last executing test programs: 10m56.343942341s ago: executing program 3 (id=700): mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) r3 = semget(0x2, 0x3, 0x33a) semtimedop(r3, 0x0, 0xf401, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) r4 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000300)='source\x00', &(0x7f0000000400)='127.0.0.1:6789:/tmp\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000001c0)=@filename='./debug\x00', 0x0, &(0x7f0000000240)) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 10m50.652737737s ago: executing program 3 (id=709): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x8, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 10m46.643042302s ago: executing program 3 (id=715): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94) r4 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) 10m43.607013474s ago: executing program 3 (id=720): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 10m42.651867477s ago: executing program 3 (id=722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) flock(r1, 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) 10m41.001322516s ago: executing program 3 (id=724): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x1, 0x3, 0x7, 0xf34}) 10m33.342174309s ago: executing program 2 (id=731): syz_usb_connect(0x6, 0x371, &(0x7f00000005c0)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) msgget$private(0x0, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141142) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) 10m29.878592132s ago: executing program 2 (id=734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x8, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 10m28.728077549s ago: executing program 2 (id=735): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) io_setup(0x20fe, 0x0) r4 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0, 0x2b}, 0x8, 0x0, 0xb00, 0x24}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000146000/0x2000)=nil, 0x2000, 0xb, 0x28011, r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/all/keep_addr_on_down\x00', 0x1, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'lo\x00'}) 10m25.821853348s ago: executing program 32 (id=724): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x1, 0x3, 0x7, 0xf34}) 10m23.925098864s ago: executing program 2 (id=740): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) lseek(0xffffffffffffffff, 0x2, 0x1) mknodat(0xffffffffffffffff, 0x0, 0x200, 0xa) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f00000005c0)="2704d2ee2021068535d6b164") fremovexattr(r1, 0x0) syz_read_part_table(0x59e, &(0x7f0000000000)="$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") 10m15.333503498s ago: executing program 2 (id=752): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) pipe(0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x200002e6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) io_setup(0x20fe, 0x0) r2 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0, 0x2b}, 0x8, 0x0, 0xb00, 0x24}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000146000/0x2000)=nil, 0x2000, 0xb, 0x28011, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/all/keep_addr_on_down\x00', 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'lo\x00'}) 10m9.80353495s ago: executing program 2 (id=759): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) lseek(0xffffffffffffffff, 0x2, 0x1) mknodat(0xffffffffffffffff, 0x0, 0x200, 0xa) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f00000005c0)="2704d2ee2021068535d6b164") fremovexattr(r1, 0x0) syz_read_part_table(0x59e, &(0x7f0000000000)="$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") 9m54.101694105s ago: executing program 33 (id=759): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) lseek(0xffffffffffffffff, 0x2, 0x1) mknodat(0xffffffffffffffff, 0x0, 0x200, 0xa) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f00000005c0)="2704d2ee2021068535d6b164") fremovexattr(r1, 0x0) syz_read_part_table(0x59e, &(0x7f0000000000)="$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") 5m53.045406671s ago: executing program 1 (id=1079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) flock(r1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 5m50.859767872s ago: executing program 1 (id=1083): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) getdents(r4, 0x0, 0x0) read$msr(r4, &(0x7f0000000080)=""/30, 0x1e) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 5m46.094917006s ago: executing program 1 (id=1087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r5, 0x541b, 0x0) ioctl(r5, 0x5451, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f00000020c0)=""/4052, &(0x7f0000000000)=0xfd4) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f024}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5m44.993512642s ago: executing program 1 (id=1090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) getdents(r4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000000080)=""/30, 0x1e) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 5m40.345475163s ago: executing program 1 (id=1093): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffc) 5m38.151900476s ago: executing program 1 (id=1095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) getdents(r4, 0x0, 0x0) read$msr(r4, &(0x7f0000000080)=""/30, 0x1e) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 5m23.044950566s ago: executing program 34 (id=1095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) getdents(r4, 0x0, 0x0) read$msr(r4, &(0x7f0000000080)=""/30, 0x1e) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 3m55.031216233s ago: executing program 4 (id=1189): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b"], &(0x7f00002bf000)='GPL\x00', 0x4}, 0x94) socket$kcm(0x29, 0x2, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) 3m52.389600707s ago: executing program 4 (id=1190): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m51.963848557s ago: executing program 4 (id=1192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r4, 0x0) ioctl(0xffffffffffffffff, 0x541b, 0x0) ioctl(0xffffffffffffffff, 0x5451, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f00000020c0)=""/4052, &(0x7f0000000000)=0xfd4) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) openat$null(0xffffffffffffff9c, &(0x7f0000002840), 0x101101, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m50.479249332s ago: executing program 4 (id=1195): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x8, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 3m48.904418019s ago: executing program 4 (id=1196): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r4}, 0x38) r5 = fsopen(&(0x7f00000006c0)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf250200000000000000040005"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) 3m47.559583282s ago: executing program 4 (id=1197): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary) unshare(0x8060400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}}) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x840, 0x0) r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) 3m30.902588079s ago: executing program 35 (id=1197): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary) unshare(0x8060400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}}) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x840, 0x0) r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) 9.541172607s ago: executing program 7 (id=1565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000201010400000000000000000200100024000280140001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) 8.104032252s ago: executing program 7 (id=1570): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x0) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="40020202"], 0x5) write$nci(r0, 0x0, 0x0) 7.830196298s ago: executing program 7 (id=1574): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004057a213200100000000010902200001010080fa0904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000200)="0e00300000000100000000020000") syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000082505a8a44000010298ff18ca8b03e4ee1d2b5f5594c10005090400"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000"], 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) syz_usb_connect(0x0, 0xdd, 0x0, 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, &(0x7f00000000c0)) syz_usb_disconnect(r1) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) 5.873632106s ago: executing program 0 (id=1580): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.73242246s ago: executing program 0 (id=1583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.73151558s ago: executing program 6 (id=1584): r0 = socket(0x1e, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) listen(r0, 0x0) r4 = socket(0x1e, 0x805, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, @in=@remote, {0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x470bd25, 0x0, 0x2, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'ecb(arc4)\x00'}}}]}, 0x180}}, 0x4810) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, 0x20040001) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008b00000000000000013e110018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500ffff0000f3ff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) 5.366371549s ago: executing program 0 (id=1586): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x13, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2, 0x8, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000540)=[{0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xf, 0x2}, {0x2, 0x3, 0x3, 0xa}], 0x10, 0x6}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000500)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r3, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 5.364205449s ago: executing program 5 (id=1587): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, &(0x7f0000000040)=ANY=[], 0x2a) write(r0, &(0x7f0000000000)="8016f8aade2c2048c0e3f84d428a1155e721eafed25f5043caeba714c1085844d148b210db689e77a218", 0x2a) 5.300983s ago: executing program 0 (id=1588): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824441, 0x0, 0x1, 0x0, &(0x7f0000000d40)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000000001002abd7000fbdbdf2517000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004001) fsmount(0xffffffffffffffff, 0x0, 0xa) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x2000c050) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x115d038, 0x0, 0x40, 0x0, &(0x7f0000000140)) 5.175932363s ago: executing program 5 (id=1589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 5.072858045s ago: executing program 5 (id=1590): r0 = socket(0x1, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) listen(r1, 0x0) listen(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000000c0)) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x33, 0x8, 0x2f, 0x6, 0x40000, 0x4, 0x2, 0x81}}) 2.863742959s ago: executing program 7 (id=1591): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.811868481s ago: executing program 6 (id=1592): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x13, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2, 0x8, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000540)=[{0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xf, 0x2}, {0x2, 0x3, 0x3, 0xa}], 0x10, 0x6}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000010428bd70000100000000130000", @ANYRES32=0x0, @ANYBLOB="08000000000001002c00128009000100766c616e000000001c000280060001000200000006000100020000000600050088a8000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.990001971s ago: executing program 5 (id=1593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e0001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 1.792143346s ago: executing program 7 (id=1594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.778890776s ago: executing program 0 (id=1595): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b"], 0x15) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000640)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) chdir(&(0x7f0000000040)='./file0\x00') symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb000000200000002000000007000000030000000100000f00000004000000000000000002000000000000040000000000006161"], &(0x7f0000002200)=""/4110, 0x3f, 0x100e, 0x1}, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x10c842, 0xd0) 1.718378278s ago: executing program 6 (id=1596): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="068a61d9b4b11fd6e42c2ad6b4a648106035494bde9d8df20fec29315fc8a8d5401ff7d0541e39a97fbdb0cd0596a875ca29bd6764e7eabbb6a1139531a48dc397ce4ab229e1c785f1fa605cf7a8fd60eddcd9844ba7cd9ead2d78d64b984cd062b035620bdcb8941227b8f79f55137e2af79816d883df781b559b65af58680d878fd0f5188253a5d3", 0x89}, {&(0x7f0000000700)="b240347982018a58f92ecd89d3d51c29f1bc9f61f330fd3be8e4c25585c109981476ed10a582e56146bd545145d414b55136209c9db9f9a39bedb59b4bf999cac4cbea070ef87f5457e05cd1e7cf968325f1292fe8c64b423433c9c6f8efedd10c8fe40b9af4d4d7272ed1d1ce6d6153cc66b4c377ba8b4f84986884aed73d0e5dce61926fac393fbc81be3232da06fd23e5a474ca4fecb997", 0x99}, {0x0}, {&(0x7f0000000440)="c2b0b42802519bb1ba7cfba9b5020768245ee4f92c810fb17007724e335e3696b2ab190e2c7a5c0f3abe57985449e4b3eed41cbc96959c400b50b9d3acc6", 0x3e}, {&(0x7f0000000900)="8bf7f307acd35bb1679e934e41ee850447bef844a9147520ecc01d7b2855597b3da3de28c1aacf968f3957ea", 0x2c}], 0x5}}], 0x1, 0x4000840) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3", 0xa3}, {&(0x7f0000001000)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020", 0xba}, {&(0x7f0000000140)="641a6a2b863c080000003a3f97a834ebb75a925ab4", 0x15}], 0x3}}], 0x1, 0x4000900) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.692074078s ago: executing program 5 (id=1597): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x13, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2, 0x8, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000540)=[{0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xf, 0x2}, {0x2, 0x3, 0x3, 0xa}], 0x10, 0x6}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000010428bd70000100000000130000", @ANYRES32=0x0, @ANYBLOB="08000000000001002c00128009000100766c616e000000001c000280060001000200000006000100020000000600050088a8000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.543532902s ago: executing program 6 (id=1598): syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffd64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 1.327379087s ago: executing program 6 (id=1599): socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 466.026818ms ago: executing program 0 (id=1600): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='rd_pa', 0x5) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) 206.891524ms ago: executing program 5 (id=1601): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) sendmsg$nl_route(r0, 0x0, 0x40050) 27.818608ms ago: executing program 7 (id=1602): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 6 (id=1603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): : inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 329.883690][ T6511] udevd[6511]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 330.318920][ T6775] udevd[6775]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 332.774048][ T7734] loop3: detected capacity change from 0 to 2048 [ 332.874190][ T7734] Alternate GPT is invalid, using primary GPT. [ 332.880612][ T7734] loop3: p2 p3 p7 [ 337.673359][ T5779] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 337.878076][ T7769] ceph: No mds server is up or the cluster is laggy [ 339.917052][ T7790] ceph: No mds server is up or the cluster is laggy [ 340.601124][ T7801] loop2: detected capacity change from 0 to 2048 [ 340.715957][ T7801] Alternate GPT is invalid, using primary GPT. [ 340.722437][ T7801] loop2: p2 p3 p7 [ 341.981688][ T6658] udevd[6658]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 342.003852][ T6453] udevd[6453]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 342.027381][ T6775] udevd[6775]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 342.239927][ T7817] netlink: 36 bytes leftover after parsing attributes in process `syz.3.522'. [ 343.559306][ T7828] netlink: 