last executing test programs: 8m29.684483076s ago: executing program 2 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 8m26.575873693s ago: executing program 2 (id=272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000d49427c2654120934bd8e76e9c5fe41a4ff0df28aef8ad81a4810d9b8184c3d5e2aa25817bcf5887459f1ca92de9f356e99f49ba0971e04a29d46c64281d45c6258a705e163584bb9d76cfa0"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f00000004c0), 0x80, r5, 0x0, 0x7}, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0xb}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=@newqdisc={0x250, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xd, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x60, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf5, 0x0, 0x101, 0x8001, 0x8, 0x5}, {0x0, 0x2, 0x2, 0x4, 0x4, 0x2081}, 0x6, 0x2004, 0x8bd}}, @TCA_TBF_RATE64={0xc, 0x4, 0x75b76c06d7ed6074}, @TCA_TBF_PARMS={0x28, 0x1, {{0xff, 0x1, 0xd, 0x7, 0x8, 0x100}, {0xff, 0x2, 0x7, 0x8, 0x6}, 0x4, 0x9, 0xd88}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffff}, @TCA_STAB={0x1bc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x2, 0xfffc, 0x2, 0x2, 0x7, 0xa, 0x8}}, {0x14, 0x2, [0xec00, 0x8, 0x11, 0x3, 0x6, 0x0, 0x4238, 0x401]}}, {{0x1c, 0x1, {0x7, 0x3, 0x1, 0x8, 0x0, 0x1, 0x8, 0x2}}, {0x8, 0x2, [0x2, 0x3]}}, {{0x1c, 0x1, {0x6, 0xe, 0x4, 0x1, 0x1, 0x2, 0x2, 0x1}}, {0x42, 0x2, [0x3]}}, {{0x1c, 0x1, {0xa, 0x6, 0x4, 0x0, 0x0, 0x8001, 0x8, 0xb}}, {0x1a, 0x2, [0x0, 0x8, 0x8, 0x7, 0x1, 0x10, 0xfff, 0x6c, 0x690, 0xfff, 0x800]}}, {{0x1c, 0x1, {0x9, 0x0, 0x0, 0xdb, 0x0, 0x5ee, 0xffffffff, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x3, 0x3, 0x18, 0xb85, 0x0, 0xb981, 0xdc8, 0x6}}, {0x10, 0x2, [0x0, 0x2, 0x6, 0x6, 0x4, 0x6]}}, {{0x1c, 0x1, {0xff, 0x4, 0x4, 0x5, 0x2, 0x80000000, 0x7}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x6, 0x81, 0xfcb, 0x0, 0x655, 0xc, 0xe}}, {0x20, 0x2, [0xe, 0x6, 0x400, 0x7, 0x5, 0x9, 0x4f0a, 0x8, 0xab3c, 0xe81, 0x3, 0x6, 0x3, 0x0]}}, {{0x1c, 0x1, {0x6, 0x60, 0x7, 0x6, 0x1, 0x4, 0x1, 0x8}}, {0x14, 0x2, [0x9, 0x9, 0x7, 0x8001, 0x9, 0x101, 0x4, 0x6]}}, {{0x1c, 0x1, {0x8, 0x2, 0x7, 0x4, 0x0, 0x5, 0x840, 0x6}}, {0x10, 0x2, [0x5, 0x2, 0x2, 0x0, 0x4a, 0x570a]}}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01e723000000ffdbdf251500000024001d81"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) 8m19.272846235s ago: executing program 2 (id=285): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1f0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) removexattr(0x0, 0x0) memfd_create(&(0x7f0000000000)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZe8z\xb0\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) unshare(0x20000400) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m17.986600667s ago: executing program 2 (id=287): r0 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r1, 0xa9, 0x2, 0x850, 0x4, 0x400}, 0x14) 8m17.542610048s ago: executing program 2 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x39) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x2, 0xc000, 0x4, r5, r6, 0x1, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m15.435430331s ago: executing program 2 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$sock(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2}, 0x20000810) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20}) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) 7m59.967924946s ago: executing program 32 (id=292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$sock(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2}, 0x20000810) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20}) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) 14.650365325s ago: executing program 4 (id=1161): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16, @ANYBLOB="010025bd78000000000021000000080003", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x208c091) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e05003e20"], 0x8) 14.397510402s ago: executing program 3 (id=1162): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x66, 0x6c, 0x30, 0x39, 0x30, 0x32]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000540), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f00000001c0)={'fscrypt:', @auto=[0x39, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0xc6, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x33]}, &(0x7f0000000940)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x37, 0x30, 0x30, 0x31, 0x30, 0x66, 0x30, 0x30, 0x61, 0x30, 0x7, 0x33, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x62, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x39, 0x38, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x61]}, &(0x7f0000000a40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00113c33445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000a00)={'fscrypt:', @auto=[0x38, 0x62, 0x39, 0x64, 0x1, 0x65, 0x32, 0x66, 0x32, 0x65, 0x62, 0x36, 0x35, 0x7, 0x62, 0x36]}, &(0x7f0000000100)={0x0, "0011ffffffffffffffe0aabbccbde6ff00118899aabbccddceef00112233445566778899aabbccddeeffe1400000000000009f64000700", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(0x0, &(0x7f0000000ac0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x31, 0x30, 0x61, 0x30, 0x30, 0x30, 0x34, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aa8899aabbccddeeff00112233445566778899aabbccddeeff07002233445566778899aabbccddeeff00000b00", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 14.212766276s ago: executing program 3 (id=1163): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 13.024521995s ago: executing program 3 (id=1166): socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 12.87458454s ago: executing program 0 (id=1167): syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) syz_emit_ethernet(0x2a, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4024587b, &(0x7f0000001a40)={{r2, &(0x7f0000000440)='/dev/nullb0\x00', 0x4000, &(0x7f0000000480)={@_ha_fsid={[0xffffffc0, 0xe557]}, {0x7f, 0x737, 0x3, 0x261}}, 0x3, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x1}, 0x1, &(0x7f00000019c0)=[{0x3, 0x4, &(0x7f0000000700)='*%(-\\?-(\x00', &(0x7f0000000740)="af41bea5e910b68e8707e4cea6b68ed488bbb811ab0e445175a7fbb40b385430dea705babb8059c4ca081d93b697666b5fe53ff6ab3fb1ad92bd", 0x3a, 0x8}]}) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) 11.986651382s ago: executing program 3 (id=1168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x5) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040), &(0x7f0000000100)={'U-', 0x7}, 0x16, 0x2) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sg(0x0, 0x9, 0x8002) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) 11.62209534s ago: executing program 4 (id=1169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x39) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x880cc2, 0x20) 11.587312511s ago: executing program 1 (id=1170): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setns(0xc9, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000840)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x103) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 10.133124308s ago: executing program 4 (id=1171): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x66, 0x6c, 0x30, 0x39, 0x30, 0x32]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000540), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f00000001c0)={'fscrypt:', @auto=[0x39, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0xc6, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x33]}, &(0x7f0000000940)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x37, 0x30, 0x30, 0x31, 0x30, 0x66, 0x30, 0x30, 0x61, 0x30, 0x7, 0x33, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x62, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x39, 0x38, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x61]}, &(0x7f0000000a40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00113c33445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000a00)={'fscrypt:', @auto=[0x38, 0x62, 0x39, 0x64, 0x1, 0x65, 0x32, 0x66, 0x32, 0x65, 0x62, 0x36, 0x35, 0x7, 0x62, 0x36]}, &(0x7f0000000100)={0x0, "0011ffffffffffffffe0aabbccbde6ff00118899aabbccddceef00112233445566778899aabbccddeeffe1400000000000009f64000700", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(0x0, &(0x7f0000000ac0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x31, 0x30, 0x61, 0x30, 0x30, 0x30, 0x34, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aa8899aabbccddeeff00112233445566778899aabbccddeeff07002233445566778899aabbccddeeff00000b00", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 9.786628026s ago: executing program 0 (id=1172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002780)=ANY=[@ANYBLOB="050000000c000000430000004000"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000f00)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000000)="573458ded72ba68ebb5a4b46bf212904ba4a3eaaedd957ed7b1b", 0x10f0, r0}, 0x38) 9.708153588s ago: executing program 3 (id=1173): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8.714805033s ago: executing program 1 (id=1174): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4044094) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) 7.152231642s ago: executing program 3 (id=1175): sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r1, 0x8914, &(0x7f0000000400)="736c300000000000000000000000000001") write(r0, &(0x7f0000000500)="76640a4a3b53cf3e6c80386ccdb2ebae8c2c21f51dcc65f71e84a48781de5a68195ae91ffc417382e70132bb7a0b5602612096ab0d86953c5519f93c0b11e444924dff2cbfb60286aa9934e7a727aa0e4e99e5386553608bfbd5cde7e5e4c2d3c44775bed94dec82e0ffbdfe2aa7b272643b8965614fc947e8c5d501b46948c93b2ec79af9d6c9cef03032fc96ebdd65d09a3d474edd356dea9be09a387ecc702439c47ea499ce39c040bf8a", 0xac) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000803)=0xc0) 6.81789996s ago: executing program 0 (id=1176): socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 6.698269693s ago: executing program 1 (id=1177): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16, @ANYBLOB="010025bd78000000000021000000080003", @ANYRES32, @ANYBLOB="08009e0008000000e3f70d9e10dc1270e052b771e5d0d673b198a28d299c14e3dfc64a7380d10f163618ef009ee9d18a6f564f8a170ea40a4d93bde9194a4c3a9e91cd0ffd7952eba5d5ef9015822a5337a16a672a8045"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x208c091) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e05003e20"], 0x8) 5.762875766s ago: executing program 0 (id=1178): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002100010000000000000000000a00000100000000000000000800"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff000705810240000007050102400000070582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 5.662661379s ago: executing program 1 (id=1179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x39) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x880cc2, 0x20) 4.216181065s ago: executing program 1 (id=1180): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) 3.59295952s ago: executing program 4 (id=1181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x5) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040), &(0x7f0000000100)={'U-', 0x7}, 0x16, 0x2) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) 2.533287217s ago: executing program 4 (id=1182): openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$vbi(0x0, 0x2, 0x2) fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x40000000000006, 0xae07, 0x9, 0x4, 0x12, 0x80000006, 0x6}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e7, &(0x7f0000001900)="$eJzs3b1v004YwPHnnKRNf636c19QJcZCJSYEZUEsRah/BAMgShOkqlGR2iJRFipmhNh42RjYmBELI3sFM4KJib3djO45O3WpfU6aNm7g+5ESufHd+TnbsZ+L5J4A+GfdWPz+7spP+zIiFamIyDWRQETqIlUROSMz9YdrmyubrWbD11BFa9iXEVfTHCqzvNbMqmrraY1YaP+qylj6M5yMKIqiH18r/jL/9y0clES//RkCkeH426nr632P7GRslx1Aycye7MkjGS87DgBAuez9v+YSf3ufH4vz9yAQmYtv+wN2//dnrXv9C+RUSt3/dZQVGXt8dZeZ/fGeDuHs+iAZJXpazF0zJC6RPJBgmqJRpcYSjNxfaTUvLj9oNQJ5KguxVLFpfW+4UzdREO2sJ9gMxX3Poz0OarYP8znxTx1liy+7D6VtNzI75o4J5Y002vlfNdI9okcq1LjDdgUX/6X8FkftmzFaKqeXE7qRs/EW5OP7DnpZzx6RtOOcSE7dJ+7DMInzxZCn1qQc/FnB9e5yfu+01lRmrfmCWtPpWvGVMz6b82seXU63/2Cem5tmVn7JB1lM5f+B3dtzWiDZ7Z4gjZaMzwxvf6paMuwgsKCj8NGpmnftM7knV2V8Y+vx6lKr1VzvdOHTty4KH9fC67duodJLO0nPD62qSq8RRsOu6ZPaCb1H2MlCcsL08eAmx6TvZ1TJC9JzOxUZltXkmnlsgcWHY3t1qeWWshOlkV6uSzhFUpfHmVtlB4My2GuIceM/zeRdVndd19mvf6h5ek2y8vSoqHFt8dXtHTd8SI0N9pPVSX3/r6sR3Gj+CC7VB++Y69wFkfOeLX4+2GwYx/mXMIvyRe7y+z8AAAAAAAAAAAAAAAAAAMCgKXwwYDda39iKH2854pMhJXcRAAAAAAAAAAAAAAAAAAAAAICB55v/V+fILJj/N3kyIH/+39R/9S6e/3fBNpQz/69/kloAXfsdAAD//7rQb18=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x66b1, &(0x7f0000000140)={0x0, 0xe967, 0x9ba20, 0x1, 0x10397}, 0x0, &(0x7f0000000100)=0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001a80)=""/4128, &(0x7f0000000440)="ebe9eb32ded3e6138d2f5d279bf8884859d3616136fe3c2501b9acaf38b5d9d6c84d5934a7e18be348d9a685134eb08cae5e00a0b87f5cf2bade8adbd26d4c373f2940b0691c2f663203cabb9227ec63ac1fb920b72a4151e6f1a2a45f82f3094dd5c926c5b33d8340bbc239ceb86266c5ae5b", &(0x7f0000000040), 0x4}, 0x38) syz_io_uring_submit(0x0, r2, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="10000000f3030000000000000000000010000000fb030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c9c500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0588c51a6bc3833983333c803ef8d898e6e39e9183cd316e1c2106451b8c21161846ae77b93f2ca347a864da3cb92da3961fc7b3642fb4e7e7dbbe5296cf7b8f296a3d0f5d91de519c1a2762286d930808f8f481a0f50cc35e13445be064fe02deadd389c0391f77dc699bc2e"], 0x420}}, 0x0) 2.508762147s ago: executing program 0 (id=1183): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 942.692466ms ago: executing program 0 (id=1184): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002780)=ANY=[@ANYBLOB="050000000c000000430000004000"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000f00)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000000)="573458ded72ba68ebb5a4b46bf212904ba4a3eaaedd957ed7b1b", 0x10f0, r0}, 0x38) 99.946167ms ago: executing program 4 (id=1185): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4044094) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) 0s ago: executing program 1 (id=1186): open(0x0, 0xc2802, 0x181) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) kernel console output (not intermixed with test programs): h: 249 > 9 [ 78.086827][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.088391][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.103414][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.113870][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.124412][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.136647][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.145027][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.154000][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.166187][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.174279][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.583366][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 78.654797][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 78.765761][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.773614][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.781716][ T5774] bridge_slave_0: entered allmulticast mode [ 78.789380][ T5774] bridge_slave_0: entered promiscuous mode [ 78.802197][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 78.819865][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 78.832408][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.840532][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.847687][ T5774] bridge_slave_1: entered allmulticast mode [ 78.855475][ T5774] bridge_slave_1: entered promiscuous mode [ 