last executing test programs: 9.851875184s ago: executing program 0 (id=411): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3eaa01000000000071"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(r0, &(0x7f0000000000)='\"', 0xffffffffffffff69, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 8.926368865s ago: executing program 2 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f0000000040)="1c00", 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000001b00)={0x2020}, 0x173f) pipe(&(0x7f0000000040)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r2, &(0x7f0000000280)='1', 0x1) 7.669056012s ago: executing program 2 (id=414): prlimit64(0x0, 0xa, 0x0, 0x0) ptrace(0x10, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700", @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB], 0x48) syz_emit_vhci(0x0, 0x14) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) sendmsg$sock(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) 6.337301779s ago: executing program 3 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/flush\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1', 0x1) 6.099846501s ago: executing program 1 (id=417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000140)="2e1221b23bb601c493d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000280)="8bcceb216f624c06f5ff84087509000020006558", 0x14}, {&(0x7f00000005c0)="c0b9a0089e7eec0b", 0x8}], 0x3) 6.076041857s ago: executing program 2 (id=418): prlimit64(0x0, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 6.019659242s ago: executing program 0 (id=419): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 5.679129341s ago: executing program 3 (id=420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x14881}, 0x800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu\x0e\x00\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 5.372071031s ago: executing program 0 (id=421): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) 5.371760131s ago: executing program 3 (id=422): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0xa0000681) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x249, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r5, 0x2007ffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/134, 0x86) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file2\x00', 0x800, &(0x7f0000000440)=ANY=[], 0x1, 0x1c7, &(0x7f0000001ec0)="$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") ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000300)={{r0}, 0x3, &(0x7f0000000100)=[0x10000, 0xec8e, 0x3], 0x5, 0x2}) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) 5.33645499s ago: executing program 2 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f0000000040)="1c00", 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000001b00)={0x2020}, 0x173f) pipe(&(0x7f0000000040)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r2, &(0x7f0000000280)='1', 0x1) 5.290251502s ago: executing program 1 (id=424): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000786dd"], 0x4a) 4.388176127s ago: executing program 2 (id=425): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000340)={0x40, 0x9, 0x9e, "702f0d2245658a788c137e563c8e1d7864e0c9d6c36bf826e855f1890cf0b591aede974ec6eb0edf9c7ce12590413bacb76d778901515d9c55927d609079c35289e115ca5382f90d2c09278c381c48fe6499834f9210a7c52e919d1a9e5fd37dc6ddeba322fc813ca8db75a53d3ecf5cdad23d9f13b3efcd302a6848a5d0a7fa067508b19c0e15914b1eaee2ae5a0bb91458fa165ea792edc823184bbd1b"}, 0x0, 0x0}) shmctl$IPC_RMID(0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r2, 0x0, 0xf, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x1aff80, 0x0) syz_usb_disconnect(r0) 3.499390568s ago: executing program 3 (id=426): socket$netlink(0x10, 0x3, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x1900040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r1, 0x0, 0x0, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000000c0)=ANY=[], 0xc388) 3.450097102s ago: executing program 0 (id=427): prlimit64(0x0, 0xa, 0x0, 0x0) ptrace(0x10, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700", @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB], 0x48) syz_emit_vhci(0x0, 0x14) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) sendmsg$sock(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r4, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x4000000) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) 3.029171161s ago: executing program 1 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/flush\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1', 0x1) 1.72787668s ago: executing program 0 (id=429): socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f0000000500), 0x0) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) getpid() openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000740)="14b2eaa8e735cb8ce361abf7a1daa22f4451c1758ce6f3c3d9b716c87d3f8c0be6d7fd984064ae4d594c56f145dfa1fd23ae347eb4758a6fba1a219e5a8be640734bbf09eda0eca4f60d4fa9288828f76a4069fbd53dca6c8cf6cb95d100a8e3cea28fbd5f52577fec83440f02afa131a4edc6fbf029cf43c4bc2efd13e0537d9603cf48e6a7e5f51e6e735212a54a3f3bd8a16087a386e7385309ae5cd1fe90320fcb9e6017dc6f23cd2899afc2cac71e7428b6225226087fd5847301eed022e33e3ea3f69a0f59a47d539205adb619595ad69aad5aac7870d3f674ceb9bb", 0xf000}, {0x0, 0x45}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 1.391714918s ago: executing program 1 (id=430): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 1.342371481s ago: executing program 3 (id=431): prlimit64(0x0, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 470.138728ms ago: executing program 1 (id=432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000140)="2e1221b23bb601c493d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000280)="8bcceb216f624c06f5ff84087509000020006558", 0x14}, {&(0x7f00000005c0)="c0b9a0089e7eec0b", 0x8}], 0x3) 432.530627ms ago: executing program 0 (id=433): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f0000000040)="1c00", 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000001b00)={0x2020}, 0x173f) pipe(&(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000005180)={0x2020}, 0x2020) 113.326821ms ago: executing program 3 (id=434): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) 70.141092ms ago: executing program 1 (id=435): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0xa0000681) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x249, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r5, 0x2007ffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/134, 0x86) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file2\x00', 0x800, &(0x7f0000000440)=ANY=[], 0x1, 0x1c7, &(0x7f0000001ec0)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfIFoPRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopb7FDDGa6pNEtwOvyR53BI0nTQYTri45E1o7GEc5KUphgbWybUaRpHGB6tYN5Y55nXWFeYOjUvLS+pKqsqa97EiRtnNnY2Nq6cWBeV5reKsSXFZVNTJyOTwxY1gc3MhuqTbLQnvGtf9TDJgbXHw695PwMDQyrzJeOFRVKnVlTNnPBF6Q+j4XeGOzxlKyQ0NJwkrkhYNJgwHKljb3BlqLiVnNLAkKYQxpikxibWtuXMnBBmfja3BQotySeYQo9yLJ0pYXFAqOrkT0vNtw6JbjO2PXVgO8Nz+DjPmoI+QaPjEgxOCwX/y4CMSWj48f//f6altgu+FGn8lfDiZHDKYHC3Z1rWDA1IlgYQuRLKkwXrSUhe4aGjqWmUkpzQsCn2CwNDgaEyw9Y9nKsFGhiQok2FgYFhOyMsbqEhCmOMglEwCkbBKBgFo2AUjIJRMApGwSgYEQAQAAD//7+pkWE=") ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000300)={{r0}, 0x3, &(0x7f0000000100)=[0x10000, 0xec8e, 0x3], 0x5, 0x2}) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) 0s ago: executing program 2 (id=436): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0xa, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private1, @in6=@initdev}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x2400404e) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000"], 0x0, 0x3c}, 0x28) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. [ 73.333141][ T5758] cgroup: Unknown subsys name 'net' [ 73.435979][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.760788][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.666796][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.675289][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.698795][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.707092][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.715316][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.724320][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.732597][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.741355][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.777690][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.818706][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.826793][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.827837][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.841598][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.849582][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.858568][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.866764][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.866899][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.874928][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.889549][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.889646][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.904623][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.912395][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.924877][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.932835][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.323202][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 77.380673][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 77.426782][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 77.472057][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 