36 bytes leftover after parsing attributes in process `syz.2.524'. [ 348.973804][ T7865] ceph: No mds server is up or the cluster is laggy [ 354.411638][ T7916] ceph: No mds server is up or the cluster is laggy [ 357.515968][ T7941] ceph: No mds server is up or the cluster is laggy [ 358.459474][ T7951] ceph: No mds server is up or the cluster is laggy [ 359.983482][ T7968] ceph: No mds server is up or the cluster is laggy [ 363.800778][ T7994] ceph: No mds server is up or the cluster is laggy [ 365.230098][ T8015] ceph: No mds server is up or the cluster is laggy [ 366.316792][ T8035] ceph: No mds server is up or the cluster is laggy [ 366.385590][ T8039] ceph: No mds server is up or the cluster is laggy [ 367.461889][ T8047] ceph: No mds server is up or the cluster is laggy [ 368.567439][ T8059] ceph: No mds server is up or the cluster is laggy [ 370.127825][ T8077] ceph: No mds server is up or the cluster is laggy [ 371.345831][ T8087] ceph: No mds server is up or the cluster is laggy [ 372.405266][ T8098] ceph: No mds server is up or the cluster is laggy [ 373.204319][ T8104] ceph: No mds server is up or the cluster is laggy [ 373.941994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 377.609965][ T8153] ceph: No mds server is up or the cluster is laggy [ 377.904725][ T8155] ceph: No mds server is up or the cluster is laggy [ 378.834991][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.433917][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.600'. [ 383.662325][ T8222] ceph: No mds server is up or the cluster is laggy [ 383.868426][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 388.852216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 391.412193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 393.372074][ T8298] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 396.532233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 398.572807][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'. [ 400.153961][ T8343] ceph: No mds server is up or the cluster is laggy [ 401.652294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 406.771931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 411.591414][ T8410] loop2: detected capacity change from 0 to 2048 [ 416.799294][ T8429] loop3: detected capacity change from 0 to 2048 [ 416.908762][ T8429] Alternate GPT is invalid, using primary GPT. [ 416.915878][ T8429] loop3: p2 p3 p7 [ 417.039550][ T5140] Alternate GPT is invalid, using primary GPT. [ 417.169211][ T5140] loop3: p2 p3 p7 [ 420.233083][ T8323] udevd[8323]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 420.264225][ T8332] udevd[8332]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 420.281073][ T8433] udevd[8433]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 421.467600][ T8453] ceph: No mds server is up or the cluster is laggy [ 424.279396][ T8473] loop2: detected capacity change from 0 to 2048 [ 424.443999][ T8473] Alternate GPT is invalid, using primary GPT. [ 424.450526][ T8473] loop2: p2 p3 p7 [ 427.908072][ T8493] loop3: detected capacity change from 0 to 2048 [ 428.499051][ T8493] Alternate GPT is invalid, using primary GPT. [ 428.671521][ T8493] loop3: p2 p3 p7 [ 436.484258][ T8533] ceph: No mds server is up or the cluster is laggy [ 440.039836][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.061122][ T8593] loop2: detected capacity change from 0 to 2048 [ 441.204227][ T8593] Alternate GPT is invalid, using primary GPT. [ 441.211160][ T8593] loop2: p2 p3 p7 [ 443.473349][ T8585] ceph: No mds server is up or the cluster is laggy [ 443.634869][ T8323] udevd[8323]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 443.638947][ T8332] udevd[8332]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 443.665538][ T8482] udevd[8482]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 449.111638][ T8634] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 450.194880][ T8645] ceph: No mds server is up or the cluster is laggy [ 451.966484][ T8654] ceph: No mds server is up or the cluster is laggy [ 462.432012][ T8704] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 471.342837][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 471.361790][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 471.370864][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 471.379973][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 471.412854][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 471.436898][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 472.300671][ T8735] chnl_net:caif_netlink_parms(): no params data found [ 472.505351][ T3456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.559822][ T8735] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.582019][ T8735] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.589316][ T8735] bridge_slave_0: entered allmulticast mode [ 472.614534][ T8735] bridge_slave_0: entered promiscuous mode [ 472.658077][ T3456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.691855][ T8735] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.699341][ T8752] loop2: detected capacity change from 0 to 2048 [ 472.706275][ T8735] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.732104][ T8735] bridge_slave_1: entered allmulticast mode [ 472.739555][ T8735] bridge_slave_1: entered promiscuous mode [ 472.802544][ T8752] Alternate GPT is invalid, using primary GPT. [ 472.851940][ T8752] loop2: p2 p3 p7 [ 472.872614][ T3456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.987084][ T3456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.065836][ T8735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.128639][ T8735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.259185][ T8735] team0: Port device team_slave_0 added [ 473.302083][ T8735] team0: Port device team_slave_1 added [ 473.414239][ T8735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.430169][ T8735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.491826][ T8735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.532038][ T5790] Bluetooth: hci4: command tx timeout [ 473.552528][ T8735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.568497][ T8735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.631774][ T8735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.823174][ T8735] hsr_slave_0: entered promiscuous mode [ 473.862391][ T8735] hsr_slave_1: entered promiscuous mode [ 473.880023][ T8735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.909131][ T8735] Cannot create hsr debugfs directory [ 475.613628][ T5790] Bluetooth: hci4: command tx timeout [ 476.466401][ T8777] ceph: No mds server is up or the cluster is laggy [ 476.761849][ T8735] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 476.785458][ T8735] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 476.852597][ T8735] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 476.875247][ T8735] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 478.131784][ T5790] Bluetooth: hci4: command tx timeout [ 479.019956][ T3456] hsr_slave_0: left promiscuous mode [ 479.387716][ T3456] hsr_slave_1: left promiscuous mode [ 479.402818][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.421935][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.440568][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.448813][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.456914][ T3456] bridge_slave_1: left allmulticast mode [ 479.462760][ T3456] bridge_slave_1: left promiscuous mode [ 479.478739][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.490087][ T3456] bridge_slave_0: left allmulticast mode [ 479.499229][ T3456] bridge_slave_0: left promiscuous mode [ 479.508393][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.777884][ T3456] veth1_macvtap: left promiscuous mode [ 479.789130][ T3456] veth0_macvtap: left promiscuous mode [ 479.811899][ T3456] veth1_vlan: left promiscuous mode [ 479.817548][ T3456] veth0_vlan: left promiscuous mode [ 480.172053][ T5790] Bluetooth: hci4: command tx timeout [ 484.397815][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 484.476985][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 484.522499][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.562591][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.547292][ T3456] bond0 (unregistering): Released all slaves [ 485.926440][ T8735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.985714][ T8735] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.137568][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.144807][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.553453][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.560709][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.111888][ T8735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.323993][ T8864] loop2: detected capacity change from 0 to 2048 [ 488.475436][ T8864] Alternate GPT is invalid, using primary GPT. [ 489.554395][ T8864] loop2: p2 p3 p7 [ 490.177948][ T8735] veth0_vlan: entered promiscuous mode [ 490.229197][ T8735] veth1_vlan: entered promiscuous mode [ 490.329153][ T8735] veth0_macvtap: entered promiscuous mode [ 490.368225][ T8735] veth1_macvtap: entered promiscuous mode [ 490.431431][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.455045][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.470475][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.491949][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.512809][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.528569][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.089819][ T8886] rtc_cmos 00:00: Alarms can be up to one day in the future [ 492.094528][ T8735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.179295][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.221910][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.252031][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.280561][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.307174][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.346921][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.372849][ T8735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.415290][ T8735] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.461828][ T8735] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.470612][ T8735] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.526606][ T8735] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.881710][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.889686][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.990524][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.019425][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.772626][ T5846] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 496.787166][ T8913] ceph: No mds server is up or the cluster is laggy [ 499.214190][ T8940] ceph: No mds server is up or the cluster is laggy [ 501.459351][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.679321][ T5140] Alternate GPT is invalid, using primary GPT. [ 501.731865][ T5140] loop2: p2 p3 p7 [ 503.842563][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 503.864813][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 503.874416][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 503.891999][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 503.902441][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 503.913675][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 506.033134][ T5789] Bluetooth: hci0: command tx timeout [ 506.317351][ T3456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.447631][ T3456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.689692][ T3456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.874423][ T3456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.092461][ T5789] Bluetooth: hci0: command tx timeout [ 508.120961][ T8983] chnl_net:caif_netlink_parms(): no params data found [ 508.589403][ T8983] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.599041][ T8983] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.606478][ T8983] bridge_slave_0: entered allmulticast mode [ 508.615199][ T8983] bridge_slave_0: entered promiscuous mode [ 508.752242][ T8983] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.776446][ T8983] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.788140][ T8983] bridge_slave_1: entered allmulticast mode [ 508.806307][ T8983] bridge_slave_1: entered promiscuous mode [ 508.923985][ T8983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.995317][ T8983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.155830][ T8983] team0: Port device team_slave_0 added [ 509.224044][ T8983] team0: Port device team_slave_1 added [ 509.376873][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.392891][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.433542][ T8983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.595663][ T8983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.622367][ T8983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.699636][ T8983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.967457][ T8983] hsr_slave_0: entered promiscuous mode [ 510.012365][ T8983] hsr_slave_1: entered promiscuous mode [ 510.171742][ T5789] Bluetooth: hci0: command tx timeout [ 510.789890][ T3456] hsr_slave_0: left promiscuous mode [ 510.819247][ T3456] hsr_slave_1: left promiscuous mode [ 512.389967][ T5789] Bluetooth: hci0: command tx timeout [ 512.451849][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.459313][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.473176][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.480605][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.513404][ T3456] bridge_slave_1: left allmulticast mode [ 512.519101][ T3456] bridge_slave_1: left promiscuous mode [ 512.821095][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.853242][ T3456] bridge_slave_0: left allmulticast mode [ 512.859383][ T3456] bridge_slave_0: left promiscuous mode [ 512.866233][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.163548][ T3456] veth1_macvtap: left promiscuous mode [ 513.191489][ T3456] veth0_macvtap: left promiscuous mode [ 513.214532][ T3456] veth1_vlan: left promiscuous mode [ 513.219971][ T3456] veth0_vlan: left promiscuous mode [ 513.409611][ T9066] ceph: No mds server is up or the cluster is laggy [ 517.301971][ T9100] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 521.362698][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 521.437800][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 521.915182][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.620144][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.576714][ T9151] rtc_cmos 00:00: Alarms can be up to one day in the future [ 529.553231][ T3456] bond0 (unregistering): Released all slaves [ 530.043052][ T8983] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 530.082498][ T8983] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 530.227363][ T8983] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 530.346710][ T8983] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 532.346823][ T8983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.415615][ T8983] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.682432][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.689645][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.812611][ T9177] ceph: No mds server is up or the cluster is laggy [ 532.859044][ T4474] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.866344][ T4474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.104875][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 533.534848][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 533.558776][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.575063][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 533.598533][ T27] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 533.624879][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.676301][ T27] usb 5-1: config 0 descriptor?? [ 533.985678][ T8983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.591465][ T8983] veth0_vlan: entered promiscuous mode [ 534.647021][ T8983] veth1_vlan: entered promiscuous mode [ 534.772906][ T8983] veth0_macvtap: entered promiscuous mode [ 534.793294][ T8983] veth1_macvtap: entered promiscuous mode [ 534.833248][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.862375][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.882716][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.911716][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.921583][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.962555][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.987377][ T8983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.018525][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.608446][ T27] usbhid 5-1:0.0: can't add hid device: -71 [ 535.734725][ T27] usbhid: probe of 5-1:0.0 failed with error -71 [ 535.861741][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.948782][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.966234][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.976450][ T27] usb 5-1: USB disconnect, device number 2 [ 535.981757][ T8983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.013814][ T8983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.039309][ T8983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.104444][ T8983] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.210215][ T8983] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.262398][ T8983] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.327622][ T8983] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.395848][ T4456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.437582][ T4456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.751907][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 537.071965][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 537.149603][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.704176][ T9230] rtc_cmos 00:00: Alarms can be up to one day in the future [ 538.681733][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 538.709030][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 538.721474][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.735425][ T23] usb 1-1: config 0 descriptor?? [ 538.775295][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.814059][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.042804][ T9236] rtc_cmos 00:00: Alarms can be up to one day in the future [ 540.818786][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 540.825532][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 540.848847][ T23] usb 1-1: USB disconnect, device number 2 [ 541.595696][ T9244] rtc_cmos 00:00: Alarms can be up to one day in the future [ 550.043441][ T9298] rtc_cmos 00:00: Alarms can be up to one day in the future [ 552.637970][ T9305] ceph: No mds server is up or the cluster is laggy [ 553.947931][ T9323] rtc_cmos 00:00: Alarms can be up to one day in the future [ 557.331992][ T969] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 557.631926][ T969] usb 1-1: Using ep0 maxpacket: 16 [ 557.709933][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.740472][ T969] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 558.303786][ T9351] rtc_cmos 00:00: Alarms can be up to one day in the future [ 559.271913][ T969] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 559.281017][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.325699][ T969] usb 1-1: config 0 descriptor?? [ 560.741493][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 560.890440][ T969] usbhid 1-1:0.0: can't add hid device: -71 [ 560.896886][ T969] usbhid: probe of 1-1:0.0 failed with error -71 [ 561.941830][ T23] usb 6-1: device descriptor read/64, error -71 [ 561.949730][ T969] usb 1-1: USB disconnect, device number 3 [ 562.371672][ T9382] rtc_cmos 00:00: Alarms can be up to one day in the future [ 563.600868][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.657114][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 568.589934][ T9426] netlink: 48 bytes leftover after parsing attributes in process `syz.1.845'. [ 574.247583][ T9462] rtc_cmos 00:00: Alarms can be up to one day in the future [ 577.161743][ T9239] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 577.400207][ T9239] usb 6-1: no configurations [ 577.407314][ T9239] usb 6-1: can't read configurations, error -22 [ 577.567666][ T9239] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 577.819982][ T9239] usb 6-1: no configurations [ 577.826453][ T9239] usb 6-1: can't read configurations, error -22 [ 578.033642][ T9239] usb usb6-port1: attempt power cycle [ 586.954418][ T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 587.336750][ T27] usb 5-1: no configurations [ 587.341487][ T27] usb 5-1: can't read configurations, error -22 [ 588.216588][ T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 593.911921][ T9630] netlink: 40 bytes leftover after parsing attributes in process `syz.4.881'. [ 596.004476][ T5790] Bluetooth: hci4: command 0x0406 tx timeout [ 596.081736][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 596.287445][ T27] usb 1-1: no configurations [ 596.309750][ T27] usb 1-1: can't read configurations, error -22 [ 596.483611][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 601.101403][ T9682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.890'. [ 604.483117][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 606.023015][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.062161][ T9] usb 5-1: config 0 has no interfaces? [ 606.067755][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 606.111857][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.180477][ T9] usb 5-1: config 0 descriptor?? [ 606.463727][ T27] usb 5-1: USB disconnect, device number 5 [ 614.841697][ T788] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 615.820434][ T788] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.831168][ T788] usb 5-1: config 0 has no interfaces? [ 615.841963][ T788] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 615.851064][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.875455][ T788] usb 5-1: config 0 descriptor?? [ 617.323274][ T8] usb 5-1: USB disconnect, device number 6 [ 621.767840][ T9876] rtc_cmos 00:00: Alarms can be up to one day in the future [ 624.350388][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.161697][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 637.088678][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 637.518408][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 637.537352][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.571764][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 637.605646][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 637.631818][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.665637][ T9] usb 5-1: config 0 descriptor?? [ 640.361941][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 640.391816][ T9] usbhid: probe of 5-1:0.0 failed with error -71 [ 640.483009][ T9] usb 5-1: USB disconnect, device number 7 [ 652.064636][ T969] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 652.412769][ T969] usb 1-1: Using ep0 maxpacket: 16 [ 652.428563][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.472485][ T969] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 652.530974][ T969] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 652.578594][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.768309][ T969] usb 1-1: config 0 descriptor?? [ 655.371199][ T969] usbhid 1-1:0.0: can't add hid device: -71 [ 655.391939][ T969] usbhid: probe of 1-1:0.0 failed with error -71 [ 655.408283][ T969] usb 1-1: USB disconnect, device number 6 [ 667.946920][T10244] ceph: No mds server is up or the cluster is laggy [ 669.584404][T10271] rtc_cmos 00:00: Alarms can be up to one day in the future [ 673.552247][T10296] rtc_cmos 00:00: Alarms can be up to one day in the future [ 679.411849][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 685.781874][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.698014][T10395] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 697.800516][T10456] rtc_cmos 00:00: Alarms can be up to one day in the future [ 703.854942][T10488] rtc_cmos 00:00: Alarms can be up to one day in the future [ 705.066224][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 705.895509][T10497] ceph: No mds server is up or the cluster is laggy [ 706.111714][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 706.152394][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.209206][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 706.251807][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 706.271449][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.395627][ T8] usb 5-1: config 0 descriptor?? [ 708.222543][T10501] rtc_cmos 00:00: Alarms can be up to one day in the future [ 708.879043][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 708.909008][ T8] usbhid: probe of 5-1:0.0 failed with error -71 [ 708.961306][ T8] usb 5-1: USB disconnect, device number 8 [ 714.191594][T10528] rtc_cmos 00:00: Alarms can be up to one day in the future [ 718.114962][T10558] rtc_cmos 00:00: Alarms can be up to one day in the future [ 727.882575][T10602] rtc_cmos 00:00: Alarms can be up to one day in the future [ 736.771763][ T9239] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 737.704828][ T9239] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 737.779350][ T9239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.830262][ T9239] usb 6-1: config 0 descriptor?? [ 738.753023][ T9239] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 740.546665][ T9239] usb 6-1: USB disconnect, device number 7 [ 746.726985][ T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 746.913902][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 746.930729][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.951854][ T8] usb 6-1: config 0 descriptor?? [ 746.990819][ T8] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 747.218376][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.811582][T10732] netlink: 'syz.0.1086': attribute type 5 has an invalid length. [ 749.833120][ T8] usb 6-1: USB disconnect, device number 8 [ 760.052233][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 761.773908][T10791] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 762.904010][ T8] usb 1-1: device descriptor read/all, error -71 [ 763.353214][T10804] netlink: 'syz.0.1100': attribute type 5 has an invalid length. [ 771.544860][T10841] netlink: 'syz.0.1102': attribute type 5 has an invalid length. [ 777.760262][ T4474] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.786298][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 777.797287][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 777.805179][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 777.813360][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 777.823437][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 777.830785][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 778.138692][ T4474] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.363023][ T5790] Bluetooth: hci2: command tx timeout [ 781.596773][ T4474] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.893277][ T5790] Bluetooth: hci2: command tx timeout [ 783.823014][T10923] rtc_cmos 00:00: Alarms can be up to one day in the future [ 784.483860][ T4474] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.567883][ T5790] Bluetooth: hci2: command tx timeout [ 785.830630][T10880] chnl_net:caif_netlink_parms(): no params data found [ 787.182523][T10935] rtc_cmos 00:00: Alarms can be up to one day in the future [ 787.611929][ T5790] Bluetooth: hci2: command tx timeout [ 789.053266][T10880] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.080901][T10880] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.116644][T10880] bridge_slave_0: entered allmulticast mode [ 789.135397][T10880] bridge_slave_0: entered promiscuous mode [ 789.184696][T10880] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.207437][T10880] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.239678][T10880] bridge_slave_1: entered allmulticast mode [ 789.269678][T10880] bridge_slave_1: entered promiscuous mode [ 791.334861][T10967] rtc_cmos 00:00: Alarms can be up to one day in the future [ 792.462402][T10880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.525264][T10880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.720170][T10880] team0: Port device team_slave_0 added [ 792.752923][T10964] netlink: 'syz.5.1123': attribute type 5 has an invalid length. [ 792.959717][T10880] team0: Port device team_slave_1 added [ 793.191375][T10880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.229849][T10880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.252443][T10983] input: syz1 as /devices/virtual/input/input5 [ 793.311600][T10880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.343795][T10880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.350872][T10880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.421592][T10880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.802231][T10880] hsr_slave_0: entered promiscuous mode [ 793.811456][T10880] hsr_slave_1: entered promiscuous mode [ 793.822424][T10880] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 793.840192][T10880] Cannot create hsr debugfs directory [ 794.088256][T10978] syz.0.1127 (10978): drop_caches: 2 [ 796.118828][ T4474] hsr_slave_0: left promiscuous mode [ 796.179381][ T4474] hsr_slave_1: left promiscuous mode [ 796.199907][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.253908][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.292115][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.299565][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.377602][ T4474] bridge_slave_1: left allmulticast mode [ 796.401662][ T4474] bridge_slave_1: left promiscuous mode [ 796.423173][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.501720][ T4474] bridge_slave_0: left allmulticast mode [ 796.512793][ T4474] bridge_slave_0: left promiscuous mode [ 796.542339][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.784496][ T4474] veth1_macvtap: left promiscuous mode [ 796.790108][ T4474] veth0_macvtap: left promiscuous mode [ 797.175457][ T4474] veth1_vlan: left promiscuous mode [ 797.200555][ T4474] veth0_vlan: left promiscuous mode [ 802.781668][T11023] syz.5.1135 (11023): drop_caches: 2 [ 807.163699][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 807.275194][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 807.345501][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.432281][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.360362][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.958048][ T4474] bond0 (unregistering): Released all slaves [ 813.874658][T11036] netlink: 'syz.0.1137': attribute type 5 has an invalid length. [ 814.358185][T10880] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 814.381206][T10880] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 814.430323][T10880] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 814.515030][T10880] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 814.818428][T11074] syz.4.1143 (11074): drop_caches: 2 [ 814.870144][T10880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.949243][T10880] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.032199][ T987] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.039409][ T987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.103592][ T987] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.110804][ T987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.815604][T11094] rtc_cmos 00:00: Alarms can be up to one day in the future [ 822.446877][T10880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.434226][T10880] veth0_vlan: entered promiscuous mode [ 826.486358][T10880] veth1_vlan: entered promiscuous mode [ 826.610171][T10880] veth0_macvtap: entered promiscuous mode [ 826.644056][T10880] veth1_macvtap: entered promiscuous mode [ 826.693636][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.741579][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.751452][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.811595][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.841672][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.849817][T11159] input: syz1 as /devices/virtual/input/input6 [ 