78.922611][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.930460][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.937874][ T5773] bridge_slave_0: entered allmulticast mode [ 78.947499][ T5773] bridge_slave_0: entered promiscuous mode [ 78.996084][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.003834][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.011460][ T5773] bridge_slave_1: entered allmulticast mode [ 79.018645][ T5773] bridge_slave_1: entered promiscuous mode [ 79.028177][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.042731][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.130188][ T5774] team0: Port device team_slave_0 added [ 79.157119][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.171644][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.182423][ T5774] team0: Port device team_slave_1 added [ 79.209449][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.216878][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.226763][ T5779] bridge_slave_0: entered allmulticast mode [ 79.233906][ T5779] bridge_slave_0: entered promiscuous mode [ 79.243220][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.250482][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.257734][ T5779] bridge_slave_1: entered allmulticast mode [ 79.265062][ T5779] bridge_slave_1: entered promiscuous mode [ 79.293387][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.300870][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.308310][ T5772] bridge_slave_0: entered allmulticast mode [ 79.317904][ T5772] bridge_slave_0: entered promiscuous mode [ 79.339908][ T5773] team0: Port device team_slave_0 added [ 79.354255][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.361669][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.369905][ T5772] bridge_slave_1: entered allmulticast mode [ 79.376769][ T5772] bridge_slave_1: entered promiscuous mode [ 79.405597][ T5773] team0: Port device team_slave_1 added [ 79.412758][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.420103][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.446261][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.470273][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.500669][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.507678][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.534900][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.548547][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.561830][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.573978][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.581171][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.607456][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.644174][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.664944][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.672504][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.708029][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.765048][ T5779] team0: Port device team_slave_0 added [ 79.780548][ T5779] team0: Port device team_slave_1 added [ 79.793930][ T5774] hsr_slave_0: entered promiscuous mode [ 79.800792][ T5774] hsr_slave_1: entered promiscuous mode [ 79.813402][ T5772] team0: Port device team_slave_0 added [ 79.823504][ T5772] team0: Port device team_slave_1 added [ 79.874837][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.882055][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.908225][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.953483][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.961449][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.990667][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.006038][ T5773] hsr_slave_0: entered promiscuous mode [ 80.012869][ T5773] hsr_slave_1: entered promiscuous mode [ 80.020220][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.028014][ T5773] Cannot create hsr debugfs directory [ 80.034541][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.044322][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.070776][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.088462][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.096064][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.122329][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.170093][ T51] Bluetooth: hci2: command tx timeout [ 80.179314][ T5785] Bluetooth: hci0: command tx timeout [ 80.185054][ T51] Bluetooth: hci3: command tx timeout [ 80.207639][ T5779] hsr_slave_0: entered promiscuous mode [ 80.214333][ T5779] hsr_slave_1: entered promiscuous mode [ 80.221906][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.229682][ T5779] Cannot create hsr debugfs directory [ 80.248934][ T51] Bluetooth: hci1: command tx timeout [ 80.301955][ T5772] hsr_slave_0: entered promiscuous mode [ 80.308660][ T5772] hsr_slave_1: entered promiscuous mode [ 80.316215][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.324379][ T5772] Cannot create hsr debugfs directory [ 80.674084][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.690487][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.710123][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.721867][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.812927][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.825694][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.844231][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.854601][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.945228][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.960504][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.974573][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.984668][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.115862][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.135495][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.148218][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.163252][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.203754][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.240388][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.284955][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.298802][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.306357][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.326775][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.334091][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.393560][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.419437][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.441664][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.458542][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.465707][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.495562][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.502779][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.532822][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.540085][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.550920][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.558067][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.653396][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.685745][ T5773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.701085][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.806391][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.827462][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.834801][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.896988][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.904197][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.217789][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.250103][ T51] Bluetooth: hci3: command tx timeout [ 82.255589][ T51] Bluetooth: hci0: command tx timeout [ 82.262356][ T5785] Bluetooth: hci2: command tx timeout [ 82.284695][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.329716][ T51] Bluetooth: hci1: command tx timeout [ 82.374943][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.422729][ T5779] veth0_vlan: entered promiscuous mode [ 82.462226][ T5774] veth0_vlan: entered promiscuous mode [ 82.487491][ T5779] veth1_vlan: entered promiscuous mode [ 82.523290][ T5774] veth1_vlan: entered promiscuous mode [ 82.551503][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.587870][ T5773] veth0_vlan: entered promiscuous mode [ 82.612988][ T5779] veth0_macvtap: entered promiscuous mode [ 82.637362][ T5779] veth1_macvtap: entered promiscuous mode [ 82.654985][ T5773] veth1_vlan: entered promiscuous mode [ 82.686725][ T5774] veth0_macvtap: entered promiscuous mode [ 82.704173][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.714201][ T5774] veth1_macvtap: entered promiscuous mode [ 82.763219][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.784345][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.793817][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.803048][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.813482][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.828272][ T5773] veth0_macvtap: entered promiscuous mode [ 82.838093][ T5773] veth1_macvtap: entered promiscuous mode [ 82.847849][ T5772] veth0_vlan: entered promiscuous mode [ 82.866237][ T5772] veth1_vlan: entered promiscuous mode [ 82.885742][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.897958][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.910392][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.938435][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.950871][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.962664][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.985283][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.994954][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.003792][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.013180][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.039637][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.051781][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.062058][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.072775][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.084893][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.097496][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.108236][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.118481][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.130676][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.142038][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.164712][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.185227][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.194205][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.203328][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.293923][ T5772] veth0_macvtap: entered promiscuous mode [ 83.305127][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.306355][ T5772] veth1_macvtap: entered promiscuous mode [ 83.327069][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.395659][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.410452][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.422052][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.432591][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.442676][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.453748][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.469728][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.497531][ T4463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.498734][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.513282][ T4463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.521505][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.536210][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.547358][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.557563][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.568578][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.580784][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.629170][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.644472][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.653904][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.662796][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.676770][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.690274][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.783540][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.813783][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.860877][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.881539][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.986797][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.007489][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.026755][ T4463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.051146][ T4463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.114796][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.150052][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.350178][ T51] Bluetooth: hci0: command tx timeout [ 84.476483][ T5084] Bluetooth: hci2: command tx timeout [ 84.482955][ T5084] Bluetooth: hci3: command tx timeout [ 84.489161][ T51] Bluetooth: hci1: command tx timeout [ 86.277710][ T5856] ubi0: attaching mtd0 [ 86.284502][ T5856] ubi0: scanning is finished [ 86.289420][ T5856] ubi0: empty MTD device detected [ 86.328397][ T5856] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 86.337688][ T5856] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 86.345095][ T5856] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 86.352148][ T5856] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 86.359736][ T5856] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 86.366842][ T5856] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 86.375370][ T5856] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2126394177 [ 86.385571][ T5856] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 86.399177][ T5860] ubi0: background thread "ubi_bgt0d" started, PID 5860 [ 86.570968][ T5785] Bluetooth: hci1: command tx timeout [ 86.576523][ T51] Bluetooth: hci3: command tx timeout [ 86.583288][ T5084] Bluetooth: hci0: command tx timeout [ 86.583302][ T5788] Bluetooth: hci2: command tx timeout [ 87.682118][ T5878] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 89.700982][ T5903] tipc: Started in network mode [ 89.724458][ T5903] tipc: Node identity ac1414aa, cluster identity 4711 [ 89.779876][ T5903] tipc: New replicast peer: 172.20.20.187 [ 89.846540][ T5903] tipc: Enabled bearer , priority 10 [ 89.858328][ T5911] syz.3.22[5911]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.970072][ T789] tipc: Node number set to 2886997162 [ 92.059107][ T5918] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 92.810411][ T8] cfg80211: failed to load regulatory.db [ 97.669109][ T5965] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 101.409180][ T5991] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 105.125401][ T6015] syzkaller0: entered promiscuous mode [ 105.131294][ T6015] syzkaller0: entered allmulticast mode [ 107.359132][ T6030] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 114.918967][ T6062] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 120.129012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 127.809143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 128.628861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 131.180672][ T6227] FAULT_INJECTION: forcing a failure. [ 131.180672][ T6227] name failslab, interval 1, probability 0, space 0, times 1 [ 131.492612][ T6227] CPU: 0 PID: 6227 Comm: syz.3.99 Not tainted syzkaller #0 [ 131.499907][ T6227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.510005][ T6227] Call Trace: [ 131.513313][ T6227] [ 131.516284][ T6227] dump_stack_lvl+0x18c/0x250 [ 131.521017][ T6227] ? show_regs_print_info+0x20/0x20 [ 131.526252][ T6227] ? load_image+0x420/0x420 [ 131.530791][ T6227] ? __lock_acquire+0x7d80/0x7d80 [ 131.535873][ T6227] should_fail_ex+0x394/0x4c0 [ 131.540635][ T6227] should_failslab+0x9/0x20 [ 131.545177][ T6227] slab_pre_alloc_hook+0x59/0x300 [ 131.550252][ T6227] kmem_cache_alloc+0x5a/0x2c0 [ 131.555150][ T6227] ? create_new_namespaces+0x34/0x700 [ 131.560587][ T6227] create_new_namespaces+0x34/0x700 [ 131.565817][ T6227] ? slab_free_freelist_hook+0x130/0x1a0 [ 131.571494][ T6227] __se_sys_setns+0x2f3/0x1740 [ 131.576308][ T6227] ? __x64_sys_setns+0x60/0x60 [ 131.581205][ T6227] ? lockdep_hardirqs_on+0x98/0x150 [ 131.586452][ T6227] do_syscall_64+0x55/0xb0 [ 131.590900][ T6227] ? clear_bhb_loop+0x40/0x90 [ 131.595614][ T6227] ? clear_bhb_loop+0x40/0x90 [ 131.600344][ T6227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.606367][ T6227] RIP: 0033:0x7fbf5ed9f457 [ 131.610893][ T6227] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.630626][ T6227] RSP: 002b:00007fbf5fbfafc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 131.639090][ T6227] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fbf5ed9f457 [ 131.647195][ T6227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 131.655397][ T6227] RBP: 00007fbf5ee35024 R08: 0000000000000000 R09: 0000000000000000 [ 131.663599][ T6227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.671649][ T6227] R13: 00007fbf5f026038 R14: 00007fbf5f025fa0 R15: 00007ffef87bfef8 [ 131.679689][ T6227] [ 132.620839][ T28] audit: type=1800 audit(1788399197.895:2): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.110" name="alua_access_type" dev="configfs" ino=8428 res=0 errno=0 [ 132.725625][ T6241] Zero length message leads to an empty skb [ 133.320558][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.330132][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.996675][ T6267] netlink: 'syz.2.117': attribute type 1 has an invalid length. [ 136.153302][ T6267] bond1: entered promiscuous mode [ 136.179664][ T6267] bond1: entered allmulticast mode [ 136.202913][ T6267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.059985][ T6288] block nbd0: shutting down sockets [ 146.138967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 147.128397][ T6350] loop2: detected capacity change from 0 to 256 [ 147.128765][ C0] sched: RT throttling activated [ 147.213337][ T6350] FAT-fs (loop2): Unrecognized mount option "rø¶°" or missing value [ 147.598022][ T5775] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.075545][ T6374] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 155.144458][ T6415] loop2: detected capacity change from 0 to 256 [ 155.166527][ T6415] FAT-fs (loop2): Unrecognized mount option "rø¶°" or missing value [ 155.982056][ T6422] block nbd0: shutting down sockets [ 158.529023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 158.938995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 161.482712][ T6456] block nbd2: shutting down sockets [ 166.209094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 168.062502][ T6495] block nbd2: shutting down sockets [ 169.716346][ T6505] fuse: Bad value for 'fd' [ 171.329131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 173.781705][ T28] audit: type=1800 audit(1788399239.055:3): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.185" name="syzkaller0" dev="sda1" ino=2043 res=0 errno=0 [ 176.646427][ T6535] fuse: Bad value for 'fd' [ 177.839504][ T5788] block nbd2: Receive control failed (result -32) [ 177.850293][ T6530] block nbd2: shutting down sockets [ 180.589685][ T6555] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 183.549136][ T6572] fuse: Bad value for 'fd' [ 186.619071][ T6591] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 190.931009][ T5788] block nbd1: Receive control failed (result -32) [ 190.931240][ T6607] block nbd1: shutting down sockets [ 191.809135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 191.869076][ T6613] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 192.219021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 193.077395][ T6621] syzkaller0: entered promiscuous mode [ 193.123726][ T6621] syzkaller0: entered allmulticast mode [ 195.120646][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.127072][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.377040][ T6638] loop0: detected capacity change from 0 to 512 [ 196.468877][ T6638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 196.509067][ T6638] System zones: 1-12 [ 196.543405][ T6638] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.219: missing EA_INODE flag [ 196.581624][ T28] audit: type=1800 audit(1788399261.855:4): pid=6641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.220" name="alua_access_type" dev="configfs" ino=9047 res=0 errno=0 [ 196.620339][ T6638] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.219: error while reading EA inode 12 err=-117 [ 196.680444][ T6638] EXT4-fs (loop0): 1 orphan inode deleted [ 196.688382][ T6638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.320125][ T6653] block nbd1: shutting down sockets [ 199.361955][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.547742][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 199.556793][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 199.565786][ T6657] netlink: 'syz.3.223': attribute type 14 has an invalid length. [ 199.573718][ T6657] netlink: 'syz.3.223': attribute type 12 has an invalid length. [ 201.817016][ T28] audit: type=1800 audit(1788399267.085:5): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.229" name="alua_access_type" dev="configfs" ino=10011 res=0 errno=0 [ 202.489141][ T6679] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 203.144160][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 203.150374][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 203.157468][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 203.420114][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 204.789152][ T28] audit: type=1800 audit(1788399270.045:6): pid=6687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.232" name="syzkaller0" dev="sda1" ino=2043 res=0 errno=0 [ 207.099096][ T6703] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 207.899045][ T6711] loop3: detected capacity change from 0 to 512 [ 207.913307][ T5084] Bluetooth: hci2: unexpected event for opcode 0x041b [ 207.976845][ T28] audit: type=1800 audit(1788399273.245:7): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.242" name="alua_access_type" dev="configfs" ino=10261 res=0 errno=0 [ 208.059033][ T6711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 208.067243][ T6711] System zones: 1-12 [ 208.114809][ T6711] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.233: missing EA_INODE flag [ 208.328374][ T6711] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.233: error while reading EA inode 12 err=-117 [ 208.372511][ T6711] EXT4-fs (loop3): 1 orphan inode deleted [ 208.430848][ T6711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.540244][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'. [ 208.549210][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 208.558202][ T6724] netlink: 'syz.2.243': attribute type 14 has an invalid length. [ 208.566566][ T6724] netlink: 'syz.2.243': attribute type 12 has an invalid length. [ 209.727352][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.290064][ T6735] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 215.586304][ T28] audit: type=1800 audit(1788399280.855:8): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.252" name="alua_access_type" dev="configfs" ino=10331 res=0 errno=0 [ 220.079385][ T28] audit: type=1800 audit(1788399285.345:9): pid=6782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.264" name="alua_access_type" dev="configfs" ino=10376 res=0 errno=0 [ 225.895682][ T28] audit: type=1800 audit(1788399291.165:10): pid=6808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.273" name="alua_access_type" dev="configfs" ino=10482 res=0 errno=0 [ 231.547174][ T6835] syzkaller0: entered promiscuous mode [ 231.552848][ T6835] syzkaller0: entered allmulticast mode [ 233.239217][ T6856] block nbd3: shutting down sockets [ 234.348854][ T28] audit: type=1800 audit(1788399299.605:11): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.283" name="alua_access_type" dev="configfs" ino=10178 res=0 errno=0 [ 235.388193][ T28] audit: type=1800 audit(1788399300.655:12): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.289" name="alua_access_type" dev="configfs" ino=10571 res=0 errno=0 [ 235.407594][ T6870] Unable to extract alua_access_type [ 241.009207][ T6886] syzkaller0: entered promiscuous mode [ 241.109944][ T6886] syzkaller0: entered allmulticast mode [ 254.017802][ T6955] block nbd3: shutting down sockets [ 256.182356][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.188941][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.288183][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.329046][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.337506][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.345973][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.360342][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 256.367860][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 259.169206][ T51] Bluetooth: hci4: command tx timeout [ 259.386358][ T6967] chnl_net:caif_netlink_parms(): no params data found [ 262.176845][ T51] Bluetooth: hci4: command tx timeout [ 262.528540][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.804224][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.867253][ T6967] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.917764][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.937412][ T6967] bridge_slave_0: entered allmulticast mode [ 262.951845][ T6967] bridge_slave_0: entered promiscuous mode [ 264.416581][ T5084] Bluetooth: hci4: command tx timeout [ 264.502920][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.557883][ T6967] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.589273][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.596544][ T6967] bridge_slave_1: entered allmulticast mode [ 264.624515][ T6967] bridge_slave_1: entered promiscuous mode [ 264.741518][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.842812][ T6967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.893015][ T6967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.836286][ T6967] team0: Port device team_slave_0 added [ 265.918498][ T6967] team0: Port device team_slave_1 added [ 266.024050][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.038768][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.108806][ T6967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.160742][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.168109][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.619085][ T5084] Bluetooth: hci4: command tx timeout [ 267.654282][ T6967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.937067][ T6967] hsr_slave_0: entered promiscuous mode [ 267.970276][ T6967] hsr_slave_1: entered promiscuous mode [ 267.998921][ T6967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.006728][ T6967] Cannot create hsr debugfs directory [ 271.654018][ T7027] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 273.171997][ T6967] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.212643][ T6967] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.340070][ T6967] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.382576][ T6967] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 275.494695][ T6967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.992651][ T49] hsr_slave_0: left promiscuous mode [ 277.087192][ T49] hsr_slave_1: left promiscuous mode [ 277.128890][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.136431][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.170773][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.178348][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.239706][ T49] bridge_slave_1: left allmulticast mode [ 277.245449][ T49] bridge_slave_1: left promiscuous mode [ 277.295514][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.826629][ T49] bridge_slave_0: left allmulticast mode [ 278.849173][ T49] bridge_slave_0: left promiscuous mode [ 278.855195][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.977299][ T49] veth1_macvtap: left promiscuous mode [ 278.989440][ T49] veth0_macvtap: left promiscuous mode [ 278.995263][ T49] veth1_vlan: left promiscuous mode [ 279.029303][ T49] veth0_vlan: left promiscuous mode [ 280.991400][ T49] bond1 (unregistering): Released all slaves [ 285.889725][ T49] team0 (unregistering): Port device team_slave_1 removed [ 286.024597][ T49] team0 (unregistering): Port device team_slave_0 removed [ 286.141472][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.310099][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.818852][ T7107] fuse: Bad value for 'fd' [ 289.281954][ T28] audit: type=1800 audit(1788399354.555:13): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.342" name="alua_access_type" dev="configfs" ino=11654 res=0 errno=0 [ 291.864422][ T49] bond0 (unregistering): Released all slaves [ 292.670032][ T5817] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 292.999167][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 293.016473][ T5817] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.027180][ T5817] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.046174][ T5817] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.058126][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.090587][ T5817] usb 2-1: Product: syz [ 293.098260][ T5817] usb 2-1: Manufacturer: syz [ 293.110198][ T5817] usb 2-1: SerialNumber: syz [ 293.371435][ T6967] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.375498][ T5817] usb 2-1: 0:2 : does not exist [ 293.417159][ T4463] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.423864][ T5817] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 293.424386][ T4463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.526605][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.533812][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.577701][ T5817] usb 2-1: USB disconnect, device number 2 [ 293.734089][ T7131] udevd[7131]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.778151][ T7144] fuse: Bad value for 'fd' [ 295.859690][ T6967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.212363][ T6967] veth0_vlan: entered promiscuous mode [ 298.282495][ T6967] veth1_vlan: entered promiscuous mode [ 299.039078][ T7167] fuse: Bad value for 'fd' [ 299.257197][ T6967] veth0_macvtap: entered promiscuous mode [ 299.312109][ T6967] veth1_macvtap: entered promiscuous mode [ 299.382242][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.422350][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.468753][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.489225][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.508822][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.532762][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.571223][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.608432][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.655589][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.685539][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.700908][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.721494][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.742630][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.764893][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.805167][ T6967] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.868163][ T6967] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.894704][ T6967] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.914449][ T6967] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.128878][ T28] audit: type=1800 audit(1788399366.395:14): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.350" name="alua_access_type" dev="configfs" ino=11227 res=0 errno=0 [ 301.209334][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.217240][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.299172][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.307077][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.246028][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 304.949075][ T7210] fuse: Bad value for 'fd' [ 308.780404][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 308.808805][ T28] audit: type=1800 audit(1788399374.065:15): pid=7231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.361" name="alua_access_type" dev="configfs" ino=12329 res=0 errno=0 [ 308.879414][ T7229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.285226][ T7233] bond1: entered promiscuous mode [ 309.358988][ T7233] bond1: entered allmulticast mode [ 316.279022][ T7272] fuse: Bad value for 'fd' [ 317.621595][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.631982][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.059067][ T7348] fuse: Bad value for 'fd' [ 333.731187][ T7377] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 343.125244][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 343.249023][ T7441] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 343.349153][ T23] usb 2-1: device descriptor read/64, error -71 [ 343.649212][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 343.988798][ T23] usb 2-1: device descriptor read/64, error -71 [ 344.111332][ T23] usb usb2-port1: attempt power cycle [ 350.111180][ T5816] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 350.325162][ T5816] usb 1-1: device descriptor read/64, error -71 [ 356.529013][ T5816] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 356.735384][ T5816] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 356.764039][ T5816] usb 1-1: config 0 has no interface number 0 [ 356.787184][ T5816] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 356.819967][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.879132][ T5816] usb 1-1: Product: syz [ 356.883377][ T5816] usb 1-1: Manufacturer: syz [ 356.908799][ T5816] usb 1-1: SerialNumber: syz [ 356.941775][ T5816] usb 1-1: config 0 descriptor?? [ 357.196875][ T5816] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 357.243817][ T5816] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 357.288441][ T5816] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 357.349057][ T5816] usb 1-1: media controller created [ 357.442587][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.750913][ T7565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.869568][ T7565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.710197][ T5816] usb 1-1: USB disconnect, device number 4 [ 361.189233][ T7597] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 367.999017][ T7640] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 369.191728][ T7653] team0: Device xfrm0 is of different type [ 371.586742][ T7679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.442'. [ 371.879311][ T8] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 372.116344][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.231886][ T8] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 372.364799][ T8] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 372.581445][ T8] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 372.690636][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.804096][ T8] usb 2-1: Product: syz [ 372.860910][ T8] usb 2-1: Manufacturer: syz [ 372.936659][ T8] usb 2-1: SerialNumber: syz [ 373.919995][ C0] usb 2-1: received EP1 urb->status = -2 [ 373.925890][ T8] usb 2-1: unable to init card! (ret=-110) [ 373.943103][ T8] snd-usb-caiaq: probe of 2-1:1.0 failed with error -110 [ 375.716594][ T23] usb 2-1: USB disconnect, device number 6 [ 376.565608][ T7696] loop1: detected capacity change from 0 to 4096 [ 376.795636][ T7696] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 376.899437][ T7696] ntfs3: loop1: Failed to load $Extend (-22). [ 376.906042][ T7696] ntfs3: loop1: Failed to initialize $Extend. [ 377.049018][ T5816] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 377.263782][ T5816] usb 5-1: config 0 has no interfaces? [ 377.276571][ T5816] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.287667][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.119360][ T5816] usb 5-1: Product: syz [ 378.123645][ T5816] usb 5-1: Manufacturer: syz [ 378.128557][ T5816] usb 5-1: SerialNumber: syz [ 378.154904][ T5816] usb 5-1: config 0 descriptor?? [ 378.467134][ T5816] usb 5-1: USB disconnect, device number 2 [ 378.824521][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 379.063430][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.069931][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.183280][ T7737] loop4: detected capacity change from 0 to 512 [ 380.260972][ T7737] ======================================================= [ 380.260972][ T7737] WARNING: The mand mount option has been deprecated and [ 380.260972][ T7737] and is ignored by this kernel. Remove the mand [ 380.260972][ T7737] option from the mount to silence this warning. [ 380.260972][ T7737] ======================================================= [ 380.339349][ T7737] EXT4-fs: inline encryption not supported [ 380.377800][ T7737] EXT4-fs (loop4): Test dummy encryption mode enabled [ 380.409366][ T7737] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 380.453573][ T7737] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 380.515739][ T7723] loop0: detected capacity change from 0 to 32768 [ 380.565979][ T7737] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.462: bad orphan inode 131083 [ 380.656110][ T7737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.128774][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 381.525247][ T6967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.587436][ T7765] SET target dimension over the limit! [ 382.440218][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 428.402918][ T8117] loop0: detected capacity change from 0 to 4096 [ 428.546569][ T8117] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 428.600415][ T8117] ntfs3: loop0: Failed to load $Extend (-22). [ 428.606633][ T8117] ntfs3: loop0: Failed to initialize $Extend. [ 437.129813][ T8187] syzkaller0: entered promiscuous mode [ 437.135421][ T8187] syzkaller0: entered allmulticast mode [ 439.609357][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 440.839600][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.043824][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.481099][ T8236] syzkaller0: entered promiscuous mode [ 442.487501][ T8236] syzkaller0: entered allmulticast mode [ 443.960384][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 448.789018][ T8286] syzkaller0: entered promiscuous mode [ 448.794585][ T8286] syzkaller0: entered allmulticast mode [ 449.826956][ T8303] loop3: detected capacity change from 0 to 512 [ 449.854041][ T8303] EXT4-fs: inline encryption not supported [ 449.882120][ T8303] EXT4-fs (loop3): Test dummy encryption mode enabled [ 451.328691][ T8303] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 451.398826][ T8303] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.627: bad orphan inode 131083 [ 451.474721][ T8303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.930622][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.038411][ T8339] syzkaller0: entered promiscuous mode [ 455.044518][ T8339] syzkaller0: entered allmulticast mode [ 457.531458][ T8351] loop3: detected capacity change from 0 to 512 [ 457.551976][ T8351] EXT4-fs: inline encryption not supported [ 457.576262][ T8351] EXT4-fs (loop3): Test dummy encryption mode enabled [ 457.639524][ T8351] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 457.788186][ T8351] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.639: bad orphan inode 131083 [ 457.887412][ T8351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.563860][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.868351][ T5084] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 463.115786][ T8391] loop4: detected capacity change from 0 to 512 [ 463.139718][ T8391] EXT4-fs: inline encryption not supported [ 463.189278][ T8391] EXT4-fs (loop4): Test dummy encryption mode enabled [ 463.196541][ T8391] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 463.262739][ T8391] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.648: bad orphan inode 131083 [ 463.354945][ T8391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.531947][ T6967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.839715][ T8444] loop4: detected capacity change from 0 to 512 [ 468.861069][ T8444] EXT4-fs: inline encryption not supported [ 468.899223][ T8444] EXT4-fs (loop4): Test dummy encryption mode enabled [ 468.924107][ T8444] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 468.959073][ T8444] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.661: bad orphan inode 131083 [ 469.113609][ T8444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.480917][ T6967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.637439][ T8480] loop1: detected capacity change from 0 to 512 [ 472.716503][ T8480] EXT4-fs: inline encryption not supported [ 472.774648][ T8480] EXT4-fs (loop1): Test dummy encryption mode enabled [ 472.810097][ T8480] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 472.861880][ T8480] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.673: bad orphan inode 131083 [ 472.933670][ T8480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.428866][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.592227][ T8524] loop1: detected capacity change from 0 to 512 [ 477.609635][ T8524] EXT4-fs: inline encryption not supported [ 477.690787][ T8524] EXT4-fs (loop1): Test dummy encryption mode enabled [ 477.697638][ T8524] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 477.904605][ T8524] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.686: bad orphan inode 131083 [ 478.013232][ T8524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.242642][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.090805][ T8564] loop0: detected capacity change from 0 to 512 [ 483.159366][ T8564] EXT4-fs: inline encryption not supported [ 483.210037][ T8564] EXT4-fs (loop0): Test dummy encryption mode enabled [ 483.216890][ T8564] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 483.399611][ T8564] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.697: bad orphan inode 131083 [ 483.420491][ T8564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.880802][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.638195][ T8612] loop0: detected capacity change from 0 to 4096 [ 490.594201][ T8612] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 490.685704][ T8612] ntfs3: loop0: Failed to load $Extend (-22). [ 490.718667][ T8612] ntfs3: loop0: Failed to initialize $Extend. [ 496.359651][ T8678] syzkaller0: entered promiscuous mode [ 496.365216][ T8678] syzkaller0: entered allmulticast mode [ 498.618923][ T7129] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 498.814717][ T7129] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 498.829136][ T7129] usb 5-1: config 1 has no interface number 0 [ 498.838181][ T7129] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 498.858686][ T7129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.867032][ T7129] usb 5-1: Product: syz [ 498.885449][ T7129] usb 5-1: Manufacturer: syz [ 498.891885][ T7129] usb 5-1: SerialNumber: syz [ 499.142020][ T7129] usb 5-1: 3:1 : does not exist [ 499.159089][ T7129] usb 5-1: 3:2 : does not exist [ 499.220727][ T7129] usb 5-1: USB disconnect, device number 3 [ 499.238765][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 499.276013][ T7562] udevd[7562]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.551131][ T27] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 500.134336][ T27] usb 4-1: config 0 has no interface number 0 [ 500.159731][ T27] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 500.185412][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.207699][ T27] usb 4-1: Product: syz [ 500.219025][ T27] usb 4-1: Manufacturer: syz [ 500.224098][ T27] usb 4-1: SerialNumber: syz [ 500.241480][ T27] usb 4-1: config 0 descriptor?? [ 501.458681][ T27] dvb_usb_ec168: probe of 4-1:0.1 failed with error -110 [ 501.635525][ T8722] (null): rxe_set_mtu: Set mtu to 4096 [ 501.657606][ T8722] lo speed is unknown, defaulting to 1000 [ 501.678067][ T8722] lo speed is unknown, defaulting to 1000 [ 501.688383][ T8722] lo speed is unknown, defaulting to 1000 [ 501.900069][ T8723] syzkaller0: entered promiscuous mode [ 501.905710][ T8723] syzkaller0: entered allmulticast mode [ 501.943514][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.951038][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.013504][ T8724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.103734][ T8724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.220819][ T27] lo speed is unknown, defaulting to 1000 [ 502.229254][ T8722] infiniband syz0: set active [ 502.235483][ T8722] infiniband syz0: added lo [ 502.417880][ T8722] RDS/IB: syz0: added [ 502.449990][ T8722] smc: adding ib device syz0 with port count 1 [ 502.456507][ T8722] smc: ib device syz0 port 1 has pnetid [ 502.493559][ T8] lo speed is unknown, defaulting to 1000 [ 502.512258][ T8722] lo speed is unknown, defaulting to 1000 [ 502.966314][ T8722] lo speed is unknown, defaulting to 1000 [ 503.128898][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 503.237716][ T8722] lo speed is unknown, defaulting to 1000 [ 503.339624][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 503.352963][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.376955][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.396775][ T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 503.410195][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.425963][ T23] usb 5-1: Product: syz [ 503.431567][ T23] usb 5-1: Manufacturer: syz [ 503.436238][ T23] usb 5-1: SerialNumber: syz [ 504.095571][ T8] usb 4-1: USB disconnect, device number 2 [ 504.268298][ T23] usb 5-1: 0:2 : does not exist [ 504.274279][ T23] usb 5-1: unit 6 not found! [ 504.298927][ T23] usb 5-1: USB disconnect, device number 4 [ 504.346654][ T8722] lo speed is unknown, defaulting to 1000 [ 505.492303][ T7562] udevd[7562]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.393731][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 506.626032][ T27] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 506.717014][ T27] usb 5-1: config 0 has no interface number 0 [ 506.811550][ T27] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 506.912219][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.993895][ T27] usb 5-1: Product: syz [ 507.062657][ T27] usb 5-1: Manufacturer: syz [ 507.114513][ T27] usb 5-1: SerialNumber: syz [ 507.142624][ T27] usb 5-1: config 0 descriptor?? [ 508.248931][ T27] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 508.300482][ T27] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 508.339312][ T27] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 508.359349][ T27] usb 5-1: media controller created [ 