165.421148][ T4289] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 165.439286][ T4289] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 165.483061][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 165.485566][ T1108] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 165.492118][ T4227] cdc_wdm 6-1:1.0: skipping garbage [ 165.517511][ T4227] cdc_wdm 6-1:1.0: skipping garbage [ 165.521107][ T1108] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 165.523582][ T4227] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 165.579402][ T1108] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.604236][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.641632][ T4227] usb 3-1: USB disconnect, device number 6 [ 165.711103][ T7] usb 6-1: USB disconnect, device number 2 [ 165.746345][ T1108] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 165.779113][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.295470][ T4263] usb 4-1: USB disconnect, device number 7 [ 166.382679][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 166.864140][ T7] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.926314][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.248294][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 167.257969][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.317849][ T7] usb 6-1: string descriptor 0 read error: -71 [ 167.335178][ T7] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 167.369840][ T7] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 167.390452][ T5365] netlink: 52 bytes leftover after parsing attributes in process `syz.3.258'. [ 167.441738][ T7] usb 6-1: can't set config #1, error -71 [ 167.455228][ T7] usb 6-1: USB disconnect, device number 3 [ 167.712969][ T5376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 167.933855][ T4227] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 168.409948][ T5387] netlink: 76 bytes leftover after parsing attributes in process `syz.0.263'. [ 168.430631][ T5387] netlink: 52 bytes leftover after parsing attributes in process `syz.0.263'. [ 168.504320][ T4227] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.571619][ T4227] usb 5-1: not running at top speed; connect to a high speed hub [ 168.700682][ T4227] usb 5-1: config 9 has an invalid interface number: 48 but max is 0 [ 168.742266][ T4227] usb 5-1: config 9 has no interface number 0 [ 168.796876][ T4227] usb 5-1: config 9 interface 48 altsetting 9 endpoint 0x2 has invalid wMaxPacketSize 0 [ 169.197365][ T4227] usb 5-1: config 9 interface 48 has no altsetting 0 [ 169.476788][ T5405] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 170.135169][ T4227] usb 5-1: New USB device found, idVendor=1608, idProduct=0201, bcdDevice=46.82 [ 170.156650][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.246275][ T5408] netlink: 'syz.2.267': attribute type 2 has an invalid length. [ 170.261321][ T4227] usb 5-1: Product: syz [ 170.277432][ T5403] crypto_alloc_aead failed rc=-2 [ 170.282435][ T4227] usb 5-1: Manufacturer: syz [ 170.299184][ T4227] usb 5-1: SerialNumber: syz [ 170.441431][ T5427] autofs4:pid:5427:validate_dev_ioctl: path string terminator missing for cmd(0xc018937b) [ 170.485902][ T5428] netlink: 52 bytes leftover after parsing attributes in process `syz.0.270'. [ 170.697686][ T4227] io_ti 5-1:9.48: required endpoints missing [ 170.731510][ T4227] usb 5-1: USB disconnect, device number 6 [ 170.778780][ T5441] netlink: 76 bytes leftover after parsing attributes in process `syz.5.275'. [ 170.808351][ T5441] netlink: 52 bytes leftover after parsing attributes in process `syz.5.275'. [ 170.825515][ T5441] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.832965][ T5441] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.894155][ T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 171.300421][ T21] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 171.396943][ T21] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 171.432365][ T21] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 171.724776][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.352408][ T21] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 172.418205][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.522209][ T5471] capability: warning: `syz.0.281' uses deprecated v2 capabilities in a way that may be insecure [ 173.543205][ T21] usb 3-1: USB disconnect, device number 7 [ 173.622894][ T5473] netlink: 52 bytes leftover after parsing attributes in process `syz.0.282'. [ 175.518487][ T5491] netlink: 76 bytes leftover after parsing attributes in process `syz.2.287'. [ 175.570850][ T5491] netlink: 52 bytes leftover after parsing attributes in process `syz.2.287'. [ 176.618389][ T21] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 176.755362][ T5507] netlink: 52 bytes leftover after parsing attributes in process `syz.2.293'. [ 177.107116][ T4263] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 177.190913][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 177.373115][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.451666][ T21] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 177.501085][ T1108] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 177.737244][ T21] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.841908][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 177.933325][ T21] usb 5-1: SerialNumber: syz [ 177.939554][ T1108] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 177.966102][ T1108] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 178.011803][ T1108] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 178.036481][ T21] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 178.052237][ T5524] netlink: 76 bytes leftover after parsing attributes in process `syz.2.298'. [ 178.067524][ T21] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 178.067714][ T4263] usb 6-1: Using ep0 maxpacket: 8 [ 178.074377][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.087645][ T21] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 178.106039][ T5524] netlink: 52 bytes leftover after parsing attributes in process `syz.2.298'. [ 178.247391][ T1108] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 178.289045][ T1108] usb 5-1: USB disconnect, device number 7 [ 178.354655][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.409669][ T4263] usb 6-1: unable to get BOS descriptor or descriptor too short [ 178.506155][ T4263] usb 6-1: config 6 has an invalid interface number: 123 but max is 1 [ 178.553686][ T4263] usb 6-1: config 6 has an invalid interface number: 3 but max is 1 [ 178.786601][ T4263] usb 6-1: config 6 has no interface number 0 [ 178.930836][ T4263] usb 6-1: config 6 has no interface number 1 [ 179.062157][ T4263] usb 6-1: config 6 interface 123 has no altsetting 0 [ 179.190236][ T4263] usb 6-1: config 6 interface 3 has no altsetting 0 [ 179.229198][ T5548] loop2: detected capacity change from 0 to 256 [ 179.340290][ T5548] exfat: Bad value for 'umask' [ 179.446821][ T4263] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.f0 [ 179.460781][ T4263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.512413][ T4263] usb 6-1: Product: syz [ 179.549975][ T4263] usb 6-1: Manufacturer: syz [ 179.592674][ T4263] usb 6-1: SerialNumber: syz [ 179.693766][ T4289] usb 4-1: USB disconnect, device number 8 [ 179.700551][ T5563] loop2: detected capacity change from 0 to 512 [ 179.736104][ T5565] fuse: Bad value for 'fd' [ 179.756744][ T5563] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 179.763954][ T5563] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 179.789651][ T5563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 179.797670][ T5563] System zones: 1-12 [ 179.808837][ T5563] EXT4-fs error (device loop2): ext4_iget_extra_inode:4566: inode #15: comm syz.2.303: corrupted in-inode xattr [ 179.821522][ T5563] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.303: couldn't read orphan inode 15 (err -117) [ 179.834155][ T5563] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 180.037726][ T5565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'. [ 180.046779][ T5565] device bridge_slave_1 left promiscuous mode [ 180.053102][ T5565] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.060972][ T4263] qmi_wwan: probe of 6-1:6.123 failed with error -22 [ 180.093561][ T5565] device bridge_slave_0 left promiscuous mode [ 180.100422][ T5565] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.147233][ T4263] usb 6-1: selecting invalid altsetting 0 [ 180.215080][ T4263] usb 6-1: Could not set interface, error -22 [ 180.265385][ T4263] usb 6-1: USB disconnect, device number 4 [ 180.361095][ T5573] netlink: 52 bytes leftover after parsing attributes in process `syz.5.306'. [ 182.196538][ T5597] loop3: detected capacity change from 0 to 1024 [ 182.309145][ T5597] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 182.408591][ T5597] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 182.416755][ T5597] System zones: 0-1, 3-36 [ 182.488459][ T5597] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,auto_da_alloc=0x0000000000000006,grpid,dioread_nolock,bsddf,debug,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 184.412199][ T5640] loop4: detected capacity change from 0 to 256 [ 184.437749][ T5615] loop2: detected capacity change from 0 to 40427 [ 184.452753][ T5640] exfat: Bad value for 'umask' [ 184.811750][ T5646] loop4: detected capacity change from 0 to 512 [ 184.869472][ T5646] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 184.876951][ T5646] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 184.921733][ T5646] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 184.929857][ T5646] System zones: 1-12 [ 184.936945][ T5646] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.318: corrupted in-inode xattr [ 184.949436][ T5646] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.318: couldn't read orphan inode 15 (err -117) [ 184.961891][ T5646] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 186.620226][ T4227] Bluetooth: hci4: command 0x0406 tx timeout [ 186.627065][ T4227] Bluetooth: hci2: command 0x0406 tx timeout [ 186.645444][ T4227] Bluetooth: hci3: command 0x0406 tx timeout [ 186.667571][ T4227] Bluetooth: hci1: command 0x0406 tx timeout [ 187.765550][ T5699] loop2: detected capacity change from 0 to 1024 [ 187.935059][ T4227] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 188.094683][ T5699] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.330890][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 188.423718][ T5699] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 188.459833][ T4227] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.536983][ T5699] System zones: 0-1, 3-36 [ 188.558928][ T4227] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.581236][ T4227] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 188.626502][ T5699] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,auto_da_alloc=0x0000000000000006,grpid,dioread_nolock,bsddf,debug,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 188.679161][ T4227] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 188.822431][ T4227] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.842682][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 188.867617][ T4227] usb 4-1: SerialNumber: syz [ 188.940907][ T4227] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 188.948850][ T4227] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 188.989372][ T4227] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 189.164563][ T4227] usb 4-1: USB disconnect, device number 9 [ 189.295807][ T5723] netlink: 52 bytes leftover after parsing attributes in process `syz.2.332'. [ 190.984311][ T5748] loop0: detected capacity change from 0 to 256 [ 191.142521][ T26] audit: type=1326 audit(1772570199.940:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.342" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff27073b799 code=0x0 [ 191.685848][ T5745] loop5: detected capacity change from 0 to 40427 [ 192.647504][ T5772] netlink: 52 bytes leftover after parsing attributes in process `syz.4.345'. [ 193.898316][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 194.635641][ T5806] netlink: 52 bytes leftover after parsing attributes in process `syz.2.357'. [ 194.798348][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 194.937497][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.959529][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.982151][ T23] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 195.003629][ T23] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 195.114585][ T5802] loop4: detected capacity change from 0 to 40427 [ 195.130034][ T23] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.150127][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 195.171682][ T23] usb 6-1: SerialNumber: syz [ 195.237599][ T23] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 195.256306][ T23] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 195.263296][ T23] cdc_acm: probe of 6-1:1.0 failed with error -22 [ 195.869250][ T4263] usb 6-1: USB disconnect, device number 5 [ 196.115906][ T5818] loop2: detected capacity change from 0 to 256 [ 196.268475][ T5818] exfat: Bad value for 'umask' [ 200.894592][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.901051][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.806819][ T26] audit: type=1326 audit(1772570209.921:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.0.370" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff27073b799 code=0x0 [ 201.958031][ T5865] loop2: detected capacity change from 0 to 256 [ 202.075205][ T5867] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 202.084338][ T5867] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 202.092627][ T5867] overlayfs: missing 'lowerdir' [ 202.764506][ T5875] loop0: detected capacity change from 0 to 256 [ 202.970009][ T5875] exfat: Bad value for 'umask' [ 203.401719][ T5875] loop0: detected capacity change from 0 to 512 [ 203.496706][ T5875] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 203.504152][ T5875] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 203.533076][ T5875] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 203.541110][ T5875] System zones: 1-12 [ 203.569678][ T5875] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.374: corrupted in-inode xattr [ 203.582031][ T5875] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.374: couldn't read orphan inode 15 (err -117) [ 203.594659][ T5875] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 204.679657][ T5914] loop3: detected capacity change from 0 to 40427 [ 205.137908][ T5924] netlink: 52 bytes leftover after parsing attributes in process `syz.0.385'. [ 205.476874][ T5934] comedi comedi1: no devices specified [ 206.285977][ T5943] loop0: detected capacity change from 0 to 256 [ 206.378908][ T5943] exfat: Bad value for 'umask' [ 206.664560][ T4263] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 206.812699][ T5953] loop5: detected capacity change from 0 to 256 [ 207.158196][ T4263] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 207.174223][ T4263] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 207.201362][ T4263] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.221024][ T4263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.305347][ T4263] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 207.333179][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.977713][ T7] usb 3-1: USB disconnect, device number 8 [ 208.719251][ T5969] netlink: 52 bytes leftover after parsing attributes in process `syz.5.397'. [ 208.873128][ T5974] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 209.641549][ T5983] loop5: detected capacity change from 0 to 256 [ 209.780998][ T5983] exfat: Bad value for 'umask' [ 209.909644][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 209.991727][ T5983] loop5: detected capacity change from 0 to 512 [ 210.038430][ T5983] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 210.046020][ T5983] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 210.061593][ T5983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 210.069678][ T5983] System zones: 1-12 [ 210.108779][ T5983] EXT4-fs error (device loop5): ext4_iget_extra_inode:4566: inode #15: comm syz.5.403: corrupted in-inode xattr [ 210.122842][ T5983] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.403: couldn't read orphan inode 15 (err -117) [ 210.136035][ T5983] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 210.529440][ T5994] loop2: detected capacity change from 0 to 40427 [ 211.026385][ T6009] netlink: 52 bytes leftover after parsing attributes in process `syz.4.412'. [ 211.041888][ T4263] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 211.511167][ T4263] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 211.532927][ T4263] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 211.606206][ T4263] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.749059][ T4263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.165026][ T4263] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 212.211975][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.534460][ T6030] loop4: detected capacity change from 0 to 256 [ 212.614740][ T6030] exfat: Bad value for 'umask' [ 213.668757][ T4263] usb 4-1: USB disconnect, device number 10 [ 215.129848][ T6041] process 'syz.2.422' launched './file1' with NULL argv: empty string added [ 215.435815][ T6051] netlink: 52 bytes leftover after parsing attributes in process `syz.4.423'. [ 215.774151][ T6059] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 215.786163][ T6059] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 215.800758][ T6059] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 215.810370][ T6059] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 215.824913][ T6059] device geneve2 entered promiscuous mode [ 215.832768][ T6059] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 215.847261][ T6059] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 215.856615][ T6059] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 215.880202][ T6059] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 215.949153][ T6061] loop3: detected capacity change from 0 to 256 [ 215.975120][ T6061] exfat: Bad value for 'umask' [ 216.524588][ T4263] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 216.778307][ T4263] usb 4-1: Using ep0 maxpacket: 32 [ 217.102207][ T4263] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 217.102325][ T4263] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 217.102367][ T4263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.916838][ T4263] usb 4-1: config 0 descriptor?? [ 218.344617][ T6083] netlink: 'syz.4.433': attribute type 21 has an invalid length. [ 218.352434][ T6083] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.531593][ T4289] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 219.044970][ T23] usb 4-1: USB disconnect, device number 11 [ 219.291737][ T4289] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 219.324882][ T4289] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 219.360363][ T4289] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.371263][ T6100] loop2: detected capacity change from 0 to 256 [ 219.397528][ T4289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.430322][ T6100] exfat: Bad value for 'umask' [ 219.491736][ T6100] loop2: detected capacity change from 0 to 512 [ 219.504355][ T6100] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 219.511543][ T6100] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 219.525874][ T4289] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 219.542903][ T6100] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 219.551122][ T6100] System zones: 1-12 [ 219.571803][ T6100] EXT4-fs error (device loop2): ext4_iget_extra_inode:4566: inode #15: comm syz.2.440: corrupted in-inode xattr [ 219.592802][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.597795][ T6100] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.440: couldn't read orphan inode 15 (err -117) [ 219.622752][ T6100] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 220.293585][ T4289] usb 1-1: USB disconnect, device number 9 [ 221.958981][ T6137] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 222.088887][ T6141] netlink: 52 bytes leftover after parsing attributes in process `syz.3.451'. [ 222.203173][ T6143] loop2: detected capacity change from 0 to 256 [ 222.281700][ T6145] loop3: detected capacity change from 0 to 256 [ 222.306427][ T6143] exfat: Bad value for 'umask' [ 224.454714][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 224.924782][ T23] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 225.079347][ T23] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 225.131778][ T23] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 225.141293][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.337412][ T23] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 225.371271][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.518813][ T1108] usb 1-1: USB disconnect, device number 10 [ 227.674686][ T6185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.463'. [ 227.750118][ T6188] netlink: 52 bytes leftover after parsing attributes in process `syz.5.464'. [ 227.843920][ T6191] loop0: detected capacity change from 0 to 256 [ 230.344585][ T4289] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 231.734479][ T4230] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 231.766449][ T4289] usb 1-1: Using ep0 maxpacket: 16 [ 231.881254][ T6224] netlink: 52 bytes leftover after parsing attributes in process `syz.3.477'. [ 231.894901][ T4289] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.916119][ T4289] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 231.926577][ T4289] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 232.044589][ T4289] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.077976][ T4289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 232.085999][ T4289] usb 1-1: SerialNumber: syz [ 232.162317][ T4230] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 232.173653][ T4289] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 232.187627][ T4230] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 232.192461][ T4289] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 232.211756][ T4230] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.219184][ T4289] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 232.238765][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.273985][ T4289] usb 1-1: USB disconnect, device number 11 [ 232.392442][ T4230] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 232.464142][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.578939][ T4263] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 232.653305][ T4227] usb 5-1: USB disconnect, device number 8 [ 234.116390][ T4263] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 234.142640][ T4263] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 234.196583][ T6252] netlink: 'syz.2.483': attribute type 1 has an invalid length. [ 234.204160][ T4263] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.241037][ T6252] device bond1 entered promiscuous mode [ 234.247287][ T6252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.306641][ T6252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.315095][ T6252] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 234.337157][ T6252] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 234.356367][ T6252] bond1: (slave vcan1): Error -22 calling dev_set_mtu [ 234.488902][ T4230] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 234.813680][ T4230] usb 6-1: Using ep0 maxpacket: 16 [ 234.853832][ T6266] netlink: 52 bytes leftover after parsing attributes in process `syz.0.488'. [ 234.963120][ T4230] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.979403][ T4230] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 234.993036][ T4230] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 235.007595][ T4230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.037801][ T4230] usb 6-1: config 0 descriptor?? [ 235.090164][ T4230] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 235.176901][ T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 235.540618][ T4263] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 235.551116][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 235.561618][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 235.569798][ T4263] usb 4-1: Product: syz [ 235.579493][ T4263] usb 4-1: Manufacturer: syz [ 235.618314][ T4263] usb 4-1: can't set config #1, error -71 [ 235.643818][ T4263] usb 