77.511176][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.518581][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.526370][ T5780] bridge_slave_0: entered allmulticast mode [ 77.533895][ T5780] bridge_slave_0: entered promiscuous mode [ 77.569777][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.576901][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.584401][ T5780] bridge_slave_1: entered allmulticast mode [ 77.592084][ T5780] bridge_slave_1: entered promiscuous mode [ 77.656319][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.679126][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.686302][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.693730][ T5773] bridge_slave_0: entered allmulticast mode [ 77.700726][ T5773] bridge_slave_0: entered promiscuous mode [ 77.716506][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.735217][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.742698][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.750311][ T5773] bridge_slave_1: entered allmulticast mode [ 77.757105][ T5773] bridge_slave_1: entered promiscuous mode [ 77.793916][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.803302][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.810814][ T5769] bridge_slave_0: entered allmulticast mode [ 77.817573][ T5769] bridge_slave_0: entered promiscuous mode [ 77.826659][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.833899][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.841588][ T5769] bridge_slave_1: entered allmulticast mode [ 77.848261][ T5769] bridge_slave_1: entered promiscuous mode [ 77.872462][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.879739][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.886910][ T5777] bridge_slave_0: entered allmulticast mode [ 77.893872][ T5777] bridge_slave_0: entered promiscuous mode [ 77.923565][ T5780] team0: Port device team_slave_0 added [ 77.932475][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.939851][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.946978][ T5777] bridge_slave_1: entered allmulticast mode [ 77.954140][ T5777] bridge_slave_1: entered promiscuous mode [ 77.982882][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.994613][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.006750][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.017909][ T5780] team0: Port device team_slave_1 added [ 78.047491][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.087189][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.106683][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.113893][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.140249][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.154832][ T5773] team0: Port device team_slave_0 added [ 78.165399][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.184948][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.192179][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.218323][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.231207][ T5773] team0: Port device team_slave_1 added [ 78.264271][ T5769] team0: Port device team_slave_0 added [ 78.291051][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.298030][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.324303][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.336937][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.344095][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.370851][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.394472][ T5777] team0: Port device team_slave_0 added [ 78.403306][ T5777] team0: Port device team_slave_1 added [ 78.411119][ T5769] team0: Port device team_slave_1 added [ 78.475691][ T5780] hsr_slave_0: entered promiscuous mode [ 78.483064][ T5780] hsr_slave_1: entered promiscuous mode [ 78.502731][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.509967][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.535998][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.548491][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.555453][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.581366][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.599387][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.606361][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.632463][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.673065][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.680297][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.706326][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.734382][ T5773] hsr_slave_0: entered promiscuous mode [ 78.741609][ T5773] hsr_slave_1: entered promiscuous mode [ 78.747733][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.756051][ T5773] Cannot create hsr debugfs directory [ 78.829435][ T51] Bluetooth: hci0: command tx timeout [ 78.838229][ T5777] hsr_slave_0: entered promiscuous mode [ 78.844958][ T5777] hsr_slave_1: entered promiscuous mode [ 78.851254][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.858893][ T5777] Cannot create hsr debugfs directory [ 78.889338][ T5769] hsr_slave_0: entered promiscuous mode [ 78.895865][ T5769] hsr_slave_1: entered promiscuous mode [ 78.902347][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.910605][ T51] Bluetooth: hci3: command tx timeout [ 78.914731][ T5769] Cannot create hsr debugfs directory [ 78.991084][ T51] Bluetooth: hci2: command tx timeout [ 78.991113][ T5783] Bluetooth: hci1: command tx timeout [ 79.267291][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.283122][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.293751][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.303364][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.376256][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.386913][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.406163][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.419952][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.503224][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.517703][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.527855][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.540949][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.626442][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.636346][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.647759][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.660138][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.674750][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.741463][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.755376][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.762725][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.802621][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.810248][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.851198][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.906378][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.925389][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.942513][ T2098] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.949697][ T2098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.975104][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.982268][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.064496][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.106948][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.166438][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.199542][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.231895][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.239155][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.298090][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.305287][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.322368][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.329540][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.340055][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.347132][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.436624][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.582602][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.600988][ T5780] veth0_vlan: entered promiscuous mode [ 80.641881][ T5780] veth1_vlan: entered promiscuous mode [ 80.761769][ T5780] veth0_macvtap: entered promiscuous mode [ 80.807176][ T5780] veth1_macvtap: entered promiscuous mode [ 80.854191][ T5773] veth0_vlan: entered promiscuous mode [ 80.882354][ T5773] veth1_vlan: entered promiscuous mode [ 80.899621][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.909508][ T51] Bluetooth: hci0: command tx timeout [ 80.914427][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.946301][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.961056][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.973302][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.983555][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.993458][ T51] Bluetooth: hci3: command tx timeout [ 80.998973][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.015633][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.068838][ T51] Bluetooth: hci1: command tx timeout [ 81.079379][ T51] Bluetooth: hci2: command tx timeout [ 81.086727][ T5773] veth0_macvtap: entered promiscuous mode [ 81.112149][ T5773] veth1_macvtap: entered promiscuous mode [ 81.209721][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.217725][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.276800][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.288987][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.289897][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.301538][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.314305][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.317613][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.334172][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.345140][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.354340][ T5769] veth0_vlan: entered promiscuous mode [ 81.363125][ T5777] veth0_vlan: entered promiscuous mode [ 81.381039][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.396104][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.408968][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.417698][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.445856][ T5777] veth1_vlan: entered promiscuous mode [ 81.476907][ T5769] veth1_vlan: entered promiscuous mode [ 81.527152][ T5777] veth0_macvtap: entered promiscuous mode [ 81.575949][ T5777] veth1_macvtap: entered promiscuous mode [ 81.593509][ T5769] veth0_macvtap: entered promiscuous mode [ 81.632018][ T5769] veth1_macvtap: entered promiscuous mode [ 81.677449][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.696908][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.708334][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.719484][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.731880][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.747245][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.775575][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.787941][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.800324][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.811435][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.821960][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.833237][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.862989][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.876604][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.887140][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.902997][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.915615][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.935823][ T5839] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5'. [ 81.962381][ T5838] syzkaller1: entered promiscuous mode [ 81.967992][ T5838] syzkaller1: entered allmulticast mode [ 81.979881][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.998086][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.008236][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.023599][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.036077][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.051249][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.064355][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.079490][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.091808][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.160215][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.178553][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.187298][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.208828][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.226506][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.255430][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.264519][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.288556][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.370929][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.395266][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.992119][ T51] Bluetooth: hci0: command tx timeout [ 83.089431][ T51] Bluetooth: hci3: command tx timeout [ 83.218684][ T51] Bluetooth: hci2: command tx timeout [ 83.224728][ T51] Bluetooth: hci1: command tx timeout [ 83.418515][ T2098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.482554][ T2098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.532417][ T2098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.551989][ T2098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.682659][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.720453][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.882630][ T5809] IPVS: starting estimator thread 0... [ 83.934381][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.082064][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.096827][ T5855] IPVS: using max 17 ests per chain, 40800 per kthread [ 84.579782][ T5857] FAULT_INJECTION: forcing a failure. [ 84.579782][ T5857] name failslab, interval 1, probability 0, space 0, times 1 [ 84.614463][ T5857] CPU: 1 PID: 5857 Comm: syz.1.2 Not tainted syzkaller #0 [ 84.621631][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.631709][ T5857] Call Trace: [ 84.634989][ T5857] [ 84.637913][ T5857] dump_stack_lvl+0x18c/0x250 [ 84.642607][ T5857] ? show_regs_print_info+0x20/0x20 [ 84.647798][ T5857] ? load_image+0x420/0x420 [ 84.652297][ T5857] ? __might_sleep+0xe0/0xe0 [ 84.656890][ T5857] ? __lock_acquire+0x7d80/0x7d80 [ 84.661939][ T5857] should_fail_ex+0x394/0x4c0 [ 84.666635][ T5857] should_failslab+0x9/0x20 [ 84.671152][ T5857] slab_pre_alloc_hook+0x59/0x300 [ 84.676173][ T5857] kmem_cache_alloc+0x5a/0x2c0 [ 84.680970][ T5857] ? __mpol_dup+0x7a/0x320 [ 84.685383][ T5857] __mpol_dup+0x7a/0x320 [ 84.689628][ T5857] ? vma_dup_policy+0xa0/0xa0 [ 84.694299][ T5857] vma_replace_policy+0x167/0x4a0 [ 84.699316][ T5857] __se_sys_mbind+0x5ca/0x7c0 [ 84.703997][ T5857] ? __ia32_sys_get_robust_list+0x110/0x110 [ 84.709905][ T5857] ? __x64_sys_mbind+0xf0/0xf0 [ 84.714663][ T5857] ? lock_chain_count+0x20/0x20 [ 84.719517][ T5857] ? __x64_sys_mbind+0x21/0xf0 [ 84.724267][ T5857] do_syscall_64+0x55/0xb0 [ 84.728698][ T5857] ? clear_bhb_loop+0x40/0x90 [ 84.733367][ T5857] ? clear_bhb_loop+0x40/0x90 [ 84.738037][ T5857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.743946][ T5857] RIP: 0033:0x7f9eed79e159 [ 84.748358][ T5857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.767995][ T5857] RSP: 002b:00007f9eee709028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 84.776427][ T5857] RAX: ffffffffffffffda RBX: 00007f9eeda25fa0 RCX: 00007f9eed79e159 [ 84.784401][ T5857] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 84.792638][ T5857] RBP: 00007f9eed83506b R08: 0000000000000000 R09: 0000000000000000 [ 84.800610][ T5857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.808614][ T5857] R13: 00007f9eeda26038 R14: 00007f9eeda25fa0 R15: 00007ffd58e5e0a8 [ 84.816619][ T5857] [ 85.255830][ T51] Bluetooth: hci0: command tx timeout [ 85.261391][ T5783] Bluetooth: hci3: command tx timeout [ 85.310785][ T51] Bluetooth: hci1: command tx timeout [ 85.316309][ T51] Bluetooth: hci2: command tx timeout [ 87.343210][ T789] cfg80211: failed to load regulatory.db [ 88.371478][ T5893] netlink: 'syz.0.14': attribute type 1 has an invalid length. [ 88.464891][ T5896] ALSA: mixer_oss: invalid OSS volume 'W' [ 89.374823][ T5906] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.425968][ T5893] bond1 (unregistering): Released all slaves [ 89.951230][ T5923] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 89.962810][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.971283][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.991762][ T5922] No source specified [ 90.011043][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.018287][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.027076][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.034385][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.054607][ T5923] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 93.387495][ T5940] syz.0.27[5940]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.503299][ T5942] netlink: 'syz.3.28': attribute type 1 has an invalid length. [ 93.610228][ T5942] bond1 (unregistering): Released all slaves [ 94.070873][ T5948] loop1: detected capacity change from 0 to 128 [ 94.241924][ T5948] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 94.316364][ T5948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.329144][ T5948] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 95: 0x39 != 0x38 [ 94.372704][ T5948] UDF-fs: error (device loop1): udf_read_inode: (ino 95) failed !bh [ 94.403209][ T5948] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=2, partition=0 [ 94.562980][ T5957] loop2: detected capacity change from 0 to 512 [ 94.595805][ T5957] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.618237][ T5957] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.719972][ T5957] EXT4-fs (loop2): 1 truncate cleaned up [ 94.733165][ T5957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.819909][ T788] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 94.829979][ T5965] No source specified [ 94.849650][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.052493][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.073398][ T788] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 95.108084][ T788] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 95.133726][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.180464][ T788] usb 1-1: config 0 descriptor?? [ 95.219990][ T5967] loop2: detected capacity change from 0 to 32768 [ 95.242750][ T788] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 95.262588][ T5967] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 95.287847][ T788] dvb-usb: bulk message failed: -22 (3/0) [ 95.331871][ T5967] XFS (loop2): Ending clean mount [ 95.347457][ T5967] XFS (loop2): Quotacheck needed: Please wait. [ 95.353438][ T788] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 95.419856][ T788] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 95.422557][ T5955] dibusb: i2c wr: len=281 is too big! [ 95.422557][ T5955] [ 95.455592][ T5967] XFS (loop2): Quotacheck: Done. [ 95.473060][ T788] usb 1-1: media controller created [ 95.492614][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.581869][ T788] dvb-usb: bulk message failed: -22 (6/0) [ 95.622084][ T788] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 