826.871553][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.903003][T10880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.986198][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.041712][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.071629][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.112319][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.141596][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.171729][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.202893][T10880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.252176][T10880] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.260929][T10880] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.321587][T10880] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.330994][T10880] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.661898][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.669863][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.687530][T11169] syz.4.1155 (11169): drop_caches: 2 [ 827.711821][T11157] syz.0.1156 (11157): drop_caches: 2 [ 827.743074][T11169] input: syz1 as /devices/virtual/input/input7 [ 827.827737][T10590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.853666][T10590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.177461][T11192] syz.6.1160 (11192): drop_caches: 2 [ 833.940654][T11202] netlink: 'syz.4.1161': attribute type 5 has an invalid length. [ 837.061263][T11211] syz.6.1163 (11211): drop_caches: 2 [ 837.089759][T11216] input: syz1 as /devices/virtual/input/input8 [ 838.472548][T11226] netlink: 'syz.6.1167': attribute type 5 has an invalid length. [ 842.319406][T11238] syz.4.1162 (11238): drop_caches: 2 [ 843.989848][T11259] input: syz1 as /devices/virtual/input/input10 [ 844.096087][T11255] syz.5.1169 (11255): drop_caches: 2 [ 853.951816][T11312] syz.4.1180 (11312): drop_caches: 2 [ 854.534232][T11321] syz.6.1175 (11321): drop_caches: 2 [ 859.333346][T11348] syz.4.1186 (11348): drop_caches: 2 [ 859.376671][T11348] input: syz1 as /devices/virtual/input/input12 [ 863.227588][T11360] rtc_cmos 00:00: Alarms can be up to one day in the future [ 863.967233][T11383] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1187'. [ 866.849313][T11406] syz.0.1194 (11406): drop_caches: 2 [ 866.962224][T11412] input: syz1 as /devices/virtual/input/input13 [ 866.982872][T11401] syz.6.1193 (11401): drop_caches: 2 [ 868.180496][T11416] netlink: 'syz.4.1196': attribute type 5 has an invalid length. [ 870.352443][T11428] rtc_cmos 00:00: Alarms can be up to one day in the future [ 870.381436][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.764292][T11460] syz.5.1204 (11460): drop_caches: 2 [ 878.576072][T11475] syz.6.1203 (11475): drop_caches: 2 [ 879.108475][T11484] syz.5.1205 (11484): drop_caches: 2 [ 879.637186][T11489] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1206'. [ 881.243944][T11509] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1212'. [ 885.913202][T11520] netlink: 'syz.6.1215': attribute type 5 has an invalid length. [ 886.685131][ T9059] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 886.694884][ T9059] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 886.703343][ T9059] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 886.711849][ T9059] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 886.719294][ T9059] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 886.727166][ T9059] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 888.689957][T11561] syz.6.1218 (11561): drop_caches: 2 [ 888.814670][ T9059] Bluetooth: hci3: command tx timeout [ 888.845926][T11560] input: syz1 as /devices/virtual/input/input18 [ 889.185107][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.310738][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.349384][T11569] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1216'. [ 891.911668][ T9059] Bluetooth: hci3: command tx timeout [ 891.933828][T11577] syz.5.1220 (11577): drop_caches: 2 [ 892.018181][T11577] input: syz1 as /devices/virtual/input/input19 [ 892.131421][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.222951][T11574] netlink: 'syz.6.1219': attribute type 5 has an invalid length. [ 892.399805][T11530] chnl_net:caif_netlink_parms(): no params data found [ 892.593209][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.524613][T11588] syz.5.1223 (11588): drop_caches: 2 [ 893.708475][T11594] syz.0.1224 (11594): drop_caches: 2 [ 893.776376][T11594] input: syz1 as /devices/virtual/input/input21 [ 893.931619][ T9059] Bluetooth: hci3: command tx timeout [ 895.663077][T11530] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.704972][T11530] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.761876][T11530] bridge_slave_0: entered allmulticast mode [ 895.790214][T11530] bridge_slave_0: entered promiscuous mode [ 895.836724][T11530] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.874685][T11530] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.926090][T11530] bridge_slave_1: entered allmulticast mode [ 895.961612][T11530] bridge_slave_1: entered promiscuous mode [ 896.190294][ T9059] Bluetooth: hci3: command tx timeout [ 897.476859][T11618] rtc_cmos 00:00: Alarms can be up to one day in the future [ 898.790864][T11616] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1227'. [ 899.879907][T11530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.951791][T11629] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1229'. [ 900.020295][T11530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.267723][T11530] team0: Port device team_slave_0 added [ 900.278846][T11634] syz.0.1230 (11634): drop_caches: 2 [ 900.308947][T11530] team0: Port device team_slave_1 added [ 900.351807][T11634] input: syz1 as /devices/virtual/input/input22 [ 900.663075][T11530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 900.691603][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.830125][T11530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.243507][T11530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.250531][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.471655][T11530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.772176][T11653] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1228'. [ 902.891910][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 905.438145][T11651] netlink: 'syz.0.1232': attribute type 5 has an invalid length. [ 905.506744][T11530] hsr_slave_0: entered promiscuous mode [ 905.622122][T11530] hsr_slave_1: entered promiscuous mode [ 905.649194][T11530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 905.693263][T11530] Cannot create hsr debugfs directory [ 912.924130][ T59] hsr_slave_0: left promiscuous mode [ 913.071631][ T59] hsr_slave_1: left promiscuous mode [ 913.181865][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.193521][T11710] syz.5.1239 (11710): drop_caches: 2 [ 913.201574][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.297010][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.315156][T11710] input: syz1 as /devices/virtual/input/input23 [ 913.331725][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.382339][ T59] bridge_slave_1: left allmulticast mode [ 913.388063][ T59] bridge_slave_1: left promiscuous mode [ 913.426495][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.441150][ T59] bridge_slave_0: left allmulticast mode [ 913.457528][ T59] bridge_slave_0: left promiscuous mode [ 913.466552][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.529388][ T59] veth1_macvtap: left promiscuous mode [ 913.535396][ T59] veth0_macvtap: left promiscuous mode [ 913.548669][ T59] veth1_vlan: left promiscuous mode [ 913.559914][ T59] veth0_vlan: left promiscuous mode [ 913.715969][T11713] syz.6.1240 (11713): drop_caches: 2 [ 918.981086][T11733] syz.6.1244 (11733): drop_caches: 2 [ 920.566725][T11739] syz.6.1246 (11739): drop_caches: 2 [ 920.585417][ T59] team0 (unregistering): Port device team_slave_1 removed [ 920.678085][T11740] input: syz1 as /devices/virtual/input/input26 [ 920.776452][ T59] team0 (unregistering): Port device team_slave_0 removed [ 920.873433][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 921.053039][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.392156][T11744] input: syz1 as /devices/virtual/input/input27 [ 923.684139][ T59] bond0 (unregistering): Released all slaves [ 923.945654][T11719] netlink: 'syz.5.1242': attribute type 5 has an invalid length. [ 924.793037][T11530] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 924.814692][T11530] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 925.020456][T11530] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 925.094696][T11530] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 925.722596][T11768] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1252'. [ 926.008147][T11530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 926.158570][T11530] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.198192][T10590] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.205434][T10590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.809794][T11777] syz.6.1250 (11777): drop_caches: 2 [ 926.911928][T10590] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.919122][T10590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.031237][T11785] input: syz1 as /devices/virtual/input/input28 [ 928.747934][T11804] netlink: 'syz.0.1255': attribute type 5 has an invalid length. [ 929.712464][T11801] netlink: 'syz.5.1251': attribute type 5 has an invalid length. [ 930.769562][T11530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.961985][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.124739][T11819] netlink: 'syz.6.1257': attribute type 5 has an invalid length. [ 932.358959][T11829] input: syz1 as /devices/virtual/input/input29 [ 932.859863][T11530] veth0_vlan: entered promiscuous mode [ 932.929708][T11530] veth1_vlan: entered promiscuous mode [ 933.073128][T11530] veth0_macvtap: entered promiscuous mode [ 933.096860][T11530] veth1_macvtap: entered promiscuous mode [ 933.191996][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.231620][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.271556][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.301669][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.340603][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.401632][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.453831][T11530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.499659][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.551498][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.581520][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.633702][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.685306][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 933.722354][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.762878][T11530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.803141][T11530] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.843939][T11530] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.878518][T11530] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.905333][T11530] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.409612][T11851] rtc_cmos 00:00: Alarms can be up to one day in the future [ 935.832332][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.840208][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.000822][T11846] netlink: 'syz.0.1261': attribute type 5 has an invalid length. [ 936.133385][T11860] syz.6.1260 (11860): drop_caches: 2 [ 936.161901][T10170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.201960][T10170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.281083][T11860] input: syz1 as /devices/virtual/input/input30 [ 939.685877][T11879] syz.5.1263 (11879): drop_caches: 2 [ 939.814941][T11879] input: syz1 as /devices/virtual/input/input31 [ 940.258666][T11896] syz.6.1265 (11896): drop_caches: 2 [ 940.600073][T11896] input: syz1 as /devices/virtual/input/input32 [ 944.324430][T11909] netlink: 'syz.5.1267': attribute type 5 has an invalid length. [ 946.886556][T11934] netlink: 'syz.6.1271': attribute type 5 has an invalid length. [ 947.202819][T11940] syz.7.1269 (11940): drop_caches: 2 [ 947.393424][T11940] input: syz1 as /devices/virtual/input/input33 [ 947.728717][T11951] input: syz1 as /devices/virtual/input/input34 [ 948.498945][T11959] syz.6.1273 (11959): drop_caches: 2 [ 948.795000][T11963] syz.7.1274 (11963): drop_caches: 2 [ 948.865893][T11959] input: syz1 as /devices/virtual/input/input35 [ 951.149875][T11981] syz.5.1272 (11981): drop_caches: 2 [ 951.217475][T11982] input: syz1 as /devices/virtual/input/input37 [ 972.778902][T12224] syz.0.1277 (12224): drop_caches: 2 [ 973.390739][T12226] netlink: 'syz.5.1279': attribute type 5 has an invalid length. [ 974.451687][T12224] input: syz1 as /devices/virtual/input/input38 [ 975.310399][T12238] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1278'. [ 975.863269][T12239] syz.0.1282 (12239): drop_caches: 2 [ 975.916481][T12239] input: syz1 as /devices/virtual/input/input39 [ 976.837723][T12244] netlink: 'syz.5.1281': attribute type 5 has an invalid length. [ 977.949244][T12248] syz.0.1285 (12248): drop_caches: 2 [ 979.388916][T12261] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1284'. [ 980.296042][T12262] netlink: 'syz.0.1287': attribute type 5 has an invalid length. [ 981.478763][T12270] input: syz1 as /devices/virtual/input/input41 [ 982.928834][T12277] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1290'. [ 984.389892][T12285] netlink: 'syz.5.1293': attribute type 5 has an invalid length. [ 985.352292][T12287] syz.6.1292 (12287): drop_caches: 2 [ 985.464232][T12287] input: syz1 as /devices/virtual/input/input42 [ 991.236765][T12312] syz.7.1296 (12312): drop_caches: 2 [ 991.444936][T12314] syz.0.1295 (12314): drop_caches: 2 [ 991.499280][T12307] input: syz1 as /devices/virtual/input/input43 [ 991.512356][T12314] input: syz1 as /devices/virtual/input/input44 [ 993.352654][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.417933][T12324] syz.7.1301 (12324): drop_caches: 2 [ 993.512769][T12324] input: syz1 as /devices/virtual/input/input45 [ 994.868546][T12328] syz.5.1299 (12328): drop_caches: 2 [ 994.915122][T12328] input: syz1 as /devices/virtual/input/input46 [ 995.453458][T12333] syz.5.1305 (12333): drop_caches: 2 [ 995.537345][T12333] input: syz1 as /devices/virtual/input/input47 [ 996.198692][T12341] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1302'. [ 996.870108][T12334] netlink: 'syz.7.1304': attribute type 5 has an invalid length. [ 997.546468][T12344] netlink: 'syz.6.1306': attribute type 5 has an invalid length. [ 1000.879921][T12357] netlink: 'syz.7.1311': attribute type 5 has an invalid length. [ 1002.461194][T12373] syz.6.1307 (12373): drop_caches: 2 [ 1003.182695][T12373] input: syz1 as /devices/virtual/input/input48 [ 1005.500247][T12394] syz.6.1316 (12394): drop_caches: 2 [ 1005.613309][T12395] input: syz1 as /devices/virtual/input/input49 [ 1005.939604][T12390] netlink: 'syz.5.1315': attribute type 5 has an invalid length. [ 1006.852818][T12400] netlink: 'syz.7.1312': attribute type 5 has an invalid length. [ 1010.164657][T12412] syz.5.1318 (12412): drop_caches: 2 [ 1010.282197][T12412] input: syz1 as /devices/virtual/input/input50 [ 1010.306609][T12411] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1319'. [ 1010.415573][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 1011.520816][T12419] netlink: 'syz.7.1317': attribute type 5 has an invalid length. [ 1015.262957][T12427] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1016.741348][T12433] netlink: 'syz.6.1325': attribute type 5 has an invalid length. [ 1019.483895][T12440] syz.0.1326 (12440): drop_caches: 2 [ 1019.564108][T12440] input: syz1 as /devices/virtual/input/input51 [ 1021.326773][T12456] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1324'. [ 1023.148859][T12474] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1328'. [ 1024.504819][T12486] input: syz0 as /devices/virtual/input/input52 [ 1025.442353][T12492] netlink: 3528 bytes leftover after parsing attributes in process `syz.0.1339'. [ 1025.513636][T12492] netlink: 3736 bytes leftover after parsing attributes in process `syz.0.1339'. [ 1027.461140][T12509] loop7: detected capacity change from 0 to 2048 [ 1027.585597][T12514] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1027.651595][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1027.851757][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 1027.863957][ T8] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 1027.889528][ T8] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 1027.911642][ T8] usb 6-1: config 166 has no interface number 0 [ 1027.917970][ T8] usb 6-1: config 166 has no interface number 1 [ 1027.942410][ T8] usb 6-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 1027.970635][ T8] usb 6-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 1028.045485][ T8] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1028.082769][ T8] usb 6-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 1028.097719][ T8] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1028.127132][ T8] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1028.170491][T12520] loop7: detected capacity change from 0 to 128 [ 1028.179568][ T8] usb 6-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1028.207300][T12520] ufs: ufstype=nextstep is supported read-only [ 1028.222585][ T8] usb 6-1: config 166 interface 177 has no altsetting 0 [ 1028.230347][ T8] usb 6-1: config 166 interface 34 has no altsetting 0 [ 1028.248491][ T8] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1028.266281][T12520] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1028.282183][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.304908][ T8] usb 6-1: Product: syz [ 1028.322950][ T8] usb 6-1: Manufacturer: syz [ 1028.332056][ T8] usb 6-1: SerialNumber: syz [ 1028.570951][ T8] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 1028.766920][T12528] tmpfs: Unknown parameter 'defcontext' [ 1028.778424][T12528] FAULT_INJECTION: forcing a failure. [ 1028.778424][T12528] name failslab, interval 1, probability 0, space 0, times 1 [ 1028.783779][ T8] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 1028.810695][T12528] CPU: 1 PID: 12528 Comm: syz.0.1353 Not tainted syzkaller #0 [ 1028.818252][T12528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1028.828369][T12528] Call Trace: [ 1028.831703][T12528] [ 1028.834679][T12528] dump_stack_lvl+0x18c/0x250 [ 1028.839429][T12528] ? show_regs_print_info+0x20/0x20 [ 1028.844683][T12528] ? load_image+0x420/0x420 [ 1028.849236][T12528] ? __might_sleep+0xe0/0xe0 [ 1028.853879][T12528] ? __lock_acquire+0x7d80/0x7d80 [ 1028.858925][T12528] should_fail_ex+0x394/0x4c0 [ 1028.863637][T12528] should_failslab+0x9/0x20 [ 1028.868201][T12528] slab_pre_alloc_hook+0x59/0x300 [ 1028.873277][T12528] ? prepend_path+0x8a7/0x950 [ 1028.877973][T12528] ? tomoyo_encode+0x2ad/0x570 [ 1028.882758][T12528] ? tomoyo_encode+0x2ad/0x570 [ 1028.887538][T12528] __kmem_cache_alloc_node+0x53/0x250 [ 1028.892935][T12528] ? tomoyo_encode+0x2ad/0x570 [ 1028.897715][T12528] __kmalloc+0xa7/0x240 [ 1028.901892][T12528] tomoyo_encode+0x2ad/0x570 [ 1028.906499][T12528] tomoyo_realpath_from_path+0x57c/0x5c0 [ 1028.912181][T12528] tomoyo_check_open_permission+0x224/0x460 [ 1028.918120][T12528] ? tomoyo_check_open_permission+0x1cf/0x460 [ 1028.924208][T12528] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1028.930307][T12528] ? verify_lock_unused+0x140/0x140 [ 1028.935514][T12528] ? __asan_memset+0x22/0x40 [ 1028.940156][T12528] ? __rwlock_init+0x150/0x150 [ 1028.944935][T12528] ? tomoyo_file_open+0xed/0x180 [ 1028.949883][T12528] security_file_open+0x62/0xa0 [ 1028.954772][T12528] do_dentry_open+0x32b/0x14b0 [ 1028.959612][T12528] ? __asan_memcpy+0x40/0x70 [ 1028.964241][T12528] path_openat+0x284f/0x3270 [ 1028.968901][T12528] ? do_filp_open+0x430/0x430 [ 1028.973637][T12528] do_filp_open+0x1f2/0x430 [ 1028.978192][T12528] ? vfs_tmpfile+0x620/0x620 [ 1028.982869][T12528] ? _raw_spin_unlock+0x28/0x40 [ 1028.987761][T12528] ? alloc_fd+0x590/0x640 [ 1028.992203][T12528] do_sys_openat2+0x134/0x1d0 [ 1028.996936][T12528] ? do_sys_open+0xe0/0xe0 [ 1029.001400][T12528] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1029.007429][T12528] ? lock_chain_count+0x20/0x20 [ 1029.012381][T12528] __x64_sys_openat+0x139/0x160 [ 1029.013270][T12511] loop6: detected capacity change from 0 to 32768 [ 1029.017274][T12528] do_syscall_64+0x55/0xb0 [ 1029.028163][T12528] ? clear_bhb_loop+0x40/0x90 [ 1029.032889][T12528] ? clear_bhb_loop+0x40/0x90 [ 1029.037623][T12528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1029.043573][T12528] RIP: 0033:0x7f8efb39e159 [ 1029.048028][T12528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.067691][T12528] RSP: 002b:00007f8efc2c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1029.076156][T12528] RAX: ffffffffffffffda RBX: 00007f8efb625fa0 RCX: 00007f8efb39e159 [ 1029.084161][T12528] RDX: 0000000000000040 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1029.092164][T12528] RBP: 00007f8efb435024 R08: 0000000000000000 R09: 0000000000000000 [ 1029.100168][T12528] R10: 000000000000016f R11: 0000000000000246 R12: 0000000000000000 [ 1029.108188][T12528] R13: 00007f8efb626038 R14: 00007f8efb625fa0 R15: 00007ffd7cad3f68 [ 1029.116226][T12528] [ 1029.130681][T12528] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1029.282022][ T8] usb 6-1: Found UVC 0.00 device syz (0bda:0138) [ 1029.288607][ T8] usb 6-1: No valid video chain found. [ 1029.290345][T12511] [ 1029.290345][T12511] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1029.290345][T12511] [ 1029.533890][T12534] loop7: detected capacity change from 0 to 4096 [ 1029.562016][T12534] ext4: Unknown parameter 'audit' [ 1029.674650][T12443] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1029.831953][ T3456] [ 1029.831953][ T3456] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1029.831953][ T3456] [ 1029.872536][ T3456] [ 1029.872536][ T3456] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1029.872536][ T3456] [ 1029.891558][ T3456] [ 1029.891558][ T3456] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1029.891558][ T3456] [ 1029.927157][ T114] [ 1029.927157][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1029.927157][ T114] [ 1029.966201][T10880] [ 1029.966201][T10880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1029.966201][T10880] [ 1029.991024][T10880] [ 1029.991024][T10880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1029.991024][T10880] [ 1030.345137][T12542] loop6: detected capacity change from 0 to 128 [ 1030.362614][T12542] UBIFS error (pid: 12542): cannot open "/dev/loop6", error -22 [ 1030.404295][T12508] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1030.572327][T12540] loop7: detected capacity change from 0 to 32768 [ 1030.599235][T12540] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.1357 (12540) [ 1030.683856][T12540] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1030.715937][T12540] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 1030.749514][T12540] BTRFS info (device loop7): use zlib compression, level 3 [ 1030.776755][T12540] BTRFS info (device loop7): using free space tree [ 1030.861117][ T5838] usb 6-1: USB disconnect, device number 9 [ 1030.996561][T12540] BTRFS info (device loop7): enabling ssd optimizations [ 1031.026181][T12540] BTRFS info (device loop7): auto enabling async discard [ 1031.189512][T12540] BTRFS error (device loop7): target device is invalid! [ 1031.293521][T11530] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1031.571310][T12548] loop6: detected capacity change from 0 to 32768 [ 1031.761818][T12508] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop7 scanned by udevd (12508) [ 1031.778253][T12574] CIFS: Attempting to mount //127.0.0.1/share [ 1031.898089][T12575] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 1 [ 1032.218330][T12568] loop5: detected capacity change from 0 to 40427 [ 1032.278367][T12568] F2FS-fs (loop5): build fault injection attr: rate: 174, type: 0x7ffff [ 1032.633798][T12574] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -11 [ 1032.673017][T12574] CIFS: VFS: cifs_mount failed w/return code = -11 [ 1032.920111][T12590] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1032.946303][T12590] overlayfs: failed to set xattr on upper [ 1032.968269][T12590] overlayfs: ...falling back to redirect_dir=nofollow. [ 1032.987455][T12590] overlayfs: ...falling back to index=off. [ 1032.996984][T12590] overlayfs: ...falling back to uuid=null. [ 1035.046704][T12600] binder: 12599:12600 ioctl c0306201 0 returned -14 [ 1035.108922][T12604] binder: 12599:12604 ioctl c0306201 0 returned -14 [ 1035.165267][ T28] audit: type=1800 audit(1700006410.140:7): pid=12607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1372" name="idVendor" dev="configfs" ino=27476 res=0 errno=0 [ 1035.201675][ T28] audit: type=1800 audit(1700006410.170:8): pid=12607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1372" name="idProduct" dev="configfs" ino=27477 res=0 errno=0 [ 1035.231265][ T28] audit: type=1800 audit(1700006410.170:9): pid=12607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1372" name="max_speed" dev="configfs" ino=27478 res=0 errno=0 [ 1035.252061][ T28] audit: type=1800 audit(1700006410.170:10): pid=12607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1372" name="c_sync" dev="configfs" ino=27480 res=0 errno=0 [ 1035.255622][T12605] loop5: detected capacity change from 0 to 2048 [ 1035.279344][ T28] audit: type=1800 audit(1700006410.170:11): pid=12607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1372" name="UDC" dev="configfs" ino=27482 res=0 errno=0 [ 1035.335087][T12605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1035.348908][T12605] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1035.424921][ T8983] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.731609][T12615] loop5: detected capacity change from 0 to 32768 [ 1035.747950][T12615] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1376 (12615) [ 1035.774413][T12615] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1035.789731][T12615] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1035.799671][T12615] BTRFS info (device loop5): using free space tree [ 1036.031660][T12615] BTRFS info (device loop5): enabling ssd optimizations [ 1036.061229][T12615] BTRFS info (device loop5): auto enabling async discard [ 1036.153306][T12622] loop6: detected capacity change from 0 to 32768 [ 1036.197693][T12622] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1036.218248][T12615] BTRFS info (device loop5: state M): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1036.229957][T12615] BTRFS info (device loop5: state M): use zstd compression, level 15 [ 1036.313921][T12622] XFS (loop6): Ending clean mount [ 1036.335378][T12622] XFS (loop6): Quotacheck needed: Please wait. [ 1036.407290][T12622] XFS (loop6): Quotacheck: Done. [ 1036.541723][T11640] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1036.872149][T11640] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1036.907771][ T28] audit: type=1800 audit(1700006411.810:12): pid=12653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1377" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4429 res=0 errno=0 [ 1037.026658][T11640] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1037.121810][T11640] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1037.130929][T11640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.222633][T11640] usb 1-1: Product: syz [ 1037.226892][T11640] usb 1-1: Manufacturer: syz [ 1037.263323][ T28] audit: type=1800 audit(1700006411.810:13): pid=12653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1377" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 1037.263327][T11640] usb 1-1: SerialNumber: syz [ 1037.319254][T10880] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1037.340956][ T8983] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1037.675058][T12656] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1380'. [ 1037.793125][ C1] usb 1-1: invalid arpc response id received: 0 [ 1037.907435][ T28] audit: type=1800 audit(1700006412.880:14): pid=12660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1381" name="idProduct" dev="configfs" ino=26424 res=0 errno=0 [ 1037.986089][ T28] audit: type=1800 audit(1700006412.900:15): pid=12660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1381" name="p_chmask" dev="configfs" ino=26425 res=0 errno=0 [ 1038.049158][T11640] usb 1-1: failed to set cport flags for port 0 [ 1038.172601][T11640] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 1038.219398][T11640] es2_ap_driver: probe of 1-1:1.0 failed with error -71 [ 1038.257168][T11640] usb 1-1: USB disconnect, device number 9 [ 1039.090110][T12668] bridge_slave_0: left allmulticast mode [ 1039.132964][T12668] bridge_slave_0: left promiscuous mode [ 1039.140379][T12668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.187686][T12668] bridge_slave_1: left allmulticast mode [ 1039.225031][T12668] bridge_slave_1: left promiscuous mode [ 1039.243887][T12668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.282677][T12668] bond0: (slave bond_slave_0): Releasing backup interface [ 1039.365784][T12668] bond0: (slave bond_slave_1): Releasing backup interface [ 1039.457459][T12673] loop7: detected capacity change from 0 to 32768 [ 1039.471853][T12673] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1386 (12673) [ 1039.518018][T12673] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1039.528574][T12673] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1039.537346][T12673] BTRFS info (device loop7): use zlib compression, level 3 [ 1039.544689][T12673] BTRFS info (device loop7): turning on sync discard [ 1039.551447][T12673] BTRFS info (device loop7): using free space tree [ 1039.560893][T12668] team0: Port device team_slave_0 removed [ 1039.646087][T12668] team0: Port device team_slave_1 removed [ 1039.686090][T12668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1039.723611][T12673] BTRFS info (device loop7): enabling ssd optimizations [ 1039.747389][T12668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1039.913746][T12668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.950974][T12666] loop5: detected capacity change from 0 to 32768 [ 1039.962494][T12668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.257726][ T28] audit: type=1800 audit(1700006415.110:16): pid=12699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1386" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 1040.494632][T12666] JBD2: Ignoring recovery information on journal [ 1040.525798][T12669] team0: Port device xfrm0 added [ 1040.563555][T12670] tipc: Started in network mode [ 1040.612021][T12670] tipc: Node identity 4e0f6b4c5772, cluster identity 4711 [ 1040.652754][T12670] tipc: Enabled bearer , priority 0 [ 1040.708288][T12666] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1040.778703][T11530] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1040.856713][ T28] audit: type=1800 audit(1700006415.830:17): pid=12666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1384" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 1041.384487][T12666] syz.5.1384 (12666) used greatest stack depth: 19384 bytes left [ 1041.602519][ T8983] ocfs2: Unmounting device (7,5) on (node local) [ 1041.704635][T12713] loop6: detected capacity change from 0 to 512 [ 1041.794559][ T5779] tipc: Node number set to 427649868 [ 1042.087405][T12706] loop7: detected capacity change from 0 to 32768 [ 1042.102474][T12722] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1391'. [ 1042.116372][T12706] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1388 (12706) [ 1042.145939][T12706] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1042.160060][T12706] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1042.190559][T12706] BTRFS info (device loop7): using free space tree [ 1042.465207][T12706] BTRFS info (device loop7): enabling ssd optimizations [ 1042.502557][T12706] BTRFS info (device loop7): auto enabling async discard [ 1042.713108][T12742] netdevsim netdevsim5: loading /lib/firmware// failed with error -22 [ 1042.722057][T12742] netdevsim netdevsim5: Direct firmware load for / failed with error -22 [ 1042.731298][T12742] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 1043.272738][T11530] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1043.475852][T12719] loop6: detected capacity change from 0 to 32768 [ 1043.480351][T12746] ubi0: attaching mtd0 [ 1043.494145][T12719] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1395 (12719) [ 1043.523291][T12746] ubi0: scanning is finished [ 1043.528000][T12746] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1043.541742][T12719] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1043.561551][ T5779] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1043.600350][T12719] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1043.633607][T12746] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1043.639300][T12719] BTRFS info (device loop6): using free space tree [ 1043.763415][ T5779] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1043.781479][ T5779] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1043.791893][ T5779] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1043.800966][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.813218][T12744] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1043.850568][ T5779] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1043.879511][T12719] BTRFS info (device loop6): enabling ssd optimizations [ 1043.918768][T12719] BTRFS info (device loop6): auto enabling async discard [ 1044.022292][T12719] BTRFS info (device loop6: state M): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1044.078466][T12719] BTRFS info (device loop6: state M): use zstd compression, level 15 [ 1044.134077][ T5779] usb 1-1: USB disconnect, device number 10 [ 1044.177114][T12766] loop5: detected capacity change from 0 to 4096 [ 1044.322442][T12769] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1044.439072][T10880] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1044.452044][ T28] audit: type=1800 audit(1700006419.430:18): pid=12766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1401" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1044.811348][T12775] loop6: detected capacity change from 0 to 1024 [ 1044.822368][T12775] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1044.858202][T12775] EXT4-fs: inline encryption not supported [ 1044.886057][T12775] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1044.911600][T12775] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1044.990337][T12775] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1045.002726][T12775] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.045148][T12775] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: comm syz.6.1402: lblock 0 mapped to illegal pblock 0 (length 1) [ 1045.080078][T12775] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1045.113188][T12775] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1045.113188][T12775] [ 1045.168914][T12779] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.1402: bg 0: block 112: padding at end of block bitmap is not set [ 1045.237264][T12779] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28 [ 1045.272887][T12779] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1045.272887][T12779] [ 1045.283634][T12779] EXT4-fs (loop6): Total free blocks count 0 [ 1045.290087][T12779] EXT4-fs (loop6): Free/Dirty block details [ 1045.299217][T12779] EXT4-fs (loop6): free_blocks=0 [ 1045.307561][T12779] EXT4-fs (loop6): dirty_blocks=64 [ 1045.377552][T12779] EXT4-fs (loop6): Block reservation details [ 1046.151883][T12792] CIFS: Attempting to mount //127.0.0.1/share [ 1046.239199][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1409'. [ 1046.346388][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1409'. [ 1046.463801][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1409'. [ 1046.972046][T12792] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1047.322478][ T8] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1047.401779][ T5779] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1047.514029][ T8] usb 6-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1047.523193][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.615470][ T5779] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.625991][ T5779] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1047.636760][ T5779] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1047.652181][ T5779] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1047.661548][ T5779] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1047.669663][ T5779] usb 7-1: Product: syz [ 1047.674001][ T5779] usb 7-1: Manufacturer: syz [ 1047.678655][ T5779] usb 7-1: SerialNumber: syz [ 1047.685803][ T5779] usb 7-1: config 0 descriptor?? [ 1047.701809][ T5779] radio-si470x 7-1:0.0: could not find interrupt in endpoint [ 1047.709373][ T5779] radio-si470x: probe of 7-1:0.0 failed with error -5 [ 1047.716593][ T5779] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1047.945101][T12805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.957492][T12805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.963578][ T8] dln2 6-1:1.0: USB write failed: -110 [ 1047.975416][ T8] dln2 6-1:1.0: failed to initialize hardware [ 1047.980379][T12805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.992491][ T8] dln2: probe of 6-1:1.0 failed with error -110 [ 1048.001095][T12805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.030843][T12805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.041319][T12805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.258237][T11640] usb 6-1: USB disconnect, device number 10 [ 1048.361521][ T969] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1048.544183][ T969] usb 1-1: Using ep0 maxpacket: 32 [ 1048.551397][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.567609][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.577532][ T969] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1048.590443][ T969] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1048.599631][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.610273][ T969] usb 1-1: config 0 descriptor?? [ 1049.074514][ T969] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0002/input/input53 [ 1049.091795][ T5838] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1049.189915][ T969] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0002/input/input54 [ 1049.277558][ T969] kye 0003:0458:5011.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 1049.305151][ T969] usb 1-1: USB disconnect, device number 11 [ 1049.319618][ T5838] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1049.339229][ T5838] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1049.349501][ T5838] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1049.386590][ T5838] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1049.401569][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.414076][ T5838] usb 6-1: Product: syz [ 1049.418371][ T5838] usb 6-1: Manufacturer: syz [ 1049.427948][ T5838] usb 6-1: SerialNumber: syz [ 1049.443026][ T5838] hub 6-1:1.0: bad descriptor, ignoring hub [ 1049.445118][T12816] fido_id[12816]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1049.450095][ T5838] hub: probe of 6-1:1.0 failed with error -5 [ 1049.656538][ T5838] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1049.776321][T12819] MTRR 1 not used [ 1050.030864][ T5838] usb 6-1: USB disconnect, device number 11 [ 1050.146125][ T5838] usblp0: removed [ 1050.188502][ T8] usb 7-1: USB disconnect, device number 2 [ 1050.495253][ T5779] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1050.511593][ T5838] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1050.661547][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1050.694564][ T5838] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1050.704488][ T5779] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1050.714565][ T5838] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1050.724587][ T5838] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1050.740166][ T5779] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1050.750093][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.758295][ T5779] usb 1-1: Product: syz [ 1050.762699][ T5838] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1050.774470][ T5779] usb 1-1: Manufacturer: syz [ 1050.779089][ T5779] usb 1-1: SerialNumber: syz [ 1050.783777][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.791871][ T5838] usb 6-1: Product: syz [ 1050.796059][ T5838] usb 6-1: Manufacturer: syz [ 1050.800685][ T5838] usb 6-1: SerialNumber: syz [ 1050.817351][ T5838] hub 6-1:1.0: bad descriptor, ignoring hub [ 1050.823721][ T5838] hub: probe of 6-1:1.0 failed with error -5 [ 1050.843186][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.854310][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.865471][ T8] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1050.875162][ T8] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1050.884768][ T8] usb 7-1: Manufacturer: syz [ 1050.902739][ T8] usb 7-1: config 0 descriptor?? [ 1051.027118][ T5838] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1051.039146][ T5779] usb 1-1: Unknown endpoint type found, address 0x03 [ 1051.045969][ T5779] usb 1-1: Not enough endpoints found in device, aborting! [ 1051.082883][ T5838] usb 6-1: USB disconnect, device number 12 [ 1051.099659][ T5838] usblp0: removed [ 1051.246081][ T23] usb 1-1: USB disconnect, device number 12 [ 1051.631005][T12831] CIFS: Attempting to mount //127.0.0.1/share [ 1051.737251][ T8] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71 [ 1051.746407][ T8] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 1051.754929][ T8] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71 [ 1051.763589][ T8] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 1051.774697][ T8] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 1051.787582][ T8] usb 7-1: USB disconnect, device number 3 [ 1052.468140][T12831] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1052.476005][T12831] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1053.223921][T12841] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1425'. [ 1053.366055][T12839] loop6: detected capacity change from 0 to 32768 [ 1053.401680][T12839] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1424 (12839) [ 1053.476552][T12839] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1053.491081][T12839] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1053.512609][T12839] BTRFS info (device loop6): using free space tree [ 1053.668720][T12839] BTRFS info (device loop6): enabling ssd optimizations [ 1053.691515][T12839] BTRFS info (device loop6): auto enabling async discard [ 1053.833515][T12839] BTRFS info (device loop6: state M): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1053.881496][T12839] BTRFS info (device loop6: state M): use zstd compression, level 15 [ 1053.897904][T12876] CacheFiles: Empty directory specified [ 1054.115988][T10880] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1054.172290][T12852] loop5: detected capacity change from 0 to 32768 [ 1054.249624][T12852] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1054.427288][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.754948][T12852] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1055.229798][T12852] XFS (loop5): Starting recovery (logdev: internal) [ 1055.377116][T12852] XFS (loop5): Ending recovery (logdev: internal) [ 1055.579652][ T8983] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1055.767940][T12903] ubi0: attaching mtd0 [ 1055.812509][T12903] ubi0: scanning is finished [ 1055.816552][T12905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1436'. [ 1055.817360][T12903] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1055.898164][T12905] ipvlan2: entered allmulticast mode [ 1055.906147][T12905] syz_tun: entered allmulticast mode [ 1055.918344][T12903] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1056.409149][T12908] loop6: detected capacity change from 0 to 32768 [ 1056.536272][T12908] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1056.559601][ T23] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1056.620689][T12908] XFS (loop6): Ending clean mount [ 1056.756717][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1056.898068][ T23] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1057.036079][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.455497][T10880] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1057.526508][ T23] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 1057.560547][ T23] wwan wwan0: port wwan0qmi0 attached [ 1057.757757][ T23] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, 16:9a:40:e3:20:8b [ 1057.936527][ T23] usb 6-1: USB disconnect, device number 13 [ 1057.952539][ T23] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 1058.029446][ T23] wwan wwan0: port wwan0qmi0 disconnected [ 1058.041645][ T5838] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1058.231492][ T5838] usb 7-1: Using ep0 maxpacket: 32 [ 1058.239140][ T5838] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8 [ 1058.255716][ T5838] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 54, changing to 9 [ 1058.269402][ T5838] usb 7-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1058.283114][ T5838] usb 7-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 1058.300607][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.319145][ T5838] usb 7-1: Product: syz [ 1058.329280][ T5838] usb 7-1: Manufacturer: syz [ 1058.339411][ T5838] usb 7-1: SerialNumber: syz [ 1058.356178][T12933] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1058.612485][ T5838] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 1058.619538][ T5838] usb 7-1: MIDIStreaming interface descriptor not found [ 1058.713147][ T5838] usb 7-1: USB disconnect, device number 4 [ 1058.821822][ T969] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1059.612592][T12967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.669759][T12967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.794797][T12967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.830665][T12967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.872357][T12967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.898606][T12967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.928702][T12971] loop5: detected capacity change from 0 to 256 [ 1059.994576][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1060.029399][ T969] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1060.056868][ T969] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1060.088346][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.119298][ T969] usb 1-1: config 0 descriptor?? [ 1060.237541][T12977] syz_tun: entered allmulticast mode [ 1060.559782][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.567417][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.574658][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.582008][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.589192][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.598376][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.605990][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.613423][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.620570][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.628143][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.636727][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.644174][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.651352][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.659756][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.662487][ T5838] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1060.668191][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.682306][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.707310][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.725882][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.751659][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.780470][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.797246][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.817882][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.831518][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.838622][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.861543][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.868710][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.891794][ T5838] usb 6-1: Using ep0 maxpacket: 32 [ 1060.901698][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.910354][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.917404][ T5838] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.917477][ T5838] usb 6-1: config 0 has no interfaces? [ 1060.937174][ T5838] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1060.948881][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.957107][ T5838] usb 6-1: Product: syz [ 1060.965510][ T5838] usb 6-1: Manufacturer: syz [ 1060.970206][ T5838] usb 6-1: SerialNumber: syz [ 1060.984833][T12988] loop6: detected capacity change from 0 to 512 [ 1060.991538][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1060.998709][ T5838] usb 6-1: config 0 descriptor?? [ 1061.004423][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1061.215863][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1061.223707][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1061.230803][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1061.238017][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1061.261604][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1061.268757][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1062.036870][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1062.044227][ T969] hid-led 0003:1294:1320.0004: unknown main item tag 0x0 [ 1062.159805][ T969] hid-led 0003:1294:1320.0004: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.0-1/input0 [ 1062.189640][ T969] hid-led 0003:1294:1320.0004: Riso Kagaku Webmail Notifier initialized [ 1063.440671][ T9] usb 6-1: USB disconnect, device number 14 [ 1063.486905][T13004] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1458'. [ 1063.615810][ T9059] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 1063.637684][T11534] usb 1-1: USB disconnect, device number 13 [ 1063.652291][ T5838] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 1063.675925][ T9] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 1063.685449][ T9] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 1063.839460][T13017] tmpfs: Unknown parameter 'defcontext' [ 1063.848181][T13017] FAULT_INJECTION: forcing a failure. [ 1063.848181][T13017] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1063.864855][T13017] CPU: 1 PID: 13017 Comm: syz.7.1462 Not tainted syzkaller #0 [ 1063.872451][T13017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1063.882548][T13017] Call Trace: [ 1063.885861][T13017] [ 1063.888843][T13017] dump_stack_lvl+0x18c/0x250 [ 1063.893590][T13017] ? show_regs_print_info+0x20/0x20 [ 1063.898829][T13017] ? load_image+0x420/0x420 [ 1063.903363][T13017] ? stack_trace_save+0xaa/0x100 [ 1063.908345][T13017] should_fail_ex+0x394/0x4c0 [ 1063.913061][T13017] get_futex_key+0x136/0x1030 [ 1063.917774][T13017] ? futex_setup_timer+0xc0/0xc0 [ 1063.922751][T13017] futex_wake+0x127/0x4f0 [ 1063.927111][T13017] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1063.933221][T13017] ? futex_wake_mark+0x150/0x150 [ 1063.938200][T13017] ? lockdep_hardirqs_on+0x98/0x150 [ 1063.943439][T13017] do_futex+0x35d/0x3e0 [ 1063.947633][T13017] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1063.953574][T13017] __se_sys_futex+0x3a9/0x440 [ 1063.958289][T13017] ? __x64_sys_futex+0xf0/0xf0 [ 1063.963092][T13017] ? __x64_sys_futex+0x21/0xf0 [ 1063.967891][T13017] do_syscall_64+0x55/0xb0 [ 1063.972359][T13017] ? clear_bhb_loop+0x40/0x90 [ 1063.977078][T13017] ? clear_bhb_loop+0x40/0x90 [ 1063.981814][T13017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1063.987733][T13017] RIP: 0033:0x7f408c79e159 [ 1063.992207][T13017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.011832][T13017] RSP: 002b:00007f408d7540e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1064.020261][T13017] RAX: ffffffffffffffda RBX: 00007f408ca25fa8 RCX: 00007f408c79e159 [ 1064.028255][T13017] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f408ca25fac [ 1064.036254][T13017] RBP: 00007f408ca25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 1064.044419][T13017] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1064.052424][T13017] R13: 00007f408ca26038 R14: 00007fff8125b770 R15: 00007fff8125b858 [ 1064.060436][T13017] [ 1065.432575][ T969] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1065.631510][ T969] usb 7-1: Using ep0 maxpacket: 32 [ 1065.652483][ T969] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1065.674691][ T969] usb 7-1: config 0 has no interface number 0 [ 1065.680847][ T969] usb 7-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1065.702629][ T969] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1065.713824][ T969] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1065.734230][ T969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.749656][ T969] usb 7-1: Product: syz [ 1065.761475][ T969] usb 7-1: Manufacturer: syz [ 1065.771494][ T969] usb 7-1: SerialNumber: syz [ 1065.782227][ T969] usb 7-1: config 0 descriptor?? [ 1065.987273][T13046] tmpfs: Unknown parameter 'defcontext' [ 1066.017411][ T969] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1066.057013][ T969] cx231xx 7-1:0.1: Failed to read PCB config [ 1066.067163][ T969] cx231xx: probe of 7-1:0.1 failed with error -71 [ 1066.080892][ T969] usb 7-1: USB disconnect, device number 5 [ 1066.436574][ T9059] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 1066.621544][ T969] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1066.681836][T13062] CIFS: Attempting to mount //127.0.0.1/share [ 1066.801523][ T969] usb 7-1: Using ep0 maxpacket: 32 [ 1066.808450][ T969] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1066.816825][ T969] usb 7-1: config 0 has no interface number 0 [ 1066.823197][ T969] usb 7-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1066.833699][ T969] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1066.844420][ T969] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1066.853589][ T969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.861719][ T969] usb 7-1: Product: syz [ 1066.866067][ T969] usb 7-1: Manufacturer: syz [ 1066.870681][ T969] usb 7-1: SerialNumber: syz [ 1066.877852][ T969] usb 7-1: config 0 descriptor?? [ 1067.009443][T13066] loop5: detected capacity change from 0 to 128 [ 1067.029261][T13066] FAT-fs (loop5): Directory bread(block 1048) failed [ 1067.037173][T13066] FAT-fs (loop5): Directory bread(block 1049) failed [ 1067.047067][T13066] FAT-fs (loop5): Directory bread(block 1050) failed [ 1067.055660][T13066] FAT-fs (loop5): Directory bread(block 1051) failed [ 1067.073516][T13066] FAT-fs (loop5): Directory bread(block 1052) failed [ 1067.080264][T13066] FAT-fs (loop5): Directory bread(block 1053) failed [ 1067.088317][T13066] FAT-fs (loop5): Directory bread(block 1054) failed [ 1067.095607][T13066] FAT-fs (loop5): Directory bread(block 1055) failed [ 1067.110970][ T969] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1067.123614][ T969] cx231xx 7-1:0.1: bad scenario!!!!! [ 1067.123614][ T969] config_info=0 [ 1067.135033][ T969] cx231xx 7-1:0.1: Failed to read PCB config [ 1067.358536][T11534] usb 7-1: USB disconnect, device number 6 [ 1067.486086][T13070] FAT-fs (loop5): Directory bread(block 1048) failed [ 1067.493349][T13070] FAT-fs (loop5): Directory bread(block 1049) failed [ 1067.571814][T13062] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1067.589830][T13062] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1067.711249][ T9059] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1067.724717][ T9059] Bluetooth: hci0: Injecting HCI hardware error event [ 1067.740055][ T5790] Bluetooth: hci0: hardware error 0x00 [ 1068.002718][T13072] tmpfs: Unknown parameter 'defcontext' [ 1068.233823][T13078] bond1: option primary_reselect: invalid value (6) [ 1068.247542][T13078] bond1 (unregistering): Released all slaves [ 1068.379050][T13084] nfs: Unknown parameter 'ax魧^zRJ̏Pjcbj~@!̼o^w wR FMq%!}!^vk؇7_qr&Wj6OZ)51Dm{TvSާ{E[mUԔ+okƢe|.JYaXͪX*X2rմmedUjպ2Ųu]'m< H1FD$q%1' [ 1068.502794][ T9059] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 1068.929328][ T28] audit: type=1326 audit(1700006443.670:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.0.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efb39e159 code=0x7ffc0000 [ 1069.107770][ T28] audit: type=1326 audit(1700006443.670:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.0.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efb39e159 code=0x7ffc0000 [ 1069.267176][ T28] audit: type=1326 audit(1700006443.670:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.0.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f8efb39e159 code=0x7ffc0000 [ 1069.296506][ T28] audit: type=1326 audit(1700006443.670:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.0.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efb39e159 code=0x7ffc0000 [ 1069.327189][ T28] audit: type=1326 audit(1700006443.670:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.0.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efb39e159 code=0x7ffc0000 [ 1069.356686][ T28] audit: type=1326 audit(1700006443.680:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.0.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f8efb39e159 code=0x7ffc0000 [ 1069.429880][ T28] audit: type=1326 audit(1700006443.680:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.0.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efb39e159 code=0x7ffc0000 [ 1069.492743][ T28] audit: type=1326 audit(1700006443.680:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.0.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efb39e159 code=0x7ffc0000 [ 1069.525224][ T28] audit: type=1326 audit(1700006443.680:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.0.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f8efb39e159 code=0x7ffc0000 [ 1069.551843][ T969] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1069.568741][ T28] audit: type=1326 audit(1700006443.680:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.0.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8efb39e159 code=0x7ffc0000 [ 1069.753903][ T969] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1069.764132][ T969] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1069.777171][ T969] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1069.787046][ T969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.795220][ T969] usb 6-1: Product: syz [ 1069.799509][ T969] usb 6-1: Manufacturer: syz [ 1069.804247][ T969] usb 6-1: SerialNumber: syz [ 1069.851660][ T5790] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1070.037507][T13094] CacheFiles: Empty directory specified [ 1070.202618][T13102] tmpfs: Unknown parameter 'defcontext' [ 1070.247736][ T969] usb 6-1: failed to set cport flags for port 0 [ 1070.277483][ T969] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 1070.319548][ T969] es2_ap_driver: probe of 6-1:1.0 failed with error -71 [ 1070.354734][ T969] usb 6-1: USB disconnect, device number 15 [ 1070.489054][T13110] syzkaller0: entered promiscuous mode [ 1070.495411][T13110] syzkaller0: entered allmulticast mode [ 1070.565694][ T5790] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 1070.861785][T11534] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1070.976338][T13116] loop7: detected capacity change from 0 to 32768 [ 1070.990712][T13116] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1499 (13116) [ 1071.018190][T13116] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1071.035483][T13116] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1071.049060][T13116] BTRFS info (device loop7): using free space tree [ 1071.074004][T11534] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.096255][T13118] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 1071.103104][T11534] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1071.128740][T13118] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 1071.166605][T11534] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1071.205512][T11534] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1071.232526][T11534] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1071.251765][T11534] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.341611][T13116] BTRFS info (device loop7): enabling ssd optimizations [ 1071.349918][T13116] BTRFS info (device loop7): auto enabling async discard [ 1071.393554][T13139] tmpfs: Unknown parameter 'defcontext' [ 1071.519000][T13116] BTRFS info (device loop7: state M): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1071.613744][T13116] BTRFS info (device loop7: state M): use zstd compression, level 15 [ 1071.684815][T11534] gud 7-1:1.0: No supported pixel formats found [ 1071.714205][T11534] gud: probe of 7-1:1.0 failed with error -22 [ 1071.833064][T11530] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1072.210144][ T23] usb 7-1: USB disconnect, device number 7 [ 1072.601688][ T5790] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1072.612098][ T5790] Bluetooth: hci2: Injecting HCI hardware error event [ 1072.621486][ T9059] Bluetooth: hci2: hardware error 0x00 [ 1073.608183][T13159] tmpfs: Unknown parameter 'defcontext' [ 1073.631529][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1073.840416][ T9] usb 6-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1073.876180][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.313308][T13146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.331782][ T9] dln2 6-1:1.0: USB write failed: -110 [ 1074.337380][ T9] dln2 6-1:1.0: failed to initialize hardware [ 1074.361999][T13146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.387197][ T9] dln2: probe of 6-1:1.0 failed with error -110 [ 1074.395914][T13146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.461896][T13146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.513234][T13146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.583581][ T5790] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1074.592591][ T5790] Bluetooth: hci1: Injecting HCI hardware error event [ 1074.603464][ T5790] Bluetooth: hci1: hardware error 0x00 [ 1074.653105][T13146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.142536][ T23] usb 6-1: USB disconnect, device number 16 [ 1075.323978][T13179] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 1075.442729][T13170] loop7: detected capacity change from 0 to 32768 [ 1075.479097][T13170] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1075.532864][ T9059] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1075.566130][T13170] XFS (loop7): Ending clean mount [ 1075.676832][T11530] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1075.913163][T13191] tmpfs: Unknown parameter 'defcontext' [ 1076.584242][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1519'. [ 1076.891802][ T5790] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1077.364905][T13211] loop5: detected capacity change from 0 to 32768 [ 1077.437935][T13206] loop6: detected capacity change from 0 to 32768 [ 1077.470867][T13211] UFO tlock:0xffffc9000288a120 [ 1077.486979][T13206] loop6: p1 p3 < p5 p6 p7 p8 p9 > p4 [ 1077.507154][T13206] loop6: p4 start 1426063360 is beyond EOD, truncated [ 1077.535806][T13206] loop6: p5 size 46336 extends beyond EOD, truncated [ 1077.557243][T13206] loop6: p6 size 134217728 extends beyond EOD, truncated [ 1077.583280][T13206] loop6: p7 start 270335 is beyond EOD, truncated [ 1077.604473][T13206] loop6: p9 start 401408 is beyond EOD, truncated [ 1077.981505][T11534] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1078.052096][T13224] loop5: detected capacity change from 0 to 32768 [ 1078.146283][T13224] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1078.166094][T12508] udevd[12508]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 1078.175323][T12662] udevd[12662]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 1078.194481][T12768] udevd[12768]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1078.205680][T12647] udevd[12647]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 1078.236784][T12772] udevd[12772]: inotify_add_watch(7, /dev/loop6p8, 10) failed: No such file or directory [ 1078.303988][T13224] XFS (loop5): Ending clean mount [ 1078.315161][T13224] XFS (loop5): Quotacheck needed: Please wait. [ 1078.331827][T11534] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1078.353404][T11534] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1078.423189][T11534] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1078.432755][T13224] XFS (loop5): Quotacheck: Done. [ 1078.455088][T11534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.473888][T11534] usb 1-1: Product: syz [ 1078.478119][T11534] usb 1-1: Manufacturer: syz [ 1078.487866][T11534] usb 1-1: SerialNumber: syz [ 1079.217746][ T8983] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1079.259539][T11534] usb 1-1: Cannot retrieve CPort count: -71 [ 1079.268679][T11534] usb 1-1: Cannot retrieve CPort count: -71 [ 1079.275138][T11534] es2_ap_driver: probe of 1-1:1.0 failed with error -71 [ 1079.292118][T11534] usb 1-1: USB disconnect, device number 14 [ 1079.700499][T13255] loop6: detected capacity change from 0 to 512 [ 1079.738937][T13255] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1079.762875][T13255] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1079.769130][ T23] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1079.795119][T13255] EXT4-fs (loop6): 1 truncate cleaned up [ 1079.802787][T13255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1079.830314][T13255] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.6.1542: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1079.867309][T13255] EXT4-fs (loop6): Remounting filesystem read-only [ 1079.882897][T13255] EXT4-fs warning (device loop6): ext4_rename_delete:3778: inode #2: comm syz.6.1542: Deleting old file: nlink 5, error=-117 [ 1079.929075][T10880] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.993432][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1080.014675][ T23] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1080.037369][ T23] usb 6-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 1080.050938][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.081144][ T23] usb 6-1: Product: syz [ 1080.085549][ T23] usb 6-1: Manufacturer: syz [ 1080.090183][ T23] usb 6-1: SerialNumber: syz [ 1080.128499][ T23] qcserial 6-1:1.0: Qualcomm USB modem converter detected [ 1080.921814][ T23] usb 6-1: USB disconnect, device number 17 [ 1080.970900][ T23] qcserial 6-1:1.0: device disconnected [ 1081.295966][T13253] CacheFiles: Empty directory specified [ 1081.670632][T13270] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 1081.731770][T13273] syzkaller0: entered promiscuous mode [ 1081.777721][T13273] syzkaller0: entered allmulticast mode [ 1082.066821][T13263] loop7: detected capacity change from 0 to 32768 [ 1082.074594][T13275] CIFS: Attempting to mount //127.0.0.1/share [ 1082.081819][T13263] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.1544 (13263) [ 1082.132463][T13263] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1082.151724][T13263] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 1082.167581][T13263] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1082.178553][T13263] BTRFS info (device loop7): use zstd compression, level 3 [ 1082.191749][T13263] BTRFS info (device loop7): using free space tree [ 1082.276813][T13268] loop6: detected capacity change from 0 to 32768 [ 1082.296121][T13263] BTRFS info (device loop7): enabling ssd optimizations [ 1082.297257][T13268] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by syz.6.1546 (13268) [ 1082.312390][T13263] BTRFS info (device loop7): auto enabling async discard [ 1082.390540][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 1082.390555][ T28] audit: type=1800 audit(1700006457.360:71): pid=13263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1544" name="bus" dev="loop7" ino=263 res=0 errno=0 [ 1082.440182][ T28] audit: type=1800 audit(1700006457.400:72): pid=13263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1544" name="bus" dev="loop7" ino=263 res=0 errno=0 [ 1082.533677][T12768] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by udevd (12768) [ 1082.612354][ T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1082.804343][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1082.823281][T11530] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1082.837051][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1082.863057][ T23] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1082.873531][T13275] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1082.881000][T13275] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1082.888318][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.901452][ T23] usb 1-1: Product: syz [ 1082.905759][ T23] usb 1-1: Manufacturer: syz [ 1082.920616][ T23] usb 1-1: SerialNumber: syz [ 1083.074011][T12771] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop7 scanned by udevd (12771) [ 1083.356468][T13310] bridge0: port 3(vlan2) entered blocking state [ 1083.371935][ T23] usb 1-1: Cannot retrieve CPort count: -71 [ 1083.398282][T13310] bridge0: port 3(vlan2) entered disabled state [ 1083.407323][T13310] vlan2: entered allmulticast mode [ 1083.425140][ T23] usb 1-1: Cannot retrieve CPort count: -71 [ 1083.432380][T13310] geneve0: entered allmulticast mode [ 1083.446086][ T23] es2_ap_driver: probe of 1-1:1.0 failed with error -71 [ 1083.455196][T13310] vlan2: entered promiscuous mode [ 1083.466394][T13310] geneve0: entered promiscuous mode [ 1083.476641][ T23] usb 1-1: USB disconnect, device number 15 [ 1083.728547][T13315] syzkaller0: entered promiscuous mode [ 1083.734963][T13315] syzkaller0: entered allmulticast mode [ 1083.750769][T13315] tipc: Enabled bearer , priority 0 [ 1083.769406][T13315] tipc: Resetting bearer [ 1083.779958][T13314] tipc: Resetting bearer [ 1083.808297][T13314] tipc: Disabling bearer [ 1083.902186][ T27] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1084.107971][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1084.150857][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1084.188167][ T27] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1084.199920][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.220330][ T27] usb 6-1: Product: syz [ 1084.432031][ T27] usb 6-1: Manufacturer: syz [ 1084.436701][ T27] usb 6-1: SerialNumber: syz [ 1084.444719][ T27] usb 6-1: config 0 descriptor?? [ 1084.457058][ T27] hub 6-1:0.0: bad descriptor, ignoring hub [ 1084.468072][ T27] hub: probe of 6-1:0.0 failed with error -5 [ 1084.636291][ T27] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input56 [ 1086.031069][T13334] CIFS: Attempting to mount //127.0.0.1/share [ 1086.089885][T13334] CIFS: VFS: decode_ntlmssp_challenge: server does not seem to support either NTLMv1 or NTLMv2 [ 1086.102835][T13334] CIFS: VFS: \\127.0.0.1 Send error in SessSetup = -22 [ 1086.112421][T13334] CIFS: VFS: cifs_mount failed w/return code = -22 [ 1086.159123][T13340] syzkaller0: entered promiscuous mode [ 1086.166939][T13340] syzkaller0: entered allmulticast mode [ 1086.268287][T13342] bridge0: port 1(vlan2) entered blocking state [ 1086.280473][T13342] bridge0: port 1(vlan2) entered disabled state [ 1086.299983][T13342] vlan2: entered allmulticast mode [ 1086.308547][T13342] geneve0: entered allmulticast mode [ 1086.327354][T13342] vlan2: entered promiscuous mode [ 1086.334472][T13342] geneve0: entered promiscuous mode [ 1086.727804][T13351] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1565'. [ 1086.736947][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1565'. [ 1086.746527][T13351] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1565'. [ 1087.876232][T13360] CIFS: Attempting to mount //127.0.0.1/share [ 1088.664412][T13360] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1088.672310][T13360] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1088.678962][T13371] CIFS: Attempting to mount //127.0.0.1/share [ 1088.764786][T13371] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1088.780201][T13371] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1089.438787][T13388] netdevsim netdevsim6: loading /lib/firmware// failed with error -22 [ 1089.447723][T13388] netdevsim netdevsim6: Direct firmware load for / failed with error -22 [ 1089.456254][T13388] netdevsim netdevsim6: Falling back to sysfs fallback for: / [ 1089.931509][ T9059] Bluetooth: hci3: command 0x0406 tx timeout [ 1090.123905][T13395] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1582'. [ 1090.168895][T13399] syzkaller0: entered promiscuous mode [ 1090.179008][T13399] syzkaller0: entered allmulticast mode [ 1093.538273][T13416] netdevsim netdevsim5: loading /lib/firmware// failed with error -22 [ 1093.546637][T13416] netdevsim netdevsim5: Direct firmware load for / failed with error -22 [ 1093.555160][T13416] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 1093.902516][T13420] vlan2: left promiscuous mode [ 1093.907369][T13420] geneve0: left promiscuous mode [ 1094.082205][T13424] syzkaller0: entered promiscuous mode [ 1094.087833][T13424] syzkaller0: entered allmulticast mode [ 1094.304986][ T27] usb 6-1: USB disconnect, device number 18 [ 1094.560357][T13437] 9pnet_fd: Insufficient options for proto=fd [ 1095.706195][T13439] syz.6.1599 (13439) used greatest stack depth: 17832 bytes left [ 1095.889457][T13441] [ 1095.891854][T13441] ====================================================== [ 1095.898914][T13441] WARNING: possible circular locking dependency detected [ 1095.905986][T13441] syzkaller #0 Not tainted [ 1095.910429][T13441] ------------------------------------------------------ [ 1095.917492][T13441] syz.0.1600/13441 is trying to acquire lock: [ 1095.923593][T13441] ffff888148d13400 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430 [ 1095.935141][T13441] [ 1095.935141][T13441] but task is already holding lock: [ 1095.942513][T13441] ffff888026268520 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 1095.951605][T13441] [ 1095.951605][T13441] which lock already depends on the new lock. [ 1095.951605][T13441] [ 1095.962029][T13441] [ 1095.962029][T13441] the existing dependency chain (in reverse order) is: [ 1095.971112][T13441] [ 1095.971112][T13441] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 1095.978831][T13441] __mutex_lock+0x135/0xc80 [ 1095.983899][T13441] tcm_set_name+0x2a/0x90 [ 1095.988794][T13441] function_make+0x199/0x350 [ 1095.993946][T13441] configfs_mkdir+0x515/0x9e0 [ 1095.999195][T13441] vfs_mkdir+0x2a5/0x470 [ 1096.003993][T13441] do_mkdirat+0x1dc/0x450 [ 1096.008879][T13441] __x64_sys_mkdir+0x6e/0x80 [ 1096.014026][T13441] do_syscall_64+0x55/0xb0 [ 1096.019003][T13441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1096.025436][T13441] [ 1096.025436][T13441] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1096.033704][T13441] __mutex_lock+0x135/0xc80 [ 1096.038763][T13441] uvcg_streaming_header_allow_link+0x71/0x4a0 [ 1096.045531][T13441] configfs_symlink+0x5a5/0xfe0 [ 1096.050959][T13441] vfs_symlink+0x138/0x2b0 [ 1096.055936][T13441] do_symlinkat+0x1ba/0x400 [ 1096.061011][T13441] __x64_sys_symlinkat+0x99/0xb0 [ 1096.066494][T13441] do_syscall_64+0x55/0xb0 [ 1096.071464][T13441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1096.077907][T13441] [ 1096.077907][T13441] -> #0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}: [ 1096.086635][T13441] __lock_acquire+0x37ef/0x7d80 [ 1096.092030][T13441] lock_acquire+0x19e/0x420 [ 1096.097075][T13441] down_write+0x97/0x200 [ 1096.101858][T13441] configfs_depend_item_unlocked+0x157/0x430 [ 1096.108382][T13441] usbg_make_tpg+0x1f7/0x580 [ 1096.113522][T13441] target_fabric_make_tpg+0xa4/0x6d0 [ 1096.119352][T13441] configfs_mkdir+0x515/0x9e0 [ 1096.124585][T13441] vfs_mkdir+0x2a5/0x470 [ 1096.129365][T13441] do_mkdirat+0x1dc/0x450 [ 1096.134252][T13441] __x64_sys_mkdir+0x6e/0x80 [ 1096.139382][T13441] do_syscall_64+0x55/0xb0 [ 1096.144335][T13441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1096.150763][T13441] [ 1096.150763][T13441] other info that might help us debug this: [ 1096.150763][T13441] [ 1096.160994][T13441] Chain exists of: [ 1096.160994][T13441] &sb->s_type->i_mutex_key#22 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 1096.160994][T13441] [ 1096.175692][T13441] Possible unsafe locking scenario: [ 1096.175692][T13441] [ 1096.183160][T13441] CPU0 CPU1 [ 1096.188555][T13441] ---- ---- [ 1096.193930][T13441] lock(&opts->dep_lock); [ 1096.198379][T13441] lock(gadget_subsys.su_mutex); [ 1096.205941][T13441] lock(&opts->dep_lock); [ 1096.212886][T13441] lock(&sb->s_type->i_mutex_key#22); [ 1096.218363][T13441] [ 1096.218363][T13441] *** DEADLOCK *** [ 1096.218363][T13441] [ 1096.226540][T13441] 5 locks held by syz.0.1600/13441: [ 1096.231760][T13441] #0: ffff888143ef2418 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1096.241010][T13441] #1: ffff88807b7555a0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 1096.251816][T13441] #2: ffffffff8db2b470 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 1096.261575][T13441] #3: ffffffff8de58e48 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf8/0x580 [ 1096.271248][T13441] #4: ffff888026268520 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 1096.280767][T13441] [ 1096.280767][T13441] stack backtrace: [ 1096.286664][T13441] CPU: 1 PID: 13441 Comm: syz.0.1600 Not tainted syzkaller #0 [ 1096.294126][T13441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1096.304204][T13441] Call Trace: [ 1096.307559][T13441] [ 1096.310526][T13441] dump_stack_lvl+0x18c/0x250 [ 1096.315239][T13441] ? load_image+0x420/0x420 [ 1096.319770][T13441] ? show_regs_print_info+0x20/0x20 [ 1096.324992][T13441] ? print_circular_bug+0x12b/0x1a0 [ 1096.330224][T13441] check_noncircular+0x2fc/0x400 [ 1096.335211][T13441] ? look_up_lock_class+0x75/0x140 [ 1096.340357][T13441] ? print_deadlock_bug+0x5d0/0x5d0 [ 1096.345575][T13441] ? lockdep_lock+0xf5/0x230 [ 1096.350209][T13441] ? __lock_acquire+0x357f/0x7d80 [ 1096.355262][T13441] ? _find_first_zero_bit+0xd6/0x100 [ 1096.360574][T13441] __lock_acquire+0x37ef/0x7d80 [ 1096.365476][T13441] ? is_bpf_text_address+0x28f/0x2a0 [ 1096.370780][T13441] ? verify_lock_unused+0x140/0x140 [ 1096.376017][T13441] lock_acquire+0x19e/0x420 [ 1096.380532][T13441] ? configfs_depend_item_unlocked+0x157/0x430 [ 1096.386712][T13441] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1096.392912][T13441] ? __might_sleep+0xe0/0xe0 [ 1096.397540][T13441] ? rcu_is_watching+0x15/0xb0 [ 1096.402331][T13441] ? read_lock_is_recursive+0x20/0x20 [ 1096.407718][T13441] ? trace_contention_end+0x39/0xe0 [ 1096.412934][T13441] ? __mutex_lock+0x30d/0xc80 [ 1096.417639][T13441] ? do_syscall_64+0x55/0xb0 [ 1096.422249][T13441] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1096.428338][T13441] down_write+0x97/0x200 [ 1096.432611][T13441] ? configfs_depend_item_unlocked+0x157/0x430 [ 1096.438795][T13441] ? down_read_killable+0x340/0x340 [ 1096.444031][T13441] configfs_depend_item_unlocked+0x157/0x430 [ 1096.450038][T13441] usbg_make_tpg+0x1f7/0x580 [ 1096.454670][T13441] ? usbg_drop_tport+0x20/0x20 [ 1096.459449][T13441] ? vscnprintf+0x80/0x80 [ 1096.463808][T13441] target_fabric_make_tpg+0xa4/0x6d0 [ 1096.469109][T13441] ? target_fabric_release_wwn+0xb0/0xb0 [ 1096.474761][T13441] configfs_mkdir+0x515/0x9e0 [ 1096.479459][T13441] vfs_mkdir+0x2a5/0x470 [ 1096.483714][T13441] do_mkdirat+0x1dc/0x450 [ 1096.488056][T13441] ? vfs_mkdir+0x470/0x470 [ 1096.492521][T13441] ? getname_flags+0x20a/0x500 [ 1096.497310][T13441] __x64_sys_mkdir+0x6e/0x80 [ 1096.501918][T13441] do_syscall_64+0x55/0xb0 [ 1096.506351][T13441] ? clear_bhb_loop+0x40/0x90 [ 1096.511041][T13441] ? clear_bhb_loop+0x40/0x90 [ 1096.515735][T13441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1096.521654][T13441] RIP: 0033:0x7f8efb39e159 [ 1096.526096][T13441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.545745][T13441] RSP: 002b:00007f8efc2c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1096.554175][T13441] RAX: ffffffffffffffda RBX: 00007f8efb625fa0 RCX: 00007f8efb39e159 [ 1096.562163][T13441] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 1096.570149][T13441] RBP: 00007f8efb435024 R08: 0000000000000000 R09: 0000000000000000 [ 1096.578140][T13441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.586124][T13441] R13: 00007f8efb626038 R14: 00007f8efb625fa0 R15: 00007ffd7cad3f68 [ 1096.594116][T13441]