4-1: USB disconnect, device number 12 [ 235.726219][ T6275] loop3: detected capacity change from 0 to 256 [ 235.749166][ T6275] exfat: Bad value for 'umask' [ 235.986939][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.998036][ T23] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 236.008650][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 236.129206][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.198288][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 236.349758][ T23] usb 5-1: SerialNumber: syz [ 236.486587][ T6282] loop3: detected capacity change from 0 to 512 [ 236.503443][ T23] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 236.517526][ T23] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 236.623852][ T6282] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 236.671707][ T23] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 236.684230][ T6282] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 237.814457][ T4230] usb 5-1: USB disconnect, device number 9 [ 237.852111][ T4289] usb 6-1: USB disconnect, device number 6 [ 237.964862][ T6282] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 237.976523][ T6282] System zones: 1-12 [ 238.007491][ T6282] EXT4-fs error (device loop3): ext4_iget_extra_inode:4566: inode #15: comm syz.3.491: corrupted in-inode xattr [ 238.089991][ T6282] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.491: couldn't read orphan inode 15 (err -117) [ 238.127455][ T4227] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 238.149238][ T6282] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 238.233600][ T6304] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 238.608515][ T4227] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 238.618829][ T4227] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 238.635683][ T6313] netlink: 52 bytes leftover after parsing attributes in process `syz.0.502'. [ 238.645628][ T4227] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.654984][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.732614][ T4227] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 238.838012][ T6316] loop4: detected capacity change from 0 to 512 [ 238.868381][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.922735][ T6316] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 238.952482][ T6316] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.136834][ T4289] usb 3-1: USB disconnect, device number 9 [ 239.188700][ T4263] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 239.571959][ T4263] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.594011][ T4263] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 239.619749][ T4263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.665605][ T4263] usb 1-1: config 0 descriptor?? [ 240.361846][ T4230] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 240.727291][ T4263] usbhid 1-1:0.0: can't add hid device: -71 [ 240.733293][ T4263] usbhid: probe of 1-1:0.0 failed with error -71 [ 240.739392][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 240.783189][ T4263] usb 1-1: USB disconnect, device number 12 [ 241.067331][ T4230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.077603][ T4230] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.144326][ T4230] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 241.197508][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.439561][ T4230] usb 5-1: config 0 descriptor?? [ 241.639737][ T4230] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 241.869288][ T4263] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 243.114944][ T4227] usb 5-1: USB disconnect, device number 10 [ 244.747477][ T4263] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 246.958017][ T4263] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 246.968244][ T4263] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 247.054065][ T4263] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.063122][ T4263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.069724][ T6373] loop4: detected capacity change from 0 to 1024 [ 247.174614][ T6373] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 247.324742][ T4263] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 247.363322][ T6373] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 247.381963][ T6373] System zones: 0-1, 3-36 [ 247.395989][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.550478][ T6373] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,auto_da_alloc=0x0000000000000006,grpid,dioread_nolock,bsddf,debug,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 247.952375][ T4263] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 248.211330][ T1108] usb 1-1: USB disconnect, device number 14 [ 248.404916][ T4263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 248.425659][ T4263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.440541][ T4263] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 248.449789][ T4263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.470286][ T4263] usb 6-1: config 0 descriptor?? [ 248.531377][ T4263] hub 6-1:0.0: USB hub found [ 248.860314][ T4263] hub 6-1:0.0: 1 port detected [ 249.216692][ T6408] loop0: detected capacity change from 0 to 256 [ 249.256942][ T6408] exfat: Bad value for 'umask' [ 249.555689][ T1108] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 249.577184][ T4263] hub 6-1:0.0: activate --> -90 [ 249.796728][ T6415] loop0: detected capacity change from 0 to 512 [ 249.827035][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 249.904672][ T6415] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 249.951914][ T1108] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.997027][ T1108] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 250.012543][ T6415] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 250.055207][ T1108] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 250.081188][ T6415] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 250.096000][ T1108] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 250.107109][ T6415] System zones: 1-12 [ 250.205012][ T6415] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.531: corrupted in-inode xattr [ 250.259513][ T6415] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.531: couldn't read orphan inode 15 (err -117) [ 250.287921][ T6415] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 250.336279][ T1108] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.356793][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 250.377971][ T1108] usb 5-1: SerialNumber: syz [ 250.385300][ T4276] usb 6-1: USB disconnect, device number 7 [ 250.400471][ T4263] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 250.412064][ T4263] usb 6-1-port1: connect-debounce failed [ 250.444988][ T1108] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 250.459452][ T1108] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 250.653637][ T6427] capability: warning: `syz.2.538' uses 32-bit capabilities (legacy support in use) [ 250.670401][ T4276] usb 5-1: USB disconnect, device number 11 [ 250.697312][ T6427] program syz.2.538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.483456][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 253.220300][ T4276] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 253.625727][ T6458] netlink: 104 bytes leftover after parsing attributes in process `syz.5.550'. [ 253.682202][ T4276] usb 3-1: Using ep0 maxpacket: 8 [ 253.835551][ T6466] loop3: detected capacity change from 0 to 512 [ 253.850582][ T6464] netlink: 52 bytes leftover after parsing attributes in process `syz.5.553'. [ 253.854140][ T4276] usb 3-1: unable to get BOS descriptor or descriptor too short [ 253.929705][ T6466] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 253.946907][ T6466] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.960300][ T4276] usb 3-1: config 4 interface 0 has no altsetting 0 [ 254.334527][ T4276] usb 3-1: string descriptor 0 read error: -22 [ 254.341088][ T4276] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 254.350231][ T4276] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 254.401127][ T4276] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 254.409143][ T1108] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 254.428488][ T4276] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 254.439268][ T4276] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 254.447371][ T4276] usb 3-1: media controller created [ 254.464351][ T4276] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.639356][ T6448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.093519][ T4276] zl10353_read_register: readreg error (reg=127, ret==0) [ 255.125539][ T1108] usb 6-1: Using ep0 maxpacket: 16 [ 255.132623][ T4276] usb 3-1: USB disconnect, device number 10 [ 255.222424][ T6488] loop3: detected capacity change from 0 to 256 [ 255.429387][ T1108] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.864504][ T1108] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 256.266405][ T1108] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 256.301477][ T1108] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 256.408540][ T1108] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.422833][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 256.462969][ T1108] usb 6-1: SerialNumber: syz [ 256.597720][ T1108] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 256.628103][ T1108] cdc_acm: probe of 6-1:1.0 failed with error -12 [ 256.794726][ T4229] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 256.916598][ T4289] usb 6-1: USB disconnect, device number 8 [ 256.987541][ T6504] netlink: 52 bytes leftover after parsing attributes in process `syz.4.566'. [ 257.221227][ T6509] loop4: detected capacity change from 0 to 512 [ 257.308405][ T6509] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.333010][ T4229] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 257.338860][ T6509] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.351999][ T4229] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 257.380980][ T4229] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.421493][ T4229] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.450801][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.493315][ T4229] usb 1-1: config 0 descriptor?? [ 257.509768][ T6500] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 257.543682][ T4229] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 258.413497][ T6523] loop5: detected capacity change from 0 to 1024 [ 258.438847][ T6523] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 258.468459][ T6523] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 258.480051][ T6523] System zones: 0-1, 3-36 [ 258.496034][ T6523] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,auto_da_alloc=0x0000000000000006,grpid,dioread_nolock,bsddf,debug,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 260.085681][ T6532] loop3: detected capacity change from 0 to 40427 [ 260.109595][ T23] usb 1-1: USB disconnect, device number 15 [ 262.071795][ T6560] loop5: detected capacity change from 0 to 512 [ 262.819150][ T6560] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.833449][ T6560] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.659639][ T6572] loop5: detected capacity change from 0 to 256 [ 266.566770][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.574923][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.655201][ T6607] loop4: detected capacity change from 0 to 512 [ 266.747550][ T6607] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 266.767592][ T6607] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.161501][ T6627] loop3: detected capacity change from 0 to 40427 [ 269.543395][ T6651] loop4: detected capacity change from 0 to 1024 [ 269.906628][ T6651] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 270.282028][ T6651] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 270.293466][ T6651] System zones: 0-1, 3-36 [ 270.352277][ T6651] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,auto_da_alloc=0x0000000000000006,grpid,dioread_nolock,bsddf,debug,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 270.583635][ T6661] loop5: detected capacity change from 0 to 256 [ 271.587089][ T6661] exfat: Bad value for 'umask' [ 272.288698][ T6673] loop5: detected capacity change from 0 to 512 [ 273.830148][ T6673] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 273.837437][ T6673] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 273.847454][ T6673] EXT4-fs: failed to create workqueue [ 273.852942][ T6673] EXT4-fs (loop5): mount failed [ 275.815959][ T6696] loop3: detected capacity change from 0 to 512 [ 277.236663][ T6712] loop2: detected capacity change from 0 to 256 [ 277.267013][ T6712] exfat: Bad value for 'umask' [ 277.267115][ T6696] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 277.334531][ T6696] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.395278][ T6717] loop5: detected capacity change from 0 to 1024 [ 277.677626][ T6717] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 277.831675][ T6720] loop2: detected capacity change from 0 to 512 [ 278.378458][ T6717] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 278.457810][ T6720] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 278.479743][ T6717] System zones: 0-1, 3-36 [ 278.510532][ T6720] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 278.560000][ T6717] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,auto_da_alloc=0x0000000000000006,grpid,dioread_nolock,bsddf,debug,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 278.625475][ T6720] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 278.633575][ T6720] System zones: 1-12 [ 278.805405][ T6720] EXT4-fs error (device loop2): ext4_iget_extra_inode:4566: inode #15: comm syz.2.626: corrupted in-inode xattr [ 278.934529][ T6720] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.626: couldn't read orphan inode 15 (err -117) [ 278.973081][ T6710] loop0: detected capacity change from 0 to 40427 [ 279.037528][ T6720] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 281.526883][ T6750] loop5: detected capacity change from 0 to 40427 [ 284.219673][ T6774] loop3: detected capacity change from 0 to 512 [ 284.314084][ T6774] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 284.336117][ T6774] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.657958][ T6783] loop4: detected capacity change from 0 to 1024 [ 285.502248][ T6783] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 285.704195][ T6783] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 285.737480][ T6783] System zones: 0-1, 3-36 [ 285.762949][ T6783] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,auto_da_alloc=0x0000000000000006,grpid,dioread_nolock,bsddf,debug,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 286.565419][ T6791] loop5: detected capacity change from 0 to 40427 [ 292.128973][ T6839] loop3: detected capacity change from 0 to 1024 [ 292.233181][ T6839] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 292.334195][ T6839] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 292.374381][ T6839] System zones: 0-1, 3-36 [ 292.442649][ T6839] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,auto_da_alloc=0x0000000000000006,grpid,dioread_nolock,bsddf,debug,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 294.285493][ T6861] loop4: detected capacity change from 0 to 256 [ 294.330277][ T6861] exfat: Bad value for 'umask' [ 294.676604][ T6867] vivid-001: disconnect [ 295.002746][ T6865] loop4: detected capacity change from 0 to 512 [ 295.375830][ T6865] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 295.445989][ T6863] vivid-001: reconnect [ 295.493484][ T6865] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 296.526127][ T6865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 296.905868][ T6865] System zones: 1-12 [ 296.958137][ T6865] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.665: corrupted in-inode xattr [ 297.003555][ T6865] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.665: couldn't read orphan inode 15 (err -117) [ 297.114956][ T6865] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 303.564590][ T4226] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 303.825874][ T6943] loop2: detected capacity change from 0 to 40427 [ 303.832428][ T4226] usb 1-1: Using ep0 maxpacket: 32 [ 304.067099][ T4226] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.386276][ T4764] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 304.580365][ T4226] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 304.626571][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.665723][ T4226] usb 1-1: Product: syz [ 304.673354][ T4226] usb 1-1: Manufacturer: syz [ 304.698825][ T4226] usb 1-1: SerialNumber: syz [ 304.736659][ T4226] usb 1-1: config 0 descriptor?? [ 304.789651][ T4764] usb 6-1: Using ep0 maxpacket: 16 [ 304.936045][ T4764] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 305.116943][ T4764] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 305.137994][ T4764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.162332][ T4764] usb 6-1: Product: syz [ 305.166530][ T4764] usb 6-1: Manufacturer: syz [ 305.192296][ T4764] usb 6-1: SerialNumber: syz [ 305.209472][ T4764] usb 6-1: config 0 descriptor?? [ 305.354238][ T6959] tipc: Failed to remove unknown binding: 66,0,0/0:3841880597/3841880598 [ 305.369666][ T6959] tipc: Failed to remove unknown binding: 66,0,0/0:3841880597/3841880598 [ 306.532392][ T6969] ubi31: attaching mtd0 [ 306.535291][ T6969] ubi31: scanning is finished [ 306.535310][ T6969] ubi31: empty MTD device detected [ 306.972250][ T6969] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 307.464076][ T6982] 9pnet: Insufficient options for proto=fd [ 307.602316][ T4263] usb 1-1: USB disconnect, device number 16 [ 307.619394][ T4226] usb 6-1: USB disconnect, device number 9 [ 310.020715][ T7020] loop5: detected capacity change from 0 to 256 [ 310.250683][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'. [ 314.218855][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 314.939893][ T7082] loop5: detected capacity change from 0 to 256 [ 314.985263][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.726'. [ 317.294667][ T7118] netlink: 16 bytes leftover after parsing attributes in process `syz.4.731'. [ 317.448695][ T7124] loop2: detected capacity change from 0 to 512 [ 318.004323][ T7124] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 318.040736][ T7124] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.403302][ T1108] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 318.905821][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 319.044753][ T1108] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 319.060211][ T1108] usb 5-1: config 0 has no interface number 0 [ 319.098072][ T1108] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 255, changing to 11 [ 319.119565][ T1108] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 59391, setting to 1024 [ 319.409493][ T1108] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 319.419049][ T1108] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 319.427718][ T1108] usb 5-1: Product: syz [ 319.438145][ T1108] usb 5-1: Manufacturer: syz [ 319.445983][ T1108] usb 5-1: SerialNumber: syz [ 319.471990][ T1108] usb 5-1: config 0 descriptor?? [ 319.512309][ T7134] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 319.581316][ T1108] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 319.610678][ T1108] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 319.628067][ T1108] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 319.639546][ T7135] loop5: detected capacity change from 0 to 40427 [ 319.658768][ T1108] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 319.676324][ T1108] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 319.695262][ T1108] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 319.707771][ T1108] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 319.728563][ T1108] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 319.772764][ T1108] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 319.811558][ T1108] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 319.856660][ T1108] usb 5-1: USB disconnect, device number 12 [ 319.906759][ T1108] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 319.952337][ T1108] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 320.020901][ T1108] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 320.050465][ T1108] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 320.082927][ T1108] keyspan 5-1:0.107: device disconnected [ 320.627163][ T7151] loop4: detected capacity change from 0 to 256 [ 322.425518][ T7172] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 326.131807][ T7188] team0: No ports can be present during mode change [ 326.294291][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 326.304224][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 326.311781][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 326.321846][ T4200] Workqueue: hci2 hci_rx_work [ 326.326553][ T4200] Call Trace: [ 326.329845][ T4200] [ 326.332785][ T4200] dump_stack_lvl+0x188/0x250 [ 326.337486][ T4200] ? show_regs_print_info+0x20/0x20 [ 326.342716][ T4200] ? load_image+0x400/0x400 [ 326.347234][ T4200] sysfs_create_dir_ns+0x26a/0x290 [ 326.352365][ T4200] ? sysfs_warn_dup+0xa0/0xa0 [ 326.357041][ T4200] ? process_one_work+0x85f/0x1010 [ 326.362156][ T4200] ? do_raw_spin_unlock+0x11d/0x230 [ 326.367358][ T4200] kobject_add_internal+0x6e0/0xd90 [ 326.372565][ T4200] kobject_add+0x160/0x230 [ 326.376997][ T4200] ? kobject_init+0x1d0/0x1d0 [ 326.381674][ T4200] ? klist_children_get+0x50/0x50 [ 326.386699][ T4200] ? get_device_parent+0x121/0x3f0 [ 326.391813][ T4200] device_add+0x483/0xfb0 [ 326.396151][ T4200] hci_conn_add_sysfs+0xd1/0x1e0 [ 326.401092][ T4200] le_conn_complete_evt+0xc48/0x15c0 [ 326.406383][ T4200] ? cs_le_create_conn+0x5e0/0x5e0 [ 326.411501][ T4200] ? __mutex_trylock_common+0x155/0x260 [ 326.417060][ T4200] hci_le_meta_evt+0x285/0x3c90 [ 326.421909][ T4200] ? hci_event_packet+0x37b/0x1370 [ 326.427020][ T4200] ? __lock_acquire+0x7d10/0x7d10 [ 326.432055][ T4200] ? hci_remote_host_features_evt+0x280/0x280 [ 326.438125][ T4200] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 326.443764][ T4200] ? mark_lock+0x94/0x320 [ 326.448092][ T4200] ? mutex_unlock+0x10/0x10 [ 326.452598][ T4200] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 326.458575][ T4200] ? lock_chain_count+0x20/0x20 [ 326.463443][ T4200] ? __rwlock_init+0x140/0x140 [ 326.468211][ T4200] hci_event_packet+0xe48/0x1370 [ 326.473152][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 326.478367][ T4200] ? rcu_lock_release+0x20/0x20 [ 326.483218][ T4200] ? hci_send_to_monitor+0x9c/0x4a0 [ 326.488423][ T4200] hci_rx_work+0x255/0xa10 [ 326.492853][ T4200] process_one_work+0x85f/0x1010 [ 326.497804][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 326.503443][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 326.508741][ T4200] ? _raw_spin_lock_irq+0xb7/0xf0 [ 326.513771][ T4200] ? _raw_spin_lock_irqsave+0x100/0x100 [ 326.519320][ T4200] ? wq_worker_running+0x97/0x170 [ 326.524349][ T4200] worker_thread+0xaa6/0x1290 [ 326.529033][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 326.534233][ T4200] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 326.540129][ T4200] kthread+0x436/0x520 [ 326.544206][ T4200] ? rcu_lock_release+0x20/0x20 [ 326.549055][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 326.553641][ T4200] ret_from_fork+0x1f/0x30 [ 326.558070][ T4200] [ 326.561098][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.570635][ T4200] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 326.583932][ T4200] Bluetooth: hci2: failed to register connection device [ 327.924251][ T7218] loop0: detected capacity change from 0 to 512 [ 328.647139][ T4276] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 329.453224][ T4276] usb 6-1: Using ep0 maxpacket: 32 [ 329.476643][ T7218] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 329.938851][ T7218] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.991973][ T4276] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.869591][ T4276] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 330.889173][ T4276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.900694][ T4276] usb 6-1: Product: syz [ 330.906523][ T4276] usb 6-1: Manufacturer: syz [ 330.911402][ T4276] usb 6-1: SerialNumber: syz [ 330.951780][ T4276] usb 6-1: config 0 descriptor?? [ 331.278946][ T4231] usb 6-1: USB disconnect, device number 10 [ 