95.670507][ T788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 95.738300][ T788] dvb-usb: schedule remote query interval to 150 msecs. [ 95.750393][ T788] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 95.793269][ T788] usb 1-1: USB disconnect, device number 2 [ 95.867204][ T788] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 96.402096][ T5983] capability: warning: `syz.1.36' uses deprecated v2 capabilities in a way that may be insecure [ 96.840903][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 96.858781][ T51] CPU: 0 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 96.866219][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.876299][ T51] Workqueue: hci0 hci_rx_work [ 96.880984][ T51] Call Trace: [ 96.884253][ T51] [ 96.887171][ T51] dump_stack_lvl+0x18c/0x250 [ 96.891844][ T51] ? show_regs_print_info+0x20/0x20 [ 96.897036][ T51] ? load_image+0x420/0x420 [ 96.901560][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 96.906657][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 96.911667][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 96.916330][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 96.921543][ T51] kobject_add_internal+0x617/0xc90 [ 96.926758][ T51] kobject_add+0x164/0x240 [ 96.931179][ T51] ? __rwlock_init+0x150/0x150 [ 96.935957][ T51] ? kobject_init+0x1d0/0x1d0 [ 96.940632][ T51] ? _raw_spin_unlock+0x28/0x40 [ 96.945489][ T51] ? get_device_parent+0x366/0x390 [ 96.950642][ T51] device_add+0x3fa/0xc40 [ 96.955066][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 96.960010][ T51] hci_sync_conn_complete_evt+0x6d6/0x9a0 [ 96.965731][ T51] ? hci_remote_ext_features_evt+0xa80/0xa80 [ 96.971715][ T51] hci_event_packet+0x807/0x1280 [ 96.976652][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 96.981674][ T51] ? lock_chain_count+0x20/0x20 [ 96.986523][ T51] ? bis_list+0x290/0x290 [ 96.990854][ T51] ? kcov_remote_start+0x513/0x810 [ 96.995965][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 97.001166][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 97.006369][ T51] hci_rx_work+0x43a/0xd60 [ 97.010791][ T51] ? process_scheduled_works+0x975/0x1600 [ 97.016514][ T51] process_scheduled_works+0xa60/0x1600 [ 97.022084][ T51] ? worker_attach_to_pool+0x370/0x370 [ 97.027552][ T51] ? assign_work+0x3cc/0x5d0 [ 97.032145][ T51] worker_thread+0xa5e/0xfe0 [ 97.036756][ T51] kthread+0x2fa/0x390 [ 97.040832][ T51] ? pr_cont_work+0x550/0x550 [ 97.045517][ T51] ? kthread_blkcg+0xd0/0xd0 [ 97.050108][ T51] ret_from_fork+0x48/0x80 [ 97.054526][ T51] ? kthread_blkcg+0xd0/0xd0 [ 97.059124][ T51] ret_from_fork_asm+0x11/0x20 [ 97.063901][ T51] [ 97.087834][ T51] kobject: kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 97.102070][ T51] Bluetooth: hci0: failed to register connection device [ 97.208525][ T5986] loop3: detected capacity change from 0 to 128 [ 97.237927][ T5986] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 97.284163][ T5986] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.363344][ T5995] netlink: 'syz.0.41': attribute type 10 has an invalid length. [ 98.374575][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.382441][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.402204][ T5996] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 98.433880][ T5999] loop1: detected capacity change from 0 to 1024 [ 98.471191][ T5999] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.523841][ T5999] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.556228][ T5996] bond1 (unregistering): Released all slaves [ 98.563159][ T5999] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 98.578567][ T5999] System zones: 0-1, 3-36 [ 98.601677][ T5999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.828567][ T51] Bluetooth: hci0: command tx timeout [ 98.868613][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.916721][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.992016][ T5773] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.119310][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 99.159142][ T8] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 99.181266][ T6010] No source specified [ 99.215672][ T8] usb 1-1: config 179 has no interface number 0 [ 99.315355][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 99.444400][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 99.626897][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 99.767947][ T8] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 99.893379][ T8] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 99.988702][ T8] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 100.015073][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.037991][ T6003] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.353823][ T5812] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 100.388427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.428470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.909975][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 101.007855][ T6019] loop2: detected capacity change from 0 to 256 [ 101.060697][ T6019] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 101.792405][ T8] usb 1-1: USB disconnect, device number 3 [ 101.798259][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 101.798315][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 103.130395][ T6025] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.136671][ T6025] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 103.631607][ T8] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 103.763030][ T6025] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 103.781328][ T6024] loop3: detected capacity change from 0 to 4096 [ 103.802937][ T6024] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 103.876589][ T6025] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 103.915909][ T6025] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.922359][ T6025] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.946869][ T6025] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.008850][ T6024] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 104.016821][ T6024] ntfs3: loop3: ino=5, mi_enum_attr [ 104.064719][ T6024] ntfs3: loop3: ino=5, "/" mi_enum_attr [ 104.154695][ T6025] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.161163][ T6025] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.194260][ T6025] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.207050][ T6025] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.214433][ T6025] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 104.225439][ T6025] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 104.599961][ T6036] netlink: 'syz.0.52': attribute type 1 has an invalid length. [ 104.697908][ T6036] bond1 (unregistering): Released all slaves [ 104.819614][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.148810][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 105.165948][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.458548][ T23] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 1.00 [ 105.467621][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.488236][ T6040] netlink: 'syz.3.53': attribute type 10 has an invalid length. [ 105.499252][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.506703][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.543881][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.551038][ T6040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.559181][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.566327][ T6040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.576161][ T6040] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 105.955222][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.199183][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.323604][ T23] input: USB Touchscreen 0596:0001 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input8 [ 106.358855][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.545669][ C0] usbtouchscreen 3-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 106.555142][ T9] usb 3-1: USB disconnect, device number 2 [ 107.383673][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 108.038541][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.278543][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.443202][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.304427][ T6063] loop3: detected capacity change from 0 to 512 [ 109.416949][ T6063] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.59: couldn't read orphan inode 26 (err -116) [ 109.509399][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 109.551011][ T6063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.568292][ T6063] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.048813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.737323][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.744313][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.750859][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.273412][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.409820][ T6083] netlink: 'syz.3.64': attribute type 1 has an invalid length. [ 111.484021][ T6083] bond1 (unregistering): Released all slaves [ 111.618687][ T5810] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.619084][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 111.840357][ T6090] loop2: detected capacity change from 0 to 32768 [ 111.909386][ T6090] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 112.001963][ T5810] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.029710][ T5810] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.050605][ T5810] usb 2-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 