508.413995][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.551800][ T8762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.582622][ T8762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.663186][ T8778] Bluetooth: MGMT ver 1.22 [ 508.809125][ T7129] IPVS: starting estimator thread 0... [ 508.856736][ T27] usb 5-1: USB disconnect, device number 5 [ 508.903905][ T8782] IPVS: using max 21 ests per chain, 50400 per kthread [ 509.268780][ T7129] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 509.478872][ T7129] usb 1-1: Using ep0 maxpacket: 16 [ 510.284737][ T7129] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.295167][ T7129] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.307997][ T7129] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 510.317614][ T7129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.357484][ T7129] usb 1-1: Product: syz [ 511.361996][ T7129] usb 1-1: Manufacturer: syz [ 511.366685][ T7129] usb 1-1: SerialNumber: syz [ 512.060470][ T8807] binder: 8804:8807 ioctl 4018620d 0 returned -22 [ 513.505848][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 513.530164][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 513.551567][ T7129] usb 1-1: 0:2 : does not exist [ 513.556993][ T7129] usb 1-1: unit 6 not found! [ 513.569956][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xbe7e instead [ 513.611669][ T7129] usb 1-1: USB disconnect, device number 5 [ 513.621404][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x4c86 instead [ 513.674355][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 513.703165][ T7562] udevd[7562]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.720554][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 513.742516][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 513.778154][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 513.795009][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 513.806501][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 513.823651][ T8805] jffs2: Further such events for this erase block will not be printed [ 513.851572][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 513.906063][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 513.921902][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xbe7e instead [ 513.943151][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x4c86 instead [ 513.973487][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 513.998747][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 514.027423][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 514.063085][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 514.088735][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 514.112607][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 514.147286][ T8805] jffs2: Further such events for this erase block will not be printed [ 514.156409][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 514.169739][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 514.188534][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xbe7e instead [ 514.199515][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x4c86 instead [ 514.214294][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 514.225032][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 514.240812][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xbe7e instead [ 514.254828][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x4c86 instead [ 514.271355][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 514.283387][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 514.302607][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xbe7e instead [ 514.320122][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x4c86 instead [ 514.335398][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 514.347355][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 514.361904][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xbe7e instead [ 514.375469][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x4c86 instead [ 514.390151][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 514.401248][ T7129] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 514.421501][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 514.436426][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xbe7e instead [ 514.449823][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x4c86 instead [ 514.464210][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 514.477771][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 514.493630][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xbe7e instead [ 514.504689][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x4c86 instead [ 514.520710][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 514.548380][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 514.595312][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xbe7e instead [ 514.613923][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x4c86 instead [ 514.625627][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 514.638667][ T7129] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 514.646728][ T7129] usb 1-1: config 0 has no interface number 0 [ 514.670324][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 514.687300][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xbe7e instead [ 514.699211][ T7129] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 514.708707][ T7129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.716772][ T7129] usb 1-1: Product: syz [ 514.740503][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x4c86 instead [ 514.753864][ T7129] usb 1-1: Manufacturer: syz [ 514.758538][ T7129] usb 1-1: SerialNumber: syz [ 514.763586][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 514.775613][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 514.789778][ T7129] usb 1-1: config 0 descriptor?? [ 514.795053][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xbe7e instead [ 514.809623][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x4c86 instead [ 514.820407][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 514.841188][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 514.856933][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xbe7e instead [ 514.867812][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x4c86 instead [ 514.916525][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 514.934653][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 514.956901][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xbe7e instead [ 514.967525][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x4c86 instead [ 514.986012][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 515.002804][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 515.022824][ T7129] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 515.033339][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xbe7e instead [ 515.046594][ T7129] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 515.059060][ T7129] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 515.067235][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x4c86 instead [ 515.089289][ T7129] usb 1-1: media controller created [ 515.097335][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 515.167513][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 515.198750][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 515.216088][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xbe7e instead [ 515.325125][ T7129] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 515.344376][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x4c86 instead [ 515.449716][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 515.550741][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 515.698204][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xbe7e instead [ 515.843535][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x4c86 instead [ 515.908802][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 515.926438][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 516.001369][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xbe7e instead [ 516.005936][ T8816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.029913][ T8816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.042567][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x4c86 instead [ 516.053704][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 516.064558][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 516.078946][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 516.088991][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xbe7e instead [ 516.098917][ T27] IPVS: starting estimator thread 0... [ 516.107840][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 516.126434][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x4c86 instead [ 516.137954][ T8] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 516.156182][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 516.170204][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 516.178828][ T8] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 516.181891][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xbe7e instead [ 516.192701][ T8833] IPVS: using max 19 ests per chain, 45600 per kthread [ 516.203508][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x4c86 instead [ 516.220664][ T8] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 516.235650][ T8] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 516.250529][ T8] usb 5-1: config 168 interface 0 has no altsetting 0 [ 516.255653][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 516.259566][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 516.272501][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 516.286573][ T8] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 516.297595][ T7129] usb 1-1: USB disconnect, device number 6 [ 517.319582][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xbe7e instead [ 517.377453][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x4c86 instead [ 517.393272][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 517.412480][ T8] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 517.446257][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 517.465437][ T8] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 517.483911][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xbe7e instead [ 517.508833][ T8] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 517.511866][ T8839] loop0: detected capacity change from 0 to 256 [ 517.528848][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x4c86 instead [ 517.543402][ T8] usb 5-1: config 168 interface 0 has no altsetting 0 [ 517.546818][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 517.567836][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 517.570292][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 517.601047][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xbe7e instead [ 517.608712][ T8] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 517.651081][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x4c86 instead [ 517.668727][ T8] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 517.679654][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 517.706597][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 517.710833][ T8] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 517.734665][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xbe7e instead [ 517.765172][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x4c86 instead [ 517.779838][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 517.783629][ T8] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 517.797809][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 517.848906][ T8] usb 5-1: config 168 interface 0 has no altsetting 0 [ 517.864063][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xbe7e instead [ 517.902645][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x4c86 instead [ 517.925634][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 517.943290][ T8] usb 5-1: string descriptor 0 read error: -71 [ 517.949816][ T8] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 517.982773][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 517.988785][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.024445][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xbe7e instead [ 518.028881][ T8841] loop0: detected capacity change from 0 to 512 [ 518.048947][ T8] usb 5-1: can't set config #168, error -71 [ 518.067284][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x4c86 instead [ 518.081505][ T8] usb 5-1: USB disconnect, device number 6 [ 518.108747][ T8841] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 518.119427][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 518.183455][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 518.204211][ T8841] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 518.250879][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xbe7e instead [ 518.343827][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x4c86 instead [ 518.350040][ T8841] EXT4-fs (loop0): 1 truncate cleaned up [ 518.365240][ T8841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.396849][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 518.438766][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 518.482955][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xbe7e instead [ 518.518826][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x4c86 instead [ 518.546858][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 518.574468][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 518.596558][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xbe7e instead [ 518.626999][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x4c86 instead [ 518.650830][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 518.676516][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 518.698902][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xbe7e instead [ 518.726342][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x4c86 instead [ 518.769916][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 518.794154][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 518.828832][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xbe7e instead [ 518.848766][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x4c86 instead [ 518.888033][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 518.899965][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 518.910720][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xbe7e instead [ 518.922297][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x4c86 instead [ 518.934513][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 518.945658][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 518.957156][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xbe7e instead [ 518.958452][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.968573][ T8805] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x4c86 instead [ 519.025935][ T8805] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 519.076808][ T8805] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 520.875007][ T8863] loop4: detected capacity change from 0 to 2048 [ 520.916596][ T8863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.027817][ T8856] loop1: detected capacity change from 0 to 4096 [ 521.034565][ T8863] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.138793][ T8867] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.792: bg 0: block 345: padding at end of block bitmap is not set [ 521.164267][ T8856] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 521.191793][ T8856] ntfs3: loop1: Failed to load $Extend (-22). [ 521.207566][ T8867] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 521.221485][ T8856] ntfs3: loop1: Failed to initialize $Extend. [ 521.255533][ T8867] EXT4-fs (loop4): This should not happen!! Data will be lost [ 521.255533][ T8867] [ 521.327584][ T8863] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 253 with error 28 [ 521.402992][ T8863] EXT4-fs (loop4): This should not happen!! Data will be lost [ 521.402992][ T8863] [ 521.427792][ T8863] EXT4-fs (loop4): Total free blocks count 0 [ 521.458896][ T8863] EXT4-fs (loop4): Free/Dirty block details [ 521.477492][ T8863] EXT4-fs (loop4): free_blocks=0 [ 521.493009][ T8863] EXT4-fs (loop4): dirty_blocks=256 [ 521.511386][ T8863] EXT4-fs (loop4): Block reservation details [ 534.297093][ T8921] loop4: detected capacity change from 0 to 512 [ 534.334325][ T8921] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 534.843259][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.815'. [ 536.108692][ T5814] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 536.334453][ T5814] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.358406][ T5814] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 536.376235][ T5814] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 536.411720][ T5814] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 536.430025][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.438188][ T5814] usb 5-1: Product: syz [ 536.458700][ T5814] usb 5-1: Manufacturer: syz [ 536.463383][ T5814] usb 5-1: SerialNumber: syz [ 536.950289][ T8946] loop0: detected capacity change from 0 to 512 [ 537.381114][ T8946] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 537.476016][ T8946] System zones: 1-12 [ 537.526452][ T8946] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.820: missing EA_INODE flag [ 537.858912][ T8946] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.820: error while reading EA inode 12 err=-117 [ 537.897027][ T8946] EXT4-fs (loop0): 1 orphan inode deleted [ 537.924001][ C0] usb 5-1: received EP1 urb->status = -2 [ 537.930149][ T5814] usb 5-1: unable to init card! (ret=-110) [ 537.936415][ T5814] snd-usb-caiaq: probe of 5-1:1.0 failed with error -110 [ 537.965186][ T8946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.302611][ T8944] overlayfs: missing 'lowerdir' [ 538.714104][ T789] usb 5-1: USB disconnect, device number 7 [ 539.019033][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 539.577782][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.894913][ T8964] binder: 8952:8964 ioctl 4018620d 0 returned -22 [ 541.063673][ T8981] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 542.129397][ T59] rtrs_client L1782: : Resolving route failed, err: -19 [ 542.281247][ T8981] rtrs_client L2618: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 542.671502][ T8988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.831'. [ 542.769815][ T8990] netlink: 76 bytes leftover after parsing attributes in process `syz.0.833'. [ 542.838683][ T5814] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 543.888719][ T7129] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 543.937204][ T5814] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 543.963466][ T5814] usb 5-1: config 0 has no interface number 0 [ 543.990581][ T5814] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 544.004915][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.058748][ T5814] usb 5-1: Product: syz [ 544.062998][ T5814] usb 5-1: Manufacturer: syz [ 544.089666][ T5814] usb 5-1: SerialNumber: syz [ 544.107114][ T5814] usb 5-1: config 0 descriptor?? [ 544.107295][ T7129] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.159759][ T7129] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 544.198664][ T7129] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 544.232472][ T7129] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 544.251022][ T7129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.269747][ T7129] usb 2-1: Product: syz [ 544.273984][ T7129] usb 2-1: Manufacturer: syz [ 544.278705][ T7129] usb 2-1: SerialNumber: syz [ 544.365625][ T5814] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 544.406789][ T5814] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 544.446476][ T5814] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 544.491411][ T5814] usb 5-1: media controller created [ 544.567426][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 544.715925][ C1] usb 2-1: received EP1 urb->status = -2 [ 544.734768][ T7129] usb 2-1: unable to init card! (ret=-110) [ 544.754888][ T7129] snd-usb-caiaq: probe of 2-1:1.0 failed with error -110 [ 544.794573][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.049167][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.363946][ T5814] usb 5-1: USB disconnect, device number 8 [ 546.008710][ T9012] binder: 9010:9012 ioctl 4018620d 0 returned -22 [ 547.039427][ T789] usb 2-1: USB disconnect, device number 7 [ 547.908500][ T9021] binder: 9017:9021 ioctl 4018620d 0 returned -22 [ 555.978741][ T5816] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 556.181443][ T5816] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 556.994189][ T9053] loop1: detected capacity change from 0 to 32768 [ 557.521058][ T5816] usb 4-1: config 0 has no interface number 0 [ 557.566870][ T9053] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 558.672940][ T9053] XFS (loop1): Ending clean mount [ 559.072286][ T5772] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 559.089149][ T5816] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 559.098234][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.120952][ T5816] usb 4-1: config 0 descriptor?? [ 559.137538][ T5816] usb 4-1: can't set config #0, error -71 [ 559.145031][ T5816] usb 4-1: USB disconnect, device number 3 [ 561.034019][ T9094] loop3: detected capacity change from 0 to 1024 [ 561.047257][ T9094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 561.057357][ T9094] EXT4-fs: Ignoring removed i_version option [ 561.081104][ T9094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 561.095015][ T9094] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 561.184990][ T9094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.292226][ T9094] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.310201][ T9097] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 561.413024][ T9097] EXT4-fs (loop3): Remounting filesystem read-only [ 561.624911][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 563.500673][ T5816] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 563.501313][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.519200][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.694742][ T5816] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 563.723013][ T5816] usb 4-1: config 0 has no interface number 0 [ 563.743386][ T5816] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 563.761864][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.789526][ T5816] usb 4-1: Product: syz [ 563.797334][ T5816] usb 4-1: Manufacturer: syz [ 563.814230][ T5816] usb 4-1: SerialNumber: syz [ 563.837756][ T5816] usb 4-1: config 0 descriptor?? [ 563.870251][ T9119] binder: 9118:9119 ioctl 4018620d 0 returned -22 [ 564.063014][ T5816] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 564.086115][ T5816] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 564.117573][ T5816] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 564.142705][ T9123] loop0: detected capacity change from 0 to 1024 [ 564.146859][ T5816] usb 4-1: media controller created [ 564.156745][ T9123] EXT4-fs: Ignoring removed nomblk_io_submit option [ 564.174149][ T9123] EXT4-fs: Ignoring removed i_version option [ 564.182018][ T9123] EXT4-fs: Ignoring removed nomblk_io_submit option [ 564.201200][ T9123] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 564.214103][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 564.255839][ T9123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.355403][ T9123] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.411227][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.444017][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.463087][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 564.682692][ T5816] usb 4-1: USB disconnect, device number 4 [ 569.828679][ T5814] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 569.963518][ T9173] loop0: detected capacity change from 0 to 1024 [ 569.987298][ T9173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 571.410381][ T9173] EXT4-fs: Ignoring removed i_version option [ 571.456434][ T5814] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 571.464889][ T5814] usb 5-1: config 0 has no interface number 0 [ 571.472964][ T9173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 571.473820][ T5814] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 571.489743][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.497880][ T5814] usb 5-1: Product: syz [ 571.502246][ T5814] usb 5-1: Manufacturer: syz [ 571.506901][ T5814] usb 5-1: SerialNumber: syz [ 571.508428][ T9173] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 571.531667][ T5814] usb 5-1: config 0 descriptor?? [ 571.577003][ T9173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.595053][ T9173] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.750093][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 571.760208][ T5814] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 571.784365][ T5814] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 571.811386][ T5814] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 571.832134][ T5814] usb 5-1: media controller created [ 571.889836][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 572.271116][ T9185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.330281][ T9185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.055585][ T5814] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 573.242878][ T5814] usb 5-1: USB disconnect, device number 9 [ 576.004368][ T9220] loop3: detected capacity change from 0 to 4096 [ 576.071910][ T9220] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 576.123827][ T9220] ntfs3: loop3: Failed to load $Extend (-22). [ 576.139268][ T9220] ntfs3: loop3: Failed to initialize $Extend. [ 576.899805][ T5816] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 577.104381][ T5816] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 577.142885][ T5816] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 577.183479][ T5816] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 577.187994][ T9226] loop0: detected capacity change from 0 to 512 [ 577.207344][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 577.236467][ T5816] usb 4-1: Product: syz [ 577.246559][ T5816] usb 4-1: Manufacturer: syz [ 577.295636][ T5816] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 577.311483][ T9226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.367057][ T9226] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.554754][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.649110][ T789] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 578.243881][ T789] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 578.349143][ T789] usb 5-1: config 0 has no interface number 0 [ 578.787092][ T789] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 578.820106][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.828541][ T789] usb 5-1: Product: syz [ 578.835161][ T789] usb 5-1: Manufacturer: syz [ 578.840362][ T789] usb 5-1: SerialNumber: syz [ 578.853920][ T789] usb 5-1: config 0 descriptor?? [ 579.119390][ T789] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 579.141996][ T789] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 579.169083][ T789] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 579.198685][ T789] usb 5-1: media controller created [ 579.283532][ T789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 579.374217][ T9249] loop0: detected capacity change from 0 to 4096 [ 579.481143][ T9235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.518057][ T9249] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 579.537253][ T9235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.605713][ T9249] ntfs3: loop0: Failed to load $Extend (-22). [ 579.634297][ T9249] ntfs3: loop0: Failed to initialize $Extend. [ 579.709915][ T789] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 579.943705][ T5816] usb 4-1: Moschip 7840/7820 USB Serial Driver converter now attached to ttyUSB0 [ 579.952629][ T789] usb 5-1: USB disconnect, device number 10 [ 580.061486][ T5816] usb 4-1: USB disconnect, device number 5 [ 580.141590][ T5816] mos7840 ttyUSB0: Moschip 7840/7820 USB Serial Driver converter now disconnected from ttyUSB0 [ 580.199693][ T5816] mos7840 4-1:1.0: device disconnected [ 584.419183][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 584.527805][ T9288] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 584.626588][ T27] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 584.690965][ T27] usb 4-1: config 0 has no interface number 0 [ 584.841879][ T27] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 584.953606][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.067130][ T27] usb 4-1: Product: syz [ 585.113007][ T27] usb 4-1: Manufacturer: syz [ 585.183984][ T27] usb 4-1: SerialNumber: syz [ 585.279365][ T27] usb 4-1: config 0 descriptor?? [ 585.286418][ T4463] rtrs_client L1782: : Resolving route failed, err: -19 [ 585.327536][ T9288] rtrs_client L2618: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 585.551391][ T27] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 585.587610][ T27] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 585.637553][ T27] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 585.660438][ T27] usb 4-1: media controller created [ 585.747789][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 585.875386][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.900810][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.970746][ T27] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 587.013386][ T5084] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 587.021636][ T5084] Bluetooth: hci1: unexpected event for opcode 0x203e [ 587.939822][ T9314] loop0: detected capacity change from 0 to 1024 [ 588.006699][ T9314] EXT4-fs: Ignoring removed nomblk_io_submit option [ 588.052823][ T9314] EXT4-fs: Ignoring removed i_version option [ 588.092813][ T9314] EXT4-fs: Ignoring removed nomblk_io_submit option [ 588.374328][ T9314] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 589.326480][ T9314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.802071][ T9314] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.848014][ T5084] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 591.001008][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 591.050640][ T5084] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 591.059504][ T5084] Bluetooth: hci1: Injecting HCI hardware error event [ 591.069224][ T5084] Bluetooth: hci1: hardware error 0x00 [ 591.172635][ T9331] netlink: 16 bytes leftover after parsing attributes in process `syz.4.948'. [ 593.209005][ T5084] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 595.097689][ T9358] loop1: detected capacity change from 0 to 1024 [ 595.131018][ T9358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 595.174873][ T9358] EXT4-fs: Ignoring removed i_version option [ 595.211491][ T9358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 595.263961][ T9358] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 595.389492][ T9358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.442418][ T9358] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.685215][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 598.923253][ T9379] FAULT_INJECTION: forcing a failure. [ 598.923253][ T9379] name failslab, interval 1, probability 0, space 0, times 0 [ 598.957163][ T9379] CPU: 1 PID: 9379 Comm: syz.0.965 Not tainted syzkaller #0 [ 598.964538][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 598.974743][ T9379] Call Trace: [ 598.978120][ T9379] [ 598.981174][ T9379] dump_stack_lvl+0x18c/0x250 [ 598.986140][ T9379] ? show_regs_print_info+0x20/0x20 [ 598.991441][ T9379] ? load_image+0x420/0x420 [ 598.996009][ T9379] ? __might_sleep+0xe0/0xe0 [ 599.000755][ T9379] ? __lock_acquire+0x7d80/0x7d80 [ 599.005875][ T9379] should_fail_ex+0x394/0x4c0 [ 599.010659][ T9379] should_failslab+0x9/0x20 [ 599.015221][ T9379] slab_pre_alloc_hook+0x59/0x300 [ 599.020310][ T9379] ? vb2_vmalloc_alloc+0xb2/0x330 [ 599.025428][ T9379] __kmem_cache_alloc_node+0x53/0x250 [ 599.030836][ T9379] ? vb2_vmalloc_alloc+0xb2/0x330 [ 599.035876][ T9379] kmalloc_trace+0x2a/0xe0 [ 599.040352][ T9379] vb2_vmalloc_alloc+0xb2/0x330 [ 599.045568][ T9379] ? __copy_timestamp+0x1f0/0x1f0 [ 599.050606][ T9379] __vb2_queue_alloc+0x78f/0x1410 [ 599.055712][ T9379] vb2_core_reqbufs+0x9e8/0x10d0 [ 599.060686][ T9379] ? vb2_verify_memory_type+0x570/0x570 [ 599.066251][ T9379] ? do_vfs_ioctl+0x156c/0x1cc0 [ 599.071178][ T9379] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 599.076670][ T9379] __video_do_ioctl+0xa34/0xde0 [ 599.081558][ T9379] ? video_ioctl2+0x30/0x30 [ 599.086112][ T9379] ? __might_fault+0xc6/0x120 [ 599.090826][ T9379] ? __might_fault+0xaa/0x120 [ 599.095529][ T9379] video_usercopy+0x889/0x1360 [ 599.100312][ T9379] ? video_ioctl2+0x30/0x30 [ 599.104852][ T9379] ? v4l_printk_ioctl+0x160/0x160 [ 599.109916][ T9379] v4l2_ioctl+0x18a/0x1e0 [ 599.114263][ T9379] ? v4l2_poll+0x2b0/0x2b0 [ 599.118783][ T9379] __se_sys_ioctl+0xfd/0x170 [ 599.123393][ T9379] do_syscall_64+0x55/0xb0 [ 599.127825][ T9379] ? clear_bhb_loop+0x40/0x90 [ 599.132622][ T9379] ? clear_bhb_loop+0x40/0x90 [ 599.137319][ T9379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.143278][ T9379] RIP: 0033:0x7fa9fd99e159 [ 599.148098][ T9379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.167838][ T9379] RSP: 002b:00007fa9fe819028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.176273][ T9379] RAX: ffffffffffffffda RBX: 00007fa9fdc25fa0 RCX: 00007fa9fd99e159 [ 599.184352][ T9379] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000004 [ 599.192343][ T9379] RBP: 00007fa9fda35024 R08: 0000000000000000 R09: 0000000000000000 [ 599.200356][ T9379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.208383][ T9379] R13: 00007fa9fdc26038 R14: 00007fa9fdc25fa0 R15: 00007ffebce621f8 [ 599.216393][ T9379] [ 603.463198][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.964'. [ 603.511572][ T9408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.547333][ T9408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.235214][ T9434] syz.1.982 (9434) used greatest stack depth: 19800 bytes left [ 612.000080][ T9447] syzkaller0: entered promiscuous mode [ 612.005631][ T9447] syzkaller0: entered allmulticast mode [ 612.718894][ T5835] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 614.395627][ T5835] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.524903][ T5835] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 614.535710][ T5835] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 614.558709][ T5835] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 614.567822][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.598619][ T5835] usb 2-1: Product: syz [ 614.602869][ T5835] usb 2-1: Manufacturer: syz [ 614.607511][ T5835] usb 2-1: SerialNumber: syz [ 616.163595][ T5816] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 616.178824][ C1] usb 2-1: received EP1 urb->status = -2 [ 616.184743][ T5835] usb 2-1: unable to init card! (ret=-110) [ 616.192061][ T5835] snd-usb-caiaq: probe of 2-1:1.0 failed with error -110 [ 616.270383][ T9452] usb 2-1: USB disconnect, device number 8 [ 616.361714][ T5816] usb 1-1: unable to get BOS descriptor or descriptor too short [ 616.379593][ T5816] usb 1-1: not running at top speed; connect to a high speed hub [ 616.399665][ T5816] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 616.407897][ T5816] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 616.428747][ T5816] usb 1-1: config 14 has no interface number 0 [ 616.434987][ T5816] usb 1-1: config 14 has no interface number 1 [ 616.453698][ T5816] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 616.478680][ T5816] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0x1B, skipping [ 616.508762][ T5816] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 616.528629][ T5816] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 616.555524][ T5816] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 616.576445][ T5816] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.590209][ T5816] usb 1-1: config 14 interface 57 has no altsetting 0 [ 616.597204][ T5816] usb 1-1: config 14 interface 228 has no altsetting 0 [ 616.607563][ T5816] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 616.618702][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.626783][ T5816] usb 1-1: Product: syz [ 616.635419][ T5816] usb 1-1: Manufacturer: syz [ 616.640456][ T5816] usb 1-1: SerialNumber: syz [ 617.844202][ T5816] legousbtower 1-1:14.57: interrupt endpoints not found [ 620.841420][ T5816] legousbtower 1-1:14.228: interrupt endpoints not found [ 621.107929][ T5816] usb 1-1: USB disconnect, device number 7 [ 624.840467][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.859192][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.506169][ T9534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1000'. [ 632.224654][ T5814] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 632.365069][ T9542] netlink: 620 bytes leftover after parsing attributes in process `syz.3.1005'. [ 632.460405][ T5814] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.492457][ T5814] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 632.518793][ T5814] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 632.559730][ T5814] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 632.578585][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.599055][ T5814] usb 2-1: Product: syz [ 632.603377][ T5814] usb 2-1: Manufacturer: syz [ 632.608398][ T5814] usb 2-1: SerialNumber: syz [ 633.697217][ C0] usb 2-1: received EP1 urb->status = -71 [ 633.703651][ T5814] usb 2-1: unable to init card! (ret=-71) [ 633.709926][ T5814] snd-usb-caiaq: probe of 2-1:1.0 failed with error -71 [ 633.745307][ T5814] usb 2-1: USB disconnect, device number 9 [ 635.863938][ T9570] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 635.962939][ T49] rtrs_client L1782: : Resolving route failed, err: -19 [ 636.008163][ T9570] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 636.209845][ T9563] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 636.366316][ T9575] netlink: 620 bytes leftover after parsing attributes in process `syz.1.1020'. [ 638.331670][ T9593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1025'. [ 638.638916][ T8] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 639.007536][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.495717][ T8] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 639.506914][ T8] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 639.567993][ T8] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 639.588618][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.618594][ T8] usb 1-1: Product: syz [ 639.625311][ T8] usb 1-1: Manufacturer: syz [ 639.650494][ T8] usb 1-1: SerialNumber: syz [ 639.712297][ T9614] netlink: 620 bytes leftover after parsing attributes in process `syz.3.1030'. [ 640.090306][ C0] usb 1-1: received EP1 urb->status = -71 [ 640.119831][ T8] usb 1-1: unable to init card! (ret=-71) [ 640.126033][ T8] snd-usb-caiaq: probe of 1-1:1.0 failed with error -71 [ 640.178949][ T8] usb 1-1: USB disconnect, device number 8 [ 646.641805][ T9656] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 646.708402][ T4463] rtrs_client L1782: : Resolving route failed, err: -19 [ 646.776968][ T9656] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 647.094454][ T9663] netlink: 620 bytes leftover after parsing attributes in process `syz.4.1040'. [ 650.127279][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1046'. [ 650.222363][ T9686] capability: warning: `syz.3.1046' uses 32-bit capabilities (legacy support in use) [ 657.476266][ T9746] loop6: detected capacity change from 0 to 3904 [ 666.607927][ T9796] loop0: detected capacity change from 0 to 512 [ 666.667393][ T9796] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 666.719268][ T9796] System zones: 1-12 [ 666.786683][ T9796] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.1068: missing EA_INODE flag [ 666.873540][ T9796] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1068: error while reading EA inode 12 err=-117 [ 666.919217][ T9796] EXT4-fs (loop0): 1 orphan inode deleted [ 666.926477][ T9796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.132530][ T9803] loop3: detected capacity change from 0 to 2048 [ 667.204370][ T9804] overlayfs: missing 'lowerdir' [ 667.821887][ T9803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.851655][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.878854][ T9803] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.102663][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.139555][ T9814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1076'. [ 670.517737][ T9814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.394292][ T9814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.512135][ T9842] loop4: detected capacity change from 0 to 512 [ 675.553855][ T9842] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 675.578833][ T9842] System zones: 1-12 [ 675.599573][ T9842] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.1083: missing EA_INODE flag [ 675.624581][ T9842] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1083: error while reading EA inode 12 err=-117 [ 675.723307][ T9842] EXT4-fs (loop4): 1 orphan inode deleted [ 675.747410][ T9842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.142835][ T9850] overlayfs: missing 'lowerdir' [ 677.217956][ T6967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.926967][ T9862] loop3: detected capacity change from 0 to 2048 [ 678.980911][ T9862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.046187][ T9867] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 679.058140][ T9862] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 679.105560][ T9867] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 679.248653][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.811985][ T9880] loop0: detected capacity change from 0 to 8 [ 681.687820][ T9889] loop0: detected capacity change from 0 to 512 [ 683.001469][ T9889] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 683.105940][ T9889] System zones: 1-12 [ 683.396755][ T9889] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.1095: missing EA_INODE flag [ 683.622662][ T9889] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1095: error while reading EA inode 12 err=-117 [ 683.948809][ T9889] EXT4-fs (loop0): 1 orphan inode deleted [ 683.956192][ T9889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.859124][ T9904] overlayfs: missing 'lowerdir' [ 685.402247][ T9909] syzkaller0: entered promiscuous mode [ 685.407923][ T9909] syzkaller0: entered allmulticast mode [ 686.252372][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.272622][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.334118][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.917102][ T9914] smc: net device vlan1 applied user defined pnetid SYZ2 [ 688.064427][ T9919] loop3: detected capacity change from 0 to 2048 [ 688.379202][ T9926] overlayfs: overlapping lowerdir path [ 689.203765][ T9919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.217978][ T9934] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 689.290329][ T9919] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.540767][ T11] rtrs_client L1782: : Resolving route failed, err: -19 [ 690.429911][ T9934] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 690.443264][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.546538][ T9951] loop3: detected capacity change from 0 to 512 [ 692.738793][ T9951] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 692.868865][ T9951] System zones: 1-12 [ 692.884995][ T9951] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.1106: missing EA_INODE flag [ 692.941418][ T9951] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1106: error while reading EA inode 12 err=-117 [ 692.990507][ T9951] EXT4-fs (loop3): 1 orphan inode deleted [ 693.008166][ T9951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.341685][ T9970] overlayfs: missing 'lowerdir' [ 693.401969][ T9971] 9pnet_fd: Insufficient options for proto=fd [ 693.997604][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.835810][ T9983] loop0: detected capacity change from 0 to 512 [ 697.604628][ T9989] loop3: detected capacity change from 0 to 2048 [ 698.849222][ T9989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.048996][ T9989] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 700.432495][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.447266][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 700.959294][T10022] loop0: detected capacity change from 0 to 8 [ 704.921159][T10045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1127'. [ 705.008029][T10046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.152023][T10046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.318456][T10054] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 705.334685][T10054] device-mapper: ioctl: error adding target to table [ 705.361517][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 705.790272][T10067] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 706.049442][T10074] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1133'. [ 706.304121][T10074] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1133'. [ 706.999289][T10083] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 707.355712][ T59] rtrs_client L1782: : Resolving route failed, err: -19 [ 707.586075][T10083] rtrs_client L2618: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 709.914705][ T5084] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 709.925238][ T5084] Bluetooth: hci4: unexpected event for opcode 0x203e [ 709.937704][T10106] netlink: 620 bytes leftover after parsing attributes in process `syz.3.1139'. [ 712.424737][T10135] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 713.178732][ T40] rtrs_client L1782: : Resolving route failed, err: -19 [ 713.207704][ T5084] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 713.216283][ T5084] Bluetooth: hci3: unexpected event for opcode 0x203e [ 713.283589][T10135] rtrs_client L2618: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 713.786086][T10152] loop0: detected capacity change from 0 to 8 [ 714.572606][ T5084] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 714.582496][ T5084] Bluetooth: hci4: Injecting HCI hardware error event [ 714.592232][ T5084] Bluetooth: hci4: hardware error 0x00 [ 715.824714][T10158] loop3: detected capacity change from 0 to 16 [ 716.036832][T10158] erofs: (device loop3): mounted with root inode @ nid 36. [ 717.604676][ T5084] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 717.613037][ T5084] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 717.624630][ T5084] Bluetooth: hci3: Injecting HCI hardware error event [ 717.636850][ T9329] Bluetooth: hci3: hardware error 0x00 [ 717.756329][T10168] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1141'. [ 717.842056][T10158] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 717.856407][T10158] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 717.856464][T10158] erofs: (device loop3): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 717.856547][T10158] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 717.856566][T10158] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 717.856589][T10158] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 717.856607][T10158] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 717.856628][T10158] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 717.856647][T10158] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 717.856681][T10158] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 717.856703][T10158] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 717.856722][T10158] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 717.860202][ T28] audit: type=1800 audit(1788399783.125:16): pid=10158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1158" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 718.038829][ T789] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 718.261670][T10173] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 718.324949][ T789] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 718.430797][ T789] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 718.552889][ T789] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 718.832178][ T789] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 718.949676][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.998676][ T789] usb 2-1: Product: syz [ 719.002925][ T789] usb 2-1: Manufacturer: syz [ 719.007574][ T789] usb 2-1: SerialNumber: syz [ 719.016449][ T49] rtrs_client L1782: : Resolving route failed, err: -19 [ 719.164453][T10173] rtrs_client L2618: : init_conns() failed: err=-512 path=@ip:127.0.0.1 [:0] [ 719.518945][ C1] usb 2-1: received EP1 urb->status = -2 [ 719.536194][ T789] usb 2-1: unable to init card! (ret=-110) [ 719.859352][ T9329] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 720.266140][ T789] snd-usb-caiaq: probe of 2-1:1.0 failed with error -110 [ 720.285150][ T789] usb 2-1: USB disconnect, device number 10 [ 720.305257][T10185] smc: net device vlan1 applied user defined pnetid SYZ2 [ 726.490655][ T9329] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 726.497519][ T9329] Bluetooth: hci0: unexpected event for opcode 0x203e [ 726.558428][T10225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1178'. [ 728.198663][ T5814] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 728.449279][ T5814] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.484888][ T5814] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 728.508552][ T5814] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 728.551853][ T5814] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 728.573916][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.588589][ T5814] usb 1-1: Product: syz [ 728.608785][ T5814] usb 1-1: Manufacturer: syz [ 728.613463][ T5814] usb 1-1: SerialNumber: syz [ 729.664674][ C0] usb 1-1: received EP1 urb->status = -71 [ 729.682393][ T5814] usb 1-1: unable to init card! (ret=-71) [ 729.689249][ T5814] snd-usb-caiaq: probe of 1-1:1.0 failed with error -71 [ 729.703334][ T5814] usb 1-1: USB disconnect, device number 9 [ 731.429234][T10245] loop4: detected capacity change from 0 to 64 [ 732.292098][ T6967] hfs: node 4:3 still has 1 user(s)! [ 732.328692][ T29] INFO: task kworker/1:1:27 blocked for more than 143 seconds. [ 732.356281][ T29] Not tainted syzkaller #0 [ 732.435206][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 732.712967][ T29] task:kworker/1:1 state:D stack:22888 pid:27 ppid:2 flags:0x00004000 [ 732.956719][ T29] Workqueue: usb_hub_wq hub_event [ 733.085987][ T29] Call Trace: [ 733.172305][ T29] [ 733.207345][ T29] __schedule+0x15ae/0x4660 [ 733.218653][ T29] ? device_add+0x87c/0xc40 [ 733.223307][ T29] ? verify_lock_unused+0x140/0x140 [ 733.232030][ T29] ? lock_chain_count+0x20/0x20 [ 733.236955][ T29] ? asan.module_dtor+0x20/0x20 [ 733.242147][ T29] ? kthread_data+0x4f/0xc0 [ 733.246706][ T29] ? wq_worker_sleeping+0x63/0x240 [ 733.252421][ T29] schedule+0xbd/0x170 [ 733.256569][ T29] schedule_timeout+0xc1/0x2d0 [ 733.261475][ T29] ? console_conditional_schedule+0x40/0x40 [ 733.267531][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 733.273647][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 733.279170][ T29] ? lock_chain_count+0x20/0x20 [ 733.284088][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 733.289667][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 733.295269][ T29] ? kobject_put+0x41a/0x450 [ 733.300607][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 733.305881][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 733.311262][ T29] ? wait_for_completion+0x273/0x5a0 [ 733.316686][ T29] wait_for_completion+0x2c6/0x5a0 [ 733.322065][ T29] ? io_schedule+0xd0/0xd0 [ 733.326533][ T29] ? kobject_put+0x41a/0x450 [ 733.331232][ T29] i2c_del_adapter+0x2cd/0x430 [ 733.337323][ T29] ? i2c_add_numbered_adapter+0x140/0x140 [ 733.344044][ T29] ? dvb_usbv2_exit+0x80d/0x980 [ 733.350756][ T29] dvb_usbv2_probe+0x4cf/0x3d20 [ 733.356379][ T29] ? technisat_usb2_i2c_access+0x500/0x500 [ 733.367785][ T29] ? __pm_runtime_set_status+0x8aa/0xba0 [ 733.376725][ T29] usb_probe_interface+0x5c2/0xaf0 [ 733.386490][ T29] ? usb_register_driver+0x3c0/0x3c0 [ 733.397167][ T29] really_probe+0x247/0xae0 [ 733.408387][ T29] ? pm_runtime_barrier+0x14b/0x1c0 [ 733.425659][ T29] __driver_probe_device+0x1f5/0x390 [ 733.433400][ T29] driver_probe_device+0x4f/0x420 [ 733.438893][ T29] __device_attach_driver+0x2ca/0x510 [ 733.444313][ T29] bus_for_each_drv+0x252/0x2e0 [ 733.449639][ T29] ? coredump_store+0x90/0x90 [ 733.454377][ T29] ? bus_find_device+0x300/0x300 [ 733.462811][ T29] __device_attach+0x2c1/0x420 [ 733.478629][ T29] ? device_attach+0x20/0x20 [ 733.488635][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 733.494020][ T29] bus_probe_device+0x180/0x260 [ 733.508605][ T29] device_add+0x87c/0xc40 [ 733.513315][ T29] usb_set_configuration+0x1ad0/0x2150 [ 733.520958][ T29] usb_generic_driver_probe+0x8d/0x150 [ 733.526628][ T29] usb_probe_device+0x12a/0x260 [ 733.543232][ T29] ? usb_register_device_driver+0x230/0x230 [ 733.549501][ T29] really_probe+0x247/0xae0 [ 733.554147][ T29] ? pm_runtime_barrier+0x14b/0x1c0 [ 733.559767][ T29] __driver_probe_device+0x1f5/0x390 [ 733.565212][ T29] driver_probe_device+0x4f/0x420 [ 733.570778][ T29] __device_attach_driver+0x2ca/0x510 [ 733.576288][ T29] bus_for_each_drv+0x252/0x2e0 [ 733.583918][ T29] ? coredump_store+0x90/0x90 [ 733.589037][ T29] ? bus_find_device+0x300/0x300 [ 733.594135][ T29] __device_attach+0x2c1/0x420 [ 733.599345][ T29] ? device_attach+0x20/0x20 [ 733.604157][ T29] ? __kmem_cache_free+0xba/0x1f0 [ 733.610382][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 733.615736][ T29] bus_probe_device+0x180/0x260 [ 733.620936][ T29] device_add+0x87c/0xc40 [ 733.625394][ T29] usb_new_device+0x995/0x1550 [ 733.630644][ T29] ? lock_chain_count+0x20/0x20 [ 733.635624][ T29] ? usb_disconnect+0x8a0/0x8a0 [ 733.640674][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 733.645994][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 733.651568][ T29] hub_event+0x29d5/0x4a80 [ 733.656176][ T29] ? hub_post_resume+0x120/0x120 [ 733.661866][ T29] ? read_lock_is_recursive+0x20/0x20 [ 733.667460][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 733.672990][ T29] ? process_scheduled_works+0x975/0x1600 [ 733.678855][ T29] ? process_scheduled_works+0x975/0x1600 [ 733.684698][ T29] process_scheduled_works+0xa60/0x1600 [ 733.693052][ T29] ? worker_attach_to_pool+0x370/0x370 [ 733.698708][ T29] ? assign_work+0x3cc/0x5d0 [ 733.703454][ T29] worker_thread+0xa5e/0xfe0 [ 733.708209][ T29] kthread+0x2fa/0x390 [ 733.717994][ T29] ? pr_cont_work+0x550/0x550 [ 733.723093][ T29] ? kthread_blkcg+0xd0/0xd0 [ 733.727815][ T29] ret_from_fork+0x48/0x80 [ 733.732786][ T29] ? kthread_blkcg+0xd0/0xd0 [ 733.737495][ T29] ret_from_fork_asm+0x11/0x20 [ 733.742698][ T29] [ 733.746000][ T29] [ 733.746000][ T29] Showing all locks held in the system: [ 733.758857][ T29] 5 locks held by kworker/1:1/27: [ 733.764045][ T29] #0: ffff888143263938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 733.795935][ T29] #1: ffffc90000a2fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 733.808367][ T29] #2: ffff8881437141d8 (&dev->mutex){....}-{3:3}, at: hub_event+0x188/0x4a80 [ 733.818689][ T29] #3: ffff88807e4381d8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x89/0x420 [ 733.832152][ T29] #4: ffff88807f9ea1a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x89/0x420 [ 733.842015][ T29] 1 lock held by khungtaskd/29: [ 733.846989][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 733.857656][ T29] 2 locks held by getty/5527: [ 733.863140][ T29] #0: ffff88802cd330a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 733.873820][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 733.884369][ T29] 1 lock held by syz-executor/5773: [ 733.890301][ T29] 4 locks held by kworker/u4:10/6315: [ 733.895809][ T29] #0: ffff8880b8e3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130 [ 733.906349][ T29] #1: ffff8880b8f28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660 [ 733.916405][ T29] #2: ffff88807c4c0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x260 [ 733.927331][ T29] #3: ffff88805df7cdc0 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xac/0x1100 [ 733.940100][ T29] 4 locks held by udevd/7562: [ 733.944925][ T29] #0: ffff88806cb798b8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xa1/0xc50 [ 733.954786][ T29] #1: ffff88805b5c6888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x5d/0x410 [ 733.976973][ T29] #2: ffff888066ba16d0 (kn->active#18){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x410 [ 734.013608][ T29] #3: ffff88807e4381d8 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 734.061844][ T29] [ 734.064351][ T29] ============================================= [ 734.064351][ T29] [ 734.126151][ T29] NMI backtrace for cpu 0 [ 734.130559][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 734.137955][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 734.148052][ T29] Call Trace: [ 734.151366][ T29] [ 734.154413][ T29] dump_stack_lvl+0x18c/0x250 [ 734.159114][ T29] ? __wake_up_klogd+0xd9/0x100 [ 734.164264][ T29] ? show_regs_print_info+0x20/0x20 [ 734.169735][ T29] ? load_image+0x420/0x420 [ 734.174290][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 734.179288][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 734.185474][ T29] ? load_image+0x420/0x420 [ 734.190351][ T29] ? wq_watchdog_touch+0xef/0x170 [ 734.195490][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 734.201577][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 734.207572][ T29] watchdog+0xf59/0xfa0 [ 734.211804][ T29] ? watchdog+0x1e1/0xfa0 [ 734.216183][ T29] kthread+0x2fa/0x390 [ 734.220281][ T29] ? hungtask_pm_notify+0x50/0x50 [ 734.225318][ T29] ? kthread_blkcg+0xd0/0xd0 [ 734.230051][ T29] ret_from_fork+0x48/0x80 [ 734.234578][ T29] ? kthread_blkcg+0xd0/0xd0 [ 734.239180][ T29] ret_from_fork_asm+0x11/0x20 [ 734.244063][ T29] [ 734.249846][ T29] Sending NMI from CPU 0 to CPUs 1: [ 734.255298][ C1] NMI backtrace for cpu 1 [ 734.255310][ C1] CPU: 1 PID: 10259 Comm: syz.0.1184 Not tainted syzkaller #0 [ 734.255326][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 734.255334][ C1] RIP: 0010:lockdep_init_map_type+0x6d6/0x8e0 [ 734.255359][ C1] Code: e9 73 fa ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 88 fa ff ff 4c 89 f7 e8 59 8f 77 00 48 ba 00 00 00 00 00 fc ff df e9 71 fa ff ff <48> c7 c1 80 64 2f 97 80 e1 07 80 c1 03 38 c1 0f 8c 76 fa ff ff 48 [ 734.255372][ C1] RSP: 0018:ffffc9000fecf9a0 EFLAGS: 00000202 [ 734.255387][ C1] RAX: 0000000000000004 RBX: ffffc9000fecfb80 RCX: ffffffff972f6403 [ 734.255398][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffc9000fecfba1 [ 734.255408][ C1] RBP: ffffc9000fecfa70 R08: ffffc9000fecfb97 R09: 0000000000000000 [ 734.255419][ C1] R10: ffffc9000fecfb88 R11: fffff52001fd9f73 R12: 1ffff92001fd9f38 [ 734.255429][ C1] R13: 0000000000000000 R14: ffffc9000fecfba2 R15: ffffffff9761d860 [ 734.255439][ C1] FS: 00007fa9fe8196c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 734.255457][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 734.255467][ C1] CR2: 0000200000005000 CR3: 000000007b444000 CR4: 00000000003506e0 [ 734.255483][ C1] Call Trace: [ 734.255489][ C1] [ 734.255497][ C1] ? lockdep_softirqs_off+0x440/0x440 [ 734.255517][ C1] ? io_schedule+0xd0/0xd0 [ 734.255539][ C1] __init_swait_queue_head+0xa8/0x140 [ 734.255558][ C1] rdmsr_safe_on_cpu+0x150/0x2a0 [ 734.255577][ C1] ? wrmsr_on_cpus+0x30/0x30 [ 734.255593][ C1] ? rdmsr_safe_on_cpu+0x2a0/0x2a0 [ 734.255615][ C1] ? __might_fault+0xaa/0x120 [ 734.255630][ C1] ? __might_fault+0xc6/0x120 [ 734.255643][ C1] ? __might_fault+0xaa/0x120 [ 734.255660][ C1] msr_read+0x142/0x240 [ 734.255677][ C1] ? msr_device_destroy+0x30/0x30 [ 734.255693][ C1] ? fsnotify_perm+0x3ed/0x5e0 [ 734.255753][ C1] ? msr_device_destroy+0x30/0x30 [ 734.255769][ C1] vfs_read+0x298/0x990 [ 734.255791][ C1] ? kernel_read+0x1e0/0x1e0 [ 734.255811][ C1] ? __fget_files+0x28/0x460 [ 734.255830][ C1] ? __fget_files+0x3fc/0x460 [ 734.255852][ C1] ? __fdget_pos+0x1d8/0x330 [ 734.255870][ C1] ? ksys_read+0x74/0x260 [ 734.255890][ C1] ksys_read+0x151/0x260 [ 734.255910][ C1] ? vfs_write+0x9a0/0x9a0 [ 734.255931][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 734.255953][ C1] do_syscall_64+0x55/0xb0 [ 734.255969][ C1] ? clear_bhb_loop+0x40/0x90 [ 734.255987][ C1] ? clear_bhb_loop+0x40/0x90 [ 734.256005][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.256022][ C1] RIP: 0033:0x7fa9fd99e159 [ 734.256034][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.256046][ C1] RSP: 002b:00007fa9fe819028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 734.256061][ C1] RAX: ffffffffffffffda RBX: 00007fa9fdc25fa0 RCX: 00007fa9fd99e159 [ 734.256072][ C1] RDX: 0000000000019000 RSI: 0000200000000f00 RDI: 0000000000000005 [ 734.256082][ C1] RBP: 00007fa9fda35024 R08: 0000000000000000 R09: 0000000000000000 [ 734.256092][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.256101][ C1] R13: 00007fa9fdc26038 R14: 00007fa9fdc25fa0 R15: 00007ffebce621f8 [ 734.256120][ C1] [ 734.633888][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 734.641325][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 734.648795][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 734.658957][ T29] Call Trace: [ 734.662254][ T29] [ 734.665195][ T29] dump_stack_lvl+0x18c/0x250 [ 734.669892][ T29] ? show_regs_print_info+0x20/0x20 [ 734.675106][ T29] ? load_image+0x420/0x420 [ 734.679631][ T29] panic+0x2ca/0x720 [ 734.683551][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 734.688070][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 734.693460][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 734.699722][ T29] watchdog+0xf98/0xfa0 [ 734.703893][ T29] ? watchdog+0x1e1/0xfa0 [ 734.708241][ T29] kthread+0x2fa/0x390 [ 734.712322][ T29] ? hungtask_pm_notify+0x50/0x50 [ 734.717476][ T29] ? kthread_blkcg+0xd0/0xd0 [ 734.722077][ T29] ret_from_fork+0x48/0x80 [ 734.726504][ T29] ? kthread_blkcg+0xd0/0xd0 [ 734.731139][ T29] ret_from_fork_asm+0x11/0x20 [ 734.735934][ T29] [ 734.739310][ T29] Kernel Offset: disabled [ 734.743812][ T29] Rebooting in 86400 seconds..