332.647090][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.653536][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.968334][ T7272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.670718][ T7274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.775'. [ 333.807021][ T7279] loop2: detected capacity change from 0 to 512 [ 334.246412][ T7279] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 334.315447][ T7279] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.226842][ T1336] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 335.796788][ T1336] usb 4-1: Using ep0 maxpacket: 16 [ 335.925249][ T1336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.952824][ T1336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.988195][ T1336] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 336.028018][ T1336] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 336.063895][ T1336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.103491][ T1336] usb 4-1: config 0 descriptor?? [ 336.417146][ T7297] comedi comedi3: reset error (fatal) [ 336.437086][ T7305] program syz.4.784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.535805][ T7309] netlink: 'syz.4.786': attribute type 6 has an invalid length. [ 336.933196][ T1336] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 337.025389][ T1336] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 337.288641][ T1336] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 337.366340][ T1336] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 337.380607][ T1336] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 337.402295][ T1336] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 337.450118][ T1336] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 337.457706][ T1336] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 337.465017][ T1336] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 337.472234][ T1336] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 337.479566][ T1336] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 337.486816][ T1336] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 337.494088][ T1336] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 337.501663][ T1336] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 337.509419][ T1336] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 337.524550][ T1336] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input6 [ 337.559514][ T1336] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 337.614889][ T1336] usb 4-1: USB disconnect, device number 13 [ 337.939346][ T7318] fido_id[7318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 338.028206][ T7329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.117686][ T7327] loop4: detected capacity change from 0 to 512 [ 338.508771][ T7327] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 338.619275][ T7327] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.977947][ T7362] fuse: Bad value for 'fd' [ 340.988325][ T7330] loop3: detected capacity change from 0 to 40427 [ 343.006769][ T7378] netlink: 168 bytes leftover after parsing attributes in process `syz.3.806'. [ 344.952941][ T7389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.058384][ T7390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.372736][ T7391] loop0: detected capacity change from 0 to 512 [ 345.829620][ T7391] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 345.841668][ T7391] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.516263][ T7415] device syzkaller0 entered promiscuous mode [ 352.742048][ T7419] loop2: detected capacity change from 0 to 40427 [ 352.772764][ T7449] loop0: detected capacity change from 0 to 512 [ 353.001047][ T7460] netlink: 168 bytes leftover after parsing attributes in process `syz.4.819'. [ 353.229550][ T7449] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 353.409048][ T7449] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.928768][ T7489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.659794][ T7482] 9pnet: Insufficient options for proto=fd [ 357.496556][ T7510] xt_l2tp: invalid flags combination: 0 [ 357.845549][ T7517] netlink: 168 bytes leftover after parsing attributes in process `syz.0.845'. [ 358.607458][ T7495] loop4: detected capacity change from 0 to 40427 [ 358.642248][ T7521] loop3: detected capacity change from 0 to 512 [ 358.888642][ T7521] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 359.006231][ T7521] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.838951][ T7539] dlm: non-version read from control device 0 [ 362.057522][ T4227] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 362.452200][ T7560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.741603][ T4227] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 363.775276][ T4227] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 363.808803][ T7564] loop0: detected capacity change from 0 to 256 [ 363.827523][ T4227] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 363.837844][ T4227] usb 4-1: config 220 has no interface number 2 [ 363.865909][ T4227] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 363.897883][ T4227] usb 4-1: config 220 interface 0 has no altsetting 0 [ 363.930607][ T4227] usb 4-1: config 220 interface 76 has no altsetting 0 [ 363.966108][ T4227] usb 4-1: config 220 interface 1 has no altsetting 0 [ 365.302894][ T4227] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 365.641019][ T7585] netlink: 380 bytes leftover after parsing attributes in process `syz.2.867'. [ 365.812038][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.820770][ T4227] usb 4-1: Product: syz [ 365.824954][ T4227] usb 4-1: Manufacturer: syz [ 365.858969][ T4227] usb 4-1: can't set config #220, error -71 [ 365.869674][ T4227] usb 4-1: USB disconnect, device number 14 [ 365.913968][ T4174] udevd[4174]: setting owner of /dev/bus/usb/004/014 to uid=0, gid=0 failed: No such file or directory [ 365.936308][ T7602] netlink: 72 bytes leftover after parsing attributes in process `syz.5.870'. [ 367.479756][ T7628] loop5: detected capacity change from 0 to 256 [ 368.604168][ T7649] input: syz0 as /devices/virtual/input/input7 [ 368.761776][ T7609] loop0: detected capacity change from 0 to 40427 [ 369.971192][ T7673] netlink: 60 bytes leftover after parsing attributes in process `syz.4.883'. [ 370.810974][ T7682] binder: 7681:7682 ioctl c0306201 0 returned -14 [ 371.309801][ T7690] loop3: detected capacity change from 0 to 256 [ 377.012914][ T7740] netlink: 60 bytes leftover after parsing attributes in process `syz.0.899'. [ 377.212891][ T7752] loop4: detected capacity change from 0 to 256 [ 377.369721][ T7763] netlink: 168 bytes leftover after parsing attributes in process `syz.5.902'. [ 378.150879][ T26] audit: type=1326 audit(1772570374.869:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.0.906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff27073b799 code=0x0 [ 379.874398][ T7778] 9pnet: Insufficient options for proto=fd [ 380.734802][ T7791] netlink: 60 bytes leftover after parsing attributes in process `syz.4.913'. [ 383.771956][ T7821] netlink: 168 bytes leftover after parsing attributes in process `syz.3.921'. [ 384.543201][ T7826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.923'. [ 384.742045][ T7826] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 384.749029][ T7826] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 384.757570][ T7826] vhci_hcd vhci_hcd.0: Device attached [ 385.048524][ T1336] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 385.080135][ T7832] loop4: detected capacity change from 0 to 256 [ 386.221944][ T7275] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 386.403301][ T7846] input: syz0 as /devices/virtual/input/input8 [ 387.357900][ T7275] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 576, setting to 64 [ 387.495243][ T7828] vhci_hcd: connection reset by peer [ 387.523317][ T154] vhci_hcd: stop threads [ 387.527974][ T7848] netlink: 60 bytes leftover after parsing attributes in process `syz.3.929'. [ 387.550208][ T7275] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 387.559254][ T7275] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.587470][ T154] vhci_hcd: release socket [ 387.620518][ T154] vhci_hcd: disconnect device [ 387.635204][ T21] [ 