112.067633][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.077489][ T5810] usb 2-1: Product: syz [ 112.082494][ T5810] usb 2-1: Manufacturer: syz [ 112.088044][ T5810] usb 2-1: SerialNumber: syz [ 112.141295][ T5810] usb 2-1: unsupported MDLM descriptors [ 112.154212][ T6090] XFS (loop2): Ending clean mount [ 112.161383][ T6090] XFS (loop2): Quotacheck needed: Please wait. [ 112.232844][ T6090] XFS (loop2): Quotacheck: Done. [ 112.357129][ T23] usb 2-1: USB disconnect, device number 2 [ 114.198587][ T6127] loop1: detected capacity change from 0 to 4096 [ 114.218533][ T6127] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 115.168865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.578489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.132470][ T6127] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 116.141584][ T6132] netlink: 'syz.0.75': attribute type 10 has an invalid length. [ 116.159733][ T6127] ntfs3: loop1: ino=5, mi_enum_attr [ 116.175684][ T6126] ntfs3: loop1: ino=5, "/" mi_enum_attr [ 116.464177][ T6136] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 116.510393][ T6136] bond1 (unregistering): Released all slaves [ 118.157163][ T5773] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.768015][ T6152] loop3: detected capacity change from 0 to 40427 [ 118.780429][ T6152] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 118.788512][ T6152] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 118.905975][ T6152] F2FS-fs (loop3): Found nat_bits in checkpoint [ 119.108560][ T6152] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 119.115904][ T6152] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 119.193328][ T6163] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 119.747221][ T28] audit: type=1804 audit(1790346809.298:2): pid=6152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.83" name="/newroot/25/bus/bus" dev="loop3" ino=10 res=1 errno=0 [ 120.110664][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 121.649541][ T6181] No source specified [ 122.188533][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 122.610620][ T6187] netlink: 'syz.3.86': attribute type 10 has an invalid length. [ 122.713581][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.720907][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.908672][ T6192] loop3: detected capacity change from 0 to 512 [ 122.916158][ T6192] EXT4-fs: Ignoring removed i_version option [ 122.922796][ T6192] EXT4-fs: Ignoring removed oldalloc option [ 122.976017][ T6192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.290427][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.285246][ T6212] loop3: detected capacity change from 0 to 2048 [ 126.324649][ T6212] ======================================================= [ 126.324649][ T6212] WARNING: The mand mount option has been deprecated and [ 126.324649][ T6212] and is ignored by this kernel. Remove the mand [ 126.324649][ T6212] option from the mount to silence this warning. [ 126.324649][ T6212] ======================================================= [ 126.412164][ T6212] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 126.680668][ T6216] loop1: detected capacity change from 0 to 512 [ 126.720977][ T6212] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 126.761102][ T6216] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 127.065757][ T6212] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 127.281459][ T6212] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.848765][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.338605][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 128.346095][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 128.377500][ T23] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 128.448162][ T23] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 128.518431][ T23] usb 2-1: Product: syz [ 128.563802][ T23] usb 2-1: Manufacturer: syz [ 128.590019][ T23] usb 2-1: SerialNumber: syz [ 128.615814][ T23] usb 2-1: config 0 descriptor?? [ 128.726503][ T6219] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.735755][ T23] hub 2-1:0.0: bad descriptor, ignoring hub [ 128.741776][ T23] hub: probe of 2-1:0.0 failed with error -5 [ 130.820231][ T23] usb 2-1: USB disconnect, device number 3 [ 130.975701][ T6245] sctp: [Deprecated]: syz.0.104 (pid 6245) Use of int in maxseg socket option. [ 130.975701][ T6245] Use struct sctp_assoc_value instead [ 131.958491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 133.071479][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.084125][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.499226][ T6253] loop3: detected capacity change from 0 to 128 [ 133.529711][ T6253] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 133.609616][ T6253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.618945][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.675359][ T788] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.808862][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 133.833757][ T27] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 133.853174][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.885737][ T27] usb 2-1: Product: syz [ 133.892149][ T27] usb 2-1: Manufacturer: syz [ 133.899550][ T27] usb 2-1: SerialNumber: syz [ 133.909148][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 133.918734][ T788] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 133.927178][ T788] usb 3-1: config 0 has no interface number 0 [ 134.090470][ T6255] loop3: detected capacity change from 0 to 32768 [ 134.150165][ T788] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 134.221765][ T6255] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 134.268040][ T6255] XFS (loop3): Ending clean mount [ 134.288425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 134.301272][ T6255] XFS (loop3): Quotacheck needed: Please wait. [ 134.314902][ T788] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 134.328615][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.338844][ T788] usb 3-1: Product: syz [ 134.343077][ T788] usb 3-1: Manufacturer: syz [ 134.347787][ T788] usb 3-1: SerialNumber: syz [ 134.359207][ T27] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 134.370210][ T788] usb 3-1: config 0 descriptor?? [ 134.390256][ T788] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 134.403567][ T27] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 134.414462][ T27] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 134.439815][ T6255] XFS (loop3): Quotacheck: Done. [ 134.447693][ T27] usb 2-1: media controller created [ 134.593676][ T788] usb 3-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 134.613989][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.618579][ T6266] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 134.629901][ T788] usb 3-1: USB disconnect, device number 3 [ 135.313355][ T788] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 135.326348][ T27] zl10353_read_register: readreg error (reg=127, ret==-71) [ 135.388691][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.432142][ T788] cypress_m8 3-1:0.35: device disconnected [ 135.473418][ T5777] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 135.618072][ T6273] futex_wake_op: syz.1.111 tries to shift op by 144; fix this program [ 135.642901][ T6273] loop1: detected capacity change from 0 to 256 [ 136.540084][ T27] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 136.552371][ T27] usb 2-1: USB disconnect, device number 4 [ 136.614657][ T6273] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 137.534422][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.437522][ T6291] sctp: [Deprecated]: syz.1.115 (pid 6291) Use of int in maxseg socket option. [ 138.437522][ T6291] Use struct sctp_assoc_value instead [ 138.618417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 139.378732][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.899963][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 139.987482][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 140.053899][ T6296] usb usb8: usbfs: process 6296 (syz.3.118) did not claim interface 0 before use [ 140.081553][ T27] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 140.103939][ T27] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 140.134429][ T27] usb 3-1: Product: syz [ 140.141944][ T27] usb 3-1: Manufacturer: syz [ 140.146695][ T27] usb 3-1: SerialNumber: syz [ 140.176857][ T27] usb 3-1: config 0 descriptor?? [ 140.184402][ T6290] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 140.197975][ T27] hub 3-1:0.0: bad descriptor, ignoring hub [ 140.234118][ T27] hub: probe of 3-1:0.0 failed with error -5 [ 140.298603][ T5810] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.539445][ T5810] usb 1-1: Using ep0 maxpacket: 32 [ 141.809658][ T5810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 142.113975][ T5810] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 142.135584][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 142.144369][ T5810] usb 1-1: Product: syz [ 142.149061][ T5810] usb 1-1: Manufacturer: syz [ 142.153755][ T5810] usb 1-1: SerialNumber: syz [ 142.161564][ T5810] usb 1-1: config 0 descriptor?? [ 142.168256][ T6294] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 142.194769][ T5810] hub 1-1:0.0: bad descriptor, ignoring hub [ 142.211669][ T5810] hub: probe of 1-1:0.0 failed with error -5 [ 142.259224][ T5810] chaoskey 1-1:0.0: Unable to register with hwrng [ 142.285023][ T6308] loop3: detected capacity change from 0 to 128 [ 142.318717][ T27] usb 3-1: USB disconnect, device number 4 [ 142.436831][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 143.258532][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 143.270365][ T23] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 143.513454][ T6314] loop2: detected capacity change from 0 to 4096 [ 143.738459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 144.431767][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.579328][ T6314] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 145.119252][ T6314] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 145.129989][ T6314] ntfs3: loop2: ino=5, mi_enum_attr [ 145.159008][ T6314] ntfs3: loop2: ino=5, "/" mi_enum_attr [ 145.308642][ T23] usb 2-1: Product: syz [ 145.312857][ T23] usb 2-1: Manufacturer: syz [ 145.317469][ T23] usb 2-1: SerialNumber: syz [ 145.345172][ T23] usb 2-1: config 0 descriptor?? [ 145.402985][ T23] usb 2-1: can't set config #0, error -71 [ 145.410478][ T23] usb 2-1: USB disconnect, device number 5 [ 145.439340][ T27] usb 1-1: USB disconnect, device number 4 [ 146.571742][ T6325] loop2: detected capacity change from 0 to 128 [ 146.618770][ T6325] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 146.779262][ T6334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.388738][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.715537][ T6325] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.430433][ T6340] warning: `syz.3.130' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 149.049169][ T6345] FAULT_INJECTION: forcing a failure. [ 149.049169][ T6345] name failslab, interval 1, probability 0, space 0, times 0 [ 149.069583][ T6345] CPU: 1 PID: 6345 Comm: syz.0.132 Not tainted syzkaller #0 [ 149.076930][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.087019][ T6345] Call Trace: [ 149.090330][ T6345] [ 149.093283][ T6345] dump_stack_lvl+0x18c/0x250 [ 149.098020][ T6345] ? show_regs_print_info+0x20/0x20 [ 149.103255][ T6345] ? load_image+0x420/0x420 [ 149.107787][ T6345] ? __might_sleep+0xe0/0xe0 [ 149.112411][ T6345] ? __lock_acquire+0x7d80/0x7d80 [ 149.117498][ T6345] should_fail_ex+0x394/0x4c0 [ 149.122233][ T6345] should_failslab+0x9/0x20 [ 149.126769][ T6345] slab_pre_alloc_hook+0x59/0x300 [ 149.131840][ T6345] ? nf_nat_register_fn+0x29e/0x540 [ 149.137061][ T6345] __kmem_cache_alloc_node+0x53/0x250 [ 149.142437][ T6345] ? nf_nat_register_fn+0x29e/0x540 [ 149.147631][ T6345] kmalloc_trace+0x2a/0xe0 [ 149.152074][ T6345] nf_nat_register_fn+0x29e/0x540 [ 149.157103][ T6345] iptable_nat_table_init+0xd4/0x2d0 [ 149.162579][ T6345] xt_find_table_lock+0x304/0x3e0 [ 149.167620][ T6345] xt_request_find_table_lock+0x26/0x100 [ 149.173286][ T6345] do_ipt_get_ctl+0x71a/0x1210 [ 149.178108][ T6345] ? do_ipt_set_ctl+0xe00/0xe00 [ 149.183009][ T6345] ? __lock_acquire+0x7d80/0x7d80 [ 149.188039][ T6345] ? rcu_is_watching+0x15/0xb0 [ 149.192820][ T6345] ? trace_contention_end+0x39/0xe0 [ 149.198010][ T6345] ? __mutex_lock+0x30d/0xc80 [ 149.202679][ T6345] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 149.208298][ T6345] ? mutex_unlock+0x10/0x10 [ 149.212797][ T6345] ? __might_fault+0xaa/0x120 [ 149.217464][ T6345] ? __lock_acquire+0x7d80/0x7d80 [ 149.222476][ T6345] nf_getsockopt+0x262/0x280 [ 149.227058][ T6345] ip_getsockopt+0x19f/0x230 [ 149.231643][ T6345] ? ip_get_mcast_msfilter+0x360/0x360 [ 149.237090][ T6345] ? __might_fault+0xaa/0x120 [ 149.241805][ T6345] ? __might_fault+0xc6/0x120 [ 149.246465][ T6345] ? __might_fault+0xaa/0x120 [ 149.251128][ T6345] ? sctp_getsockopt+0x9b/0xb60 [ 149.255969][ T6345] ? sock_recv_errqueue+0x5e0/0x5e0 [ 149.261160][ T6345] do_sock_getsockopt+0x379/0x450 [ 149.266179][ T6345] ? __ia32_sys_setsockopt+0x200/0x200 [ 149.271661][ T6345] ? warn_bogus_irq_restore+0x20/0x30 [ 149.277034][ T6345] __x64_sys_getsockopt+0x1d6/0x280 [ 149.282238][ T6345] ? warn_bogus_irq_restore+0x20/0x30 [ 149.287624][ T6345] ? warn_bogus_irq_restore+0x20/0x30 [ 149.292992][ T6345] do_syscall_64+0x55/0xb0 [ 149.297401][ T6345] ? clear_bhb_loop+0x40/0x90 [ 149.302076][ T6345] ? clear_bhb_loop+0x40/0x90 [ 149.306786][ T6345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.312699][ T6345] RIP: 0033:0x7f80f179e159 [ 149.317117][ T6345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.336756][ T6345] RSP: 002b:00007f80f26ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 149.345177][ T6345] RAX: ffffffffffffffda RBX: 00007f80f1a25fa0 RCX: 00007f80f179e159 [ 149.353141][ T6345] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 149.361105][ T6345] RBP: 00007f80f183506b R08: 00002000000000c0 R09: 0000000000000000 [ 149.369093][ T6345] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 149.377081][ T6345] R13: 00007f80f1a26038 R14: 00007f80f1a25fa0 R15: 00007fff87437dc8 [ 149.385064][ T6345] [ 149.468709][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.528633][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 149.802648][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 149.914029][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 150.149600][ T23] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 150.201635][ T23] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 150.224677][ T23] usb 2-1: Product: syz [ 150.248474][ T23] usb 2-1: Manufacturer: syz [ 150.812291][ T23] usb 2-1: SerialNumber: syz [ 151.139233][ T6353] loop3: detected capacity change from 0 to 4096 [ 151.192700][ T6353] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 152.108470][ T23] usb 2-1: config 0 descriptor?? [ 153.179331][ T23] usb 2-1: can't set config #0, error -71 [ 153.220262][ T23] usb 2-1: USB disconnect, device number 6 [ 153.316688][ T6355] loop2: detected capacity change from 0 to 4096 [ 153.346550][ T6355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.391351][ T6353] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 153.430015][ T6353] ntfs3: loop3: ino=5, mi_enum_attr [ 153.464791][ T6352] ntfs3: loop3: ino=5, "/" mi_enum_attr [ 154.538951][ T6355] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 154.749178][ T6373] loop1: detected capacity change from 0 to 512 [ 155.882295][ T6373] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 156.128795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 156.159958][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.588612][ T5812] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 157.759397][ T6393] loop2: detected capacity change from 0 to 4096 [ 158.014574][ T6393] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 158.317928][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.438799][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 159.488989][ T5812] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 159.582708][ T5812] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 159.592235][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 159.600702][ T5812] usb 4-1: Product: syz [ 159.608762][ T5812] usb 4-1: Manufacturer: syz [ 159.618464][ T5812] usb 4-1: SerialNumber: syz [ 159.625456][ T5812] usb 4-1: config 0 descriptor?? [ 159.633894][ T6388] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.642291][ T5812] hub 4-1:0.0: bad descriptor, ignoring hub [ 159.654549][ T5812] hub: probe of 4-1:0.0 failed with error -5 [ 160.348528][ T5783] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.413075][ T6393] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 160.457317][ T6393] ntfs3: loop2: ino=5, mi_enum_attr [ 160.551030][ T27] usb 4-1: USB disconnect, device number 2 [ 160.558641][ T6400] netlink: 'syz.0.146': attribute type 10 has an invalid length. [ 160.985684][ T6409] syz.2.151 uses obsolete (PF_INET,SOCK_PACKET) [ 161.135896][ T6414] loop1: detected capacity change from 0 to 128 [ 162.867766][ T6425] loop2: detected capacity change from 0 to 256 [ 162.966241][ T6425] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 164.189594][ T6435] netlink: 'syz.3.161': attribute type 10 has an invalid length. [ 164.310596][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 168.324006][ T6464] "syz.0.171" (6464) uses obsolete ecb(arc4) skcipher [ 174.806721][ T5783] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.085406][ T6517] comedi comedi0: pcmda12: I/O port conflict (0x5,16) [ 176.439056][ T6525] loop2: detected capacity change from 0 to 512 [ 176.898781][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.988690][ T6525] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.190: couldn't read orphan inode 26 (err -116) [ 177.327770][ T6525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.278662][ T51] Bluetooth: hci0: command tx timeout [ 178.284719][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.468658][ T6525] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.361528][ T5783] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.453887][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.358450][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 180.928567][ T789] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 181.298734][ T789] usb 2-1: Using ep0 maxpacket: 32 [ 181.469358][ T5783] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.742164][ T789] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 181.781340][ T789] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 181.843545][ T789] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 181.878590][ T789] usb 2-1: Product: syz [ 181.888425][ T789] usb 2-1: Manufacturer: syz [ 181.913398][ T789] usb 2-1: SerialNumber: syz [ 181.939554][ T789] usb 2-1: config 0 descriptor?? [ 181.990114][ T6554] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 182.000170][ T789] hub 2-1:0.0: bad descriptor, ignoring hub [ 182.009326][ T789] hub: probe of 2-1:0.0 failed with error -5 [ 182.073127][ T6566] FAULT_INJECTION: forcing a failure. [ 182.073127][ T6566] name failslab, interval 1, probability 0, space 0, times 0 [ 182.979212][ T789] usb 2-1: USB disconnect, device number 7 [ 183.016499][ T6566] CPU: 1 PID: 6566 Comm: syz.2.200 Not tainted syzkaller #0 [ 183.023850][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.033915][ T6566] Call Trace: [ 183.037192][ T6566] [ 183.040116][ T6566] dump_stack_lvl+0x18c/0x250 [ 183.044801][ T6566] ? show_regs_print_info+0x20/0x20 [ 183.049999][ T6566] ? load_image+0x420/0x420 [ 183.054508][ T6566] ? __lock_acquire+0x7d80/0x7d80 [ 183.059546][ T6566] should_fail_ex+0x394/0x4c0 [ 183.064243][ T6566] should_failslab+0x9/0x20 [ 183.068792][ T6566] slab_pre_alloc_hook+0x59/0x300 [ 183.073859][ T6566] ? get_device_parent+0x255/0x390 [ 183.078988][ T6566] __kmem_cache_alloc_node+0x53/0x250 [ 183.084377][ T6566] ? get_device_parent+0x255/0x390 [ 183.089522][ T6566] kmalloc_trace+0x2a/0xe0 [ 183.093958][ T6566] get_device_parent+0x255/0x390 [ 183.098908][ T6566] device_add+0x2d4/0xc40 [ 183.103245][ T6566] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 183.108796][ T6566] wakeup_source_register+0x163/0x240 [ 183.114173][ T6566] ep_insert+0xeb2/0x1990 [ 183.118531][ T6566] ? ep_loop_check+0x1b0/0x1b0 [ 183.123314][ T6566] ? __lock_acquire+0x7d80/0x7d80 [ 183.128379][ T6566] do_epoll_ctl+0x8bc/0xf40 [ 183.132902][ T6566] __x64_sys_epoll_ctl+0x166/0x1b0 [ 183.138018][ T6566] ? ep_modify+0xa80/0xa80 [ 183.142439][ T6566] ? lockdep_hardirqs_on+0x98/0x150 [ 183.147642][ T6566] do_syscall_64+0x55/0xb0 [ 183.152056][ T6566] ? clear_bhb_loop+0x40/0x90 [ 183.156757][ T6566] ? clear_bhb_loop+0x40/0x90 [ 183.161436][ T6566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.167334][ T6566] RIP: 0033:0x7f39fd79e159 [ 183.171750][ T6566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.191362][ T6566] RSP: 002b:00007f39fe70c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 183.199782][ T6566] RAX: ffffffffffffffda RBX: 00007f39fda25fa0 RCX: 00007f39fd79e159 [ 183.207753][ T6566] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007 [ 183.215716][ T6566] RBP: 00007f39fd83506b R08: 0000000000000000 R09: 0000000000000000 [ 183.223685][ T6566] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.231652][ T6566] R13: 00007f39fda26038 R14: 00007f39fda25fa0 R15: 00007ffcb0237b78 [ 183.239632][ T6566] [ 184.322338][ T6574] ALSA: mixer_oss: invalid OSS volume 'W' [ 186.446774][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.078535][ T789] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 188.368501][ T789] usb 3-1: Using ep0 maxpacket: 32 [ 188.509406][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 189.060895][ T789] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 189.090100][ T789] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 189.110400][ T789] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 189.133875][ T789] usb 3-1: Product: syz [ 189.138089][ T789] usb 3-1: Manufacturer: syz [ 189.264476][ T789] usb 3-1: SerialNumber: syz [ 189.276563][ T789] usb 3-1: config 0 descriptor?? [ 189.283247][ T6601] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 189.292904][ T789] hub 3-1:0.0: bad descriptor, ignoring hub [ 189.299117][ T789] hub: probe of 3-1:0.0 failed with error -5 [ 190.659416][ T789] usb 3-1: USB disconnect, device number 5 [ 191.989189][ T6632] loop3: detected capacity change from 0 to 128 [ 192.014192][ T6632] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 192.048851][ T789] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 192.079251][ T6632] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.228330][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 192.263027][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'. [ 192.983666][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.251731][ T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.379574][ T789] usb 2-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 193.538555][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.586616][ T789] usb 2-1: config 0 descriptor?? [ 194.082789][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.089963][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 194.111543][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.122666][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.132375][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.148957][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.166007][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.175508][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.187344][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.195123][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.207291][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.215844][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.227211][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.238656][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.245752][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.294994][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.303467][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.313317][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 194.318646][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.328112][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.328128][ T6654] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 194.346535][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.354635][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.362294][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 194.374045][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.382492][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.390383][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.398010][ T789] wacom 0003:056A:0318.0001: unknown main item tag 0x0 [ 194.405682][ T8] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 194.416840][ T8] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 194.448111][ T789] usb 2-1: USB disconnect, device number 8 [ 194.457380][ T8] usb 3-1: Product: syz [ 194.462026][ T8] usb 3-1: Manufacturer: syz [ 194.479497][ T8] usb 3-1: SerialNumber: syz [ 194.513002][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.519974][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.548456][ T8] usb 3-1: config 0 descriptor?? [ 194.567753][ T6647] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 194.606782][ T8] hub 3-1:0.0: bad descriptor, ignoring hub [ 194.613037][ T8] hub: probe of 3-1:0.0 failed with error -5 [ 197.097723][ T6663] loop3: detected capacity change from 0 to 512 [ 197.107697][ T6663] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 197.588800][ T5834] usb 3-1: USB disconnect, device number 6 [ 197.724718][ T6663] EXT4-fs (loop3): failed to open journal device unknown-block(11,127) -6 [ 197.857413][ T6681] loop2: detected capacity change from 0 to 16 [ 199.109719][ T6681] erofs: (device loop2): mounted with root inode @ nid 36. [ 199.150978][ T6678] syz.2.232: attempt to access beyond end of device [ 199.150978][ T6678] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 200.219149][ T6697] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 200.618940][ T788] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 201.188553][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 201.208294][ T788] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 201.348522][ T788] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 201.359755][ T788] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 201.367917][ T788] usb 4-1: Product: syz [ 201.376287][ T788] usb 4-1: Manufacturer: syz [ 201.386863][ T788] usb 4-1: SerialNumber: syz [ 201.438183][ T788] usb 4-1: config 0 descriptor?? [ 201.499828][ T6701] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 201.615374][ T788] hub 4-1:0.0: bad descriptor, ignoring hub [ 201.695593][ T788] hub: probe of 4-1:0.0 failed with error -5 [ 201.868484][ T5783] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.304996][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'. [ 203.313148][ T6701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.417380][ T6701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.018468][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.209080][ T27] usb 4-1: USB disconnect, device number 3 [ 204.487962][ T6734] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 205.492693][ T6741] netlink: 'syz.2.251': attribute type 10 has an invalid length. [ 206.296324][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.304885][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.517916][ T6741] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.525156][ T6741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.532715][ T6741] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.539862][ T6741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.566514][ T6741] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 208.554355][ T6770] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 209.498156][ T6779] loop1: detected capacity change from 0 to 256 [ 209.548402][ C0] sched: RT throttling activated [ 209.559196][ T6779] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 210.386999][ T6783] process 'syz.1.263' launched './file1' with NULL argv: empty string added [ 210.548518][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 211.319870][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 211.564844][ T6788] netlink: 'syz.2.266': attribute type 10 has an invalid length. [ 211.748885][ T8] usb 1-1: device descriptor read/all, error -71 [ 211.762851][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.770136][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.890820][ T6794] loop1: detected capacity change from 0 to 128 [ 212.723528][ T6794] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 212.783179][ T6794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.139069][ T6811] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 215.608688][ T6820] block device autoloading is deprecated and will be removed. [ 215.617225][ T6820] syz.0.275: attempt to access beyond end of device [ 215.617225][ T6820] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 216.097841][ T6823] loop2: detected capacity change from 0 to 1024 [ 216.151186][ T6823] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 216.199706][ T6827] loop0: detected capacity change from 0 to 1024 [ 216.209475][ T6823] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 216.238038][ T6827] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 216.258153][ T6823] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 216.270342][ T6823] EXT4-fs error (device loop2): ext4_get_journal_inode:5820: inode #5: comm syz.2.276: unexpected bad inode w/o EXT4_IGET_BAD [ 216.288798][ T6823] EXT4-fs (loop2): no journal found [ 216.294309][ T6827] JBD2: no valid journal superblock found [ 216.302797][ T6823] EXT4-fs (loop2): can't get journal size [ 216.315541][ T6823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 216.328583][ T6827] EXT4-fs (loop0): Could not load journal inode [ 216.408518][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 217.538740][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 217.569832][ T6837] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 217.670526][ T27] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 217.895619][ T27] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 217.933135][ T27] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 217.970529][ T27] usb 2-1: Product: syz [ 217.989772][ T27] usb 2-1: Manufacturer: syz [ 218.009556][ T27] usb 2-1: SerialNumber: syz [ 218.034304][ T27] usb 2-1: config 0 descriptor?? [ 218.068793][ T6826] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 218.100168][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.106499][ T27] hub 2-1:0.0: bad descriptor, ignoring hub [ 218.115765][ T27] hub: probe of 2-1:0.0 failed with error -5 [ 218.214980][ T6833] loop3: detected capacity change from 0 to 32768 [ 218.234967][ T6833] (syz.3.280,6833,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "usrqu=writeback" or missing value [ 218.257104][ T6833] (syz.3.280,6833,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 218.458241][ T27] usb 2-1: USB disconnect, device number 9 [ 219.153117][ T6850] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 219.368503][ T6852] ubi0: attaching mtd0 [ 219.400320][ T6852] ubi0: scanning is finished [ 219.445795][ T6852] ubi0: empty MTD device detected [ 219.721618][ T6859] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 220.264215][ T6852] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 220.285348][ T6852] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 220.293360][ T6860] kernel profiling enabled (shift: 5) [ 220.320505][ T6852] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 220.383215][ T6852] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 220.408641][ T6852] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 220.434247][ T6852] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 220.455821][ T6852] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3309107766 [ 220.487127][ T6852] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 220.561529][ T6861] ubi0: background thread "ubi_bgt0d" started, PID 6861 [ 222.658862][ T27] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 222.748766][ T5812] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 222.860912][ T27] usb 1-1: config 0 has no interfaces? [ 222.866841][ T27] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 222.878508][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.902027][ T27] usb 1-1: config 0 descriptor?? [ 222.931949][ T5812] usb 2-1: Using ep0 maxpacket: 32 [ 222.952557][ T5812] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 222.973659][ T5812] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 222.983311][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 222.994301][ T5812] usb 2-1: Product: syz [ 223.003051][ T5812] usb 2-1: Manufacturer: syz [ 223.007726][ T5812] usb 2-1: SerialNumber: syz [ 223.024708][ T5812] usb 2-1: config 0 descriptor?? [ 223.031880][ T6874] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 223.043152][ T5812] hub 2-1:0.0: bad descriptor, ignoring hub [ 223.056937][ T5812] hub: probe of 2-1:0.0 failed with error -5 [ 223.247677][ T6884] loop2: detected capacity change from 0 to 128 [ 223.337757][ T8] usb 1-1: USB disconnect, device number 7 [ 223.381770][ T5812] usb 2-1: USB disconnect, device number 10 [ 224.121106][ T6890] lo speed is unknown, defaulting to 1000 [ 224.144154][ T6890] lo speed is unknown, defaulting to 1000 [ 224.194248][ T6890] lo speed is unknown, defaulting to 1000 [ 224.261980][ T6890] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 224.295172][ T6894] mmap: syz.1.300 (6894) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 224.319885][ T6890] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 226.044677][ T6890] lo speed is unknown, defaulting to 1000 [ 226.057364][ T6890] lo speed is unknown, defaulting to 1000 [ 226.064865][ T6890] lo speed is unknown, defaulting to 1000 [ 226.080038][ T6890] lo speed is unknown, defaulting to 1000 [ 226.349097][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 227.490475][ T6925] loop3: detected capacity change from 0 to 256 [ 227.608527][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 228.478568][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 229.097248][ T6925] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 229.369936][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 229.406696][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 229.559222][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 229.624571][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 229.648606][ T5809] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 229.694456][ T9] usb 2-1: Product: syz [ 229.732693][ T9] usb 2-1: Manufacturer: syz [ 229.764479][ T9] usb 2-1: SerialNumber: syz [ 231.569578][ T9] usb 2-1: config 0 descriptor?? [ 231.577058][ T6931] block device autoloading is deprecated and will be removed. [ 231.603501][ T9] usb 2-1: can't set config #0, error -71 [ 231.619435][ T5809] usb 3-1: Using ep0 maxpacket: 32 [ 231.683754][ T6937] netlink: 'syz.3.315': attribute type 10 has an invalid length. [ 232.467209][ T9] usb 2-1: USB disconnect, device number 11 [ 232.573058][ T5809] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 232.664462][ T5809] usb 3-1: can't read configurations, error -71 [ 235.339079][ T6967] netlink: 'syz.1.325': attribute type 10 has an invalid length. [ 235.353725][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.361446][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.380352][ T6967] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.387550][ T6967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.395131][ T6967] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.402345][ T6967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.421004][ T6967] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 236.289141][ T6969] loop3: detected capacity change from 0 to 256 [ 236.441486][ T6969] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 237.072278][ T6975] loop0: detected capacity change from 0 to 128 [ 237.258041][ T6975] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 237.308791][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 237.343900][ T6975] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.931099][ T6984] loop2: detected capacity change from 0 to 1024 [ 237.995174][ T6984] EXT4-fs: Ignoring removed bh option [ 238.343473][ T6984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.433298][ T6984] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.272765][ T6984] EXT4-fs (loop2): shut down requested (0) [ 239.398580][ T5783] Bluetooth: hci3: command 0x0c1a tx timeout [ 239.440770][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 241.163999][ T7020] loop1: detected capacity change from 0 to 128 [ 241.699971][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 242.572511][ T7036] loop0: detected capacity change from 0 to 4096 [ 243.260547][ T7036] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 244.318622][ T5783] Bluetooth: hci1: command 0x0c1a tx timeout [ 244.451167][ T7036] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 244.472590][ T7036] ntfs3: loop0: ino=5, mi_enum_attr [ 244.498012][ T7034] ntfs3: loop0: ino=5, "/" mi_enum_attr [ 249.292425][ T7074] loop1: detected capacity change from 0 to 4096 [ 249.489147][ T7074] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 250.756488][ T7074] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 250.768858][ T7074] ntfs3: loop1: ino=5, mi_enum_attr [ 250.792102][ T7073] ntfs3: loop1: ino=5, "/" mi_enum_attr [ 251.952158][ T7088] ALSA: mixer_oss: invalid OSS volume 'W' [ 254.994682][ T7108] netlink: 'syz.3.367': attribute type 10 has an invalid length. [ 255.625716][ T7116] loop0: detected capacity change from 0 to 4096 [ 255.672045][ T7116] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 255.952596][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.104839][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.134571][ T7116] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 256.151474][ T7116] ntfs3: loop0: ino=5, mi_enum_attr [ 256.183449][ T7116] ntfs3: loop0: ino=5, "/" mi_enum_attr [ 257.554800][ T7127] loop3: detected capacity change from 0 to 128 Read from remote host us-central1-ssh-serialport.googleapis.com: Connection reset by peer client_loop: send disconnect: Broken pipe