387.637566][ T21] ====================================================== [ 387.640166][ T7275] usb 6-1: Product: syz [ 387.644583][ T21] WARNING: possible circular locking dependency detected [ 387.644599][ T21] syzkaller #0 Not tainted [ 387.644608][ T21] ------------------------------------------------------ [ 387.667193][ T21] kworker/1:0/21 is trying to acquire lock: [ 387.673096][ T21] ffff88807abecc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 387.684149][ T21] [ 387.684149][ T21] but task is already holding lock: [ 387.686942][ T7275] usb 6-1: Manufacturer: syz [ 387.691508][ T21] ffffffff8d6c4b48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 387.691555][ T21] [ 387.691555][ T21] which lock already depends on the new lock. [ 387.691555][ T21] [ 387.704015][ T7275] usb 6-1: SerialNumber: syz [ 387.705137][ T21] [ 387.705137][ T21] the existing dependency chain (in reverse order) is: [ 387.705144][ T21] [ 387.705144][ T21] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 387.737140][ T21] __mutex_lock_common+0x1e3/0x2400 [ 387.742883][ T21] mutex_lock_nested+0x17/0x20 [ 387.748229][ T21] rfkill_register+0x33/0x8a0 [ 387.753462][ T21] hci_register_dev+0x452/0x970 [ 387.758906][ T21] vhci_create_device+0x32c/0x5c0 [ 387.764482][ T21] vhci_write+0x391/0x450 [ 387.769364][ T21] vfs_write+0x745/0xd60 [ 387.774252][ T21] ksys_write+0x152/0x260 [ 387.779111][ T21] do_syscall_64+0x4c/0xa0 [ 387.784060][ T21] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 387.790487][ T21] [ 387.790487][ T21] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 387.798313][ T21] __mutex_lock_common+0x1e3/0x2400 [ 387.804047][ T21] mutex_lock_nested+0x17/0x20 [ 387.809346][ T21] vhci_send_frame+0x88/0x100 [ 387.814558][ T21] hci_send_frame+0x1a9/0x2e0 [ 387.819774][ T21] hci_tx_work+0x9f9/0x1710 [ 387.824808][ T21] process_one_work+0x85f/0x1010 [ 387.830278][ T21] worker_thread+0xaa6/0x1290 [ 387.835491][ T21] kthread+0x436/0x520 [ 387.840095][ T21] ret_from_fork+0x1f/0x30 [ 387.845054][ T21] [ 387.845054][ T21] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 387.854276][ T21] __flush_work+0x116/0x210 [ 387.859320][ T21] hci_dev_do_close+0x1e7/0x1030 [ 387.864789][ T21] hci_unregister_dev+0x2d7/0x580 [ 387.870348][ T21] vhci_release+0x73/0xc0 [ 387.875217][ T21] __fput+0x234/0x930 [ 387.879738][ T21] task_work_run+0x125/0x1a0 [ 387.884864][ T21] do_exit+0x626/0x20c0 [ 387.889553][ T21] do_group_exit+0x12e/0x300 [ 387.894677][ T21] get_signal+0x6ca/0x12c0 [ 387.899626][ T21] arch_do_signal_or_restart+0xe7/0x12c0 [ 387.905794][ T21] exit_to_user_mode_loop+0x9e/0x130 [ 387.911624][ T21] exit_to_user_mode_prepare+0xee/0x180 [ 387.917701][ T21] syscall_exit_to_user_mode+0x16/0x40 [ 387.923697][ T21] do_syscall_64+0x58/0xa0 [ 387.928646][ T21] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 387.935090][ T21] [ 387.935090][ T21] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 387.942747][ T21] __mutex_lock_common+0x1e3/0x2400 [ 387.948500][ T21] mutex_lock_nested+0x17/0x20 [ 387.953795][ T21] bg_scan_update+0x44/0x3b0 [ 387.958948][ T21] process_one_work+0x85f/0x1010 [ 387.964428][ T21] worker_thread+0xaa6/0x1290 [ 387.969635][ T21] kthread+0x436/0x520 [ 387.974232][ T21] ret_from_fork+0x1f/0x30 [ 387.979179][ T21] [ 387.979179][ T21] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 387.989013][ T21] __lock_acquire+0x2c42/0x7d10 [ 387.994406][ T21] lock_acquire+0x19e/0x400 [ 387.999441][ T21] __flush_work+0x116/0x210 [ 388.004473][ T21] __cancel_work_timer+0x3f4/0x560 [ 388.006024][ T7839] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 388.010114][ T21] hci_request_cancel_all+0xcc/0x300 [ 388.022855][ T21] hci_dev_do_close+0x4e/0x1030 [ 388.028238][ T21] hci_rfkill_set_block+0x10a/0x190 [ 388.033967][ T21] rfkill_set_block+0x1c6/0x420 [ 388.039352][ T21] rfkill_epo+0x75/0x170 [ 388.044282][ T21] rfkill_op_handler+0x76/0x220 [ 388.049667][ T21] process_one_work+0x85f/0x1010 [ 388.055136][ T21] worker_thread+0xaa6/0x1290 [ 388.060365][ T21] kthread+0x436/0x520 [ 388.064962][ T21] ret_from_fork+0x1f/0x30 [ 388.069911][ T21] [ 388.069911][ T21] other info that might help us debug this: [ 388.069911][ T21] [ 388.080146][ T21] Chain exists of: [ 388.080146][ T21] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 388.080146][ T21] [ 388.095886][ T21] Possible unsafe locking scenario: [ 388.095886][ T21] [ 388.103337][ T21] CPU0 CPU1 [ 388.108707][ T21] ---- ---- [ 388.114076][ T21] lock(rfkill_global_mutex); [ 388.118942][ T21] lock(&data->open_mutex); [ 388.126066][ T21] lock(rfkill_global_mutex); [ 388.133362][ T21] lock((work_completion)(&hdev->bg_scan_update)); [ 388.139969][ T21] [ 388.139969][ T21] *** DEADLOCK *** [ 388.139969][ T21] [ 388.148128][ T21] 3 locks held by kworker/1:0/21: [ 388.153162][ T21] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 388.163542][ T21] #1: ffffc90000db7d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 388.173917][ T21] #2: ffffffff8d6c4b48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 388.183426][ T21] [ 388.183426][ T21] stack backtrace: [ 388.189315][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted syzkaller #0 [ 388.196608][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 388.206669][ T21] Workqueue: events rfkill_op_handler [ 388.212066][ T21] Call Trace: [ 388.215370][ T21] [ 388.218332][ T21] dump_stack_lvl+0x188/0x250 [ 388.223029][ T21] ? load_image+0x400/0x400 [ 388.227545][ T21] ? show_regs_print_info+0x20/0x20 [ 388.232761][ T21] ? print_circular_bug+0x12b/0x1a0 [ 388.237987][ T21] check_noncircular+0x296/0x330 [ 388.242944][ T21] ? look_up_lock_class+0x71/0x110 [ 388.248080][ T21] ? add_chain_block+0x940/0x940 [ 388.253058][ T21] ? lockdep_lock+0xf1/0x1f0 [ 388.257668][ T21] ? __lock_acquire+0x12e8/0x7d10 [ 388.262706][ T21] ? mark_lock+0x94/0x320 [ 388.267045][ T21] __lock_acquire+0x2c42/0x7d10 [ 388.271919][ T21] ? verify_lock_unused+0x140/0x140 [ 388.277143][ T21] lock_acquire+0x19e/0x400 [ 388.281660][ T21] ? __flush_work+0xfa/0x210 [ 388.286255][ T21] ? __lock_acquire+0x7d10/0x7d10 [ 388.291297][ T21] ? read_lock_is_recursive+0x10/0x10 [ 388.296682][ T21] ? start_flush_work+0x776/0x820 [ 388.301719][ T21] __flush_work+0x116/0x210 [ 388.306228][ T21] ? __flush_work+0xfa/0x210 [ 388.310834][ T21] ? flush_work+0x20/0x20 [ 388.315174][ T21] ? try_to_grab_pending+0xfa/0x7f0 [ 388.320388][ T21] ? mark_lock+0x94/0x320 [ 388.324730][ T21] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 388.330728][ T21] ? lock_chain_count+0x20/0x20 [ 388.335596][ T21] ? mark_lock+0x94/0x320 [ 388.339965][ T21] ? __cancel_work_timer+0x36a/0x560 [ 388.345275][ T21] __cancel_work_timer+0x3f4/0x560 [ 388.350392][ T21] ? cancel_work_sync+0x20/0x20 [ 388.355255][ T21] ? __cancel_work+0x1f9/0x2e0 [ 388.360022][ T21] ? lockdep_hardirqs_on+0x94/0x140 [ 388.365236][ T21] ? __cancel_work+0x27b/0x2e0 [ 388.370008][ T21] ? cancel_work+0x20/0x20 [ 388.374439][ T21] hci_request_cancel_all+0xcc/0x300 [ 388.378931][ T7275] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 388.379737][ T21] hci_dev_do_close+0x4e/0x1030 [ 388.395259][ T21] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 388.401163][ T21] ? _raw_spin_unlock+0x40/0x40 [ 388.406025][ T21] ? kobject_uevent_env+0x371/0x890 [ 388.411230][ T21] hci_rfkill_set_block+0x10a/0x190 [ 388.416442][ T21] ? rcu_lock_release+0x20/0x20 [ 388.421306][ T21] rfkill_set_block+0x1c6/0x420 [ 388.426179][ T21] rfkill_epo+0x75/0x170 [ 388.430434][ T21] rfkill_op_handler+0x76/0x220 [ 388.435298][ T21] process_one_work+0x85f/0x1010 [ 388.440260][ T21] ? worker_detach_from_pool+0x240/0x240 [ 388.445903][ T21] ? lockdep_hardirqs_off+0x70/0x100 [ 388.446701][ T7275] usb 6-1: USB disconnect, device number 11 [ 388.451201][ T21] ? _raw_spin_lock_irq+0xb7/0xf0 [ 388.451222][ T21] ? _raw_spin_lock_irqsave+0x100/0x100 [ 388.451241][ T21] ? wq_worker_running+0x97/0x170 [ 388.451260][ T21] worker_thread+0xaa6/0x1290 [ 388.451292][ T21] kthread+0x436/0x520 [ 388.481507][ T21] ? rcu_lock_release+0x20/0x20 [ 388.486370][ T21] ? kthread_blkcg+0xd0/0xd0 [ 388.490980][ T21] ret_from_fork+0x1f/0x30 [ 388.495455][ T21] [ 388.507735][ T7275] usblp0: removed [ 390.609269][ T1336] vhci_hcd: vhci_device speed not set