last executing test programs: 2m47.821109365s ago: executing program 2 (id=418): madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0xffffffff, "5e5c3446aa0ecd60affb12d8310abe691891100054fe9676d14574567fcc1b5c", 0xffffffffffffffff}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES16=r2, @ANYRESHEX=r1], 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000200)={'ip6_vti0\x00', 0x1}) syz_usb_connect$midi(0x2, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000040410e4141400001020301090226000101ff0004090400000101030006072401d109070009058e0b00020fd70204"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x14b9604c7e0b2d33, 0x0, 0xffffffffffffffff}) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10000, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES16, @ANYRESDEC], 0x2, 0x18b, &(0x7f00000003c0)="$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") 2m42.487610102s ago: executing program 2 (id=429): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x1e9100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x10000, 0x2, 0x25000, 0x2000, &(0x7f0000732000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m42.046378012s ago: executing program 2 (id=431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'ip6gre0\x00', 0x2}, 0x18) 2m36.521210438s ago: executing program 2 (id=447): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000200)=0xef, 0x4) recvmmsg(r1, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 2m34.032059914s ago: executing program 2 (id=452): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./mysys/file0\x00', &(0x7f00000000c0), 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) r1 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) open_tree(r1, &(0x7f0000000000)='./bus\x00', 0x80000) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x68411, 0x0, 0x17, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m33.177059764s ago: executing program 2 (id=454): write(0xffffffffffffffff, &(0x7f0000000000)="dea89f5333f32ef93170239e923c2ce66f6d48d12c2ae0e5", 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000759, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x6}, 0x0}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x17}}, {@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@resgid}, {@nodioread_nolock}, {@data_writeback}, {@journal_async_commit}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@obj_role}], 0x2c}, 0x0, 0x525, &(0x7f0000000440)="$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") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m18.066872095s ago: executing program 32 (id=454): write(0xffffffffffffffff, &(0x7f0000000000)="dea89f5333f32ef93170239e923c2ce66f6d48d12c2ae0e5", 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000759, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x6}, 0x0}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x17}}, {@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@resgid}, {@nodioread_nolock}, {@data_writeback}, {@journal_async_commit}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@obj_role}], 0x2c}, 0x0, 0x525, &(0x7f0000000440)="$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") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20.595968994s ago: executing program 3 (id=667): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8046}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.659705284s ago: executing program 0 (id=668): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') setns(r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r4, r4, 0x0, 0x1000000201005) 15.685542862s ago: executing program 1 (id=673): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8046}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15.683970772s ago: executing program 5 (id=674): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) syz_emit_ethernet(0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) symlinkat(&(0x7f0000001300)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/nvmet/ports/1/subsystems/testnqn\x00') r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 14.455922159s ago: executing program 5 (id=676): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='path_group G1 /bin/tr', 0x15) close(r0) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='delete path_group G2 /bin/false\n', 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='path_group G3 /bin/sh\n', 0x16) write(r2, 0x0, 0x0) close(r2) nanosleep(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='path_group ', 0xb) close(r3) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) 14.243962989s ago: executing program 1 (id=678): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 13.442542686s ago: executing program 4 (id=680): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$unix(0x1, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1001}, 0x2}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r0, 0x0, 0x0) 12.754580948s ago: executing program 5 (id=681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000180)={r0, 0x1, 0x400}) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fff", 0x5) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000001c0)=0x2) 11.917904837s ago: executing program 1 (id=682): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8=0x0, @ANYRESHEX], 0x2, 0xa1b, &(0x7f0000001f80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 11.743865355s ago: executing program 4 (id=683): socket$inet6_sctp(0xa, 0x5, 0x84) landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x0, 0x0, 0x2, 0x9}, 0x30, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000003540)={0x2020}, 0x2020) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 11.663367099s ago: executing program 5 (id=684): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x5422, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8, 0x800) 11.63173274s ago: executing program 3 (id=685): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xd, 0x7fff, 0xfffffff9}, {0x0, 0x2, 0x5, 0x3, 0x6}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0xa, 0x1, 0xc53a, 0x9, 0xfff, 0xfffffffa, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 10.675820535s ago: executing program 1 (id=686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000244e0000", 0x58}], 0x1) 9.545737747s ago: executing program 0 (id=687): fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext2\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000200)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}], [{@obj_role={'obj_role', 0x3d, '&-)'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}, 0x1, 0x24e, &(0x7f0000000540)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rename(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='./file0\x00') connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 8.253015177s ago: executing program 1 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x25, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) accept4$llc(r3, 0x0, 0x0, 0x80000) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x161a82, 0x149) sendfile(r5, r5, 0x0, 0xb) 7.951932291s ago: executing program 5 (id=689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x86) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) 7.307179841s ago: executing program 4 (id=690): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0xfffd, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa3, 0xb69b, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8091}, 0x4000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.052112479s ago: executing program 5 (id=691): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) symlink(0x0, 0x0) symlink(0x0, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') 5.921807165s ago: executing program 0 (id=692): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dummy\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x100000) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) dup2(r2, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/mycluster/node/node0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='7777\n', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster/heartbeat/reg0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000600)='512\n', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/cluster/mycluster/heartbeat/reg0/dev\x00', 0x1, 0x0) write(r3, &(0x7f00000007c0)='3\n', 0x2) nanosleep(&(0x7f0000000800)={0x3}, 0x0) 5.703753795s ago: executing program 3 (id=693): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 4.752664589s ago: executing program 3 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) io_destroy(0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @random="4955487998f1", @void, {@generic={0x8906}}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) 4.721645091s ago: executing program 4 (id=695): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[], 0xfd, 0x4b1, &(0x7f0000001d00)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000440)='g', 0x1, 0x4fed3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = inotify_init1(0x0) prlimit64(r1, 0xb, &(0x7f0000000040)={0x8, 0x96}, &(0x7f00000000c0)) mknod$loop(&(0x7f0000000100)='./file1\x00', 0x4, 0x1) inotify_add_watch(r2, &(0x7f0000000000)='./file1\x00', 0x40001a2) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) 4.647859274s ago: executing program 0 (id=696): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 3.738482777s ago: executing program 3 (id=697): syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$packet(0x11, 0x3, 0x300) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000006, 0x11, 0xffffffffffffffff, 0x392fc000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r0 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r0, 0x0, 0x0, 0x100004) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgget$private(0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff) write(r1, &(0x7f0000001200)="05010906a101", 0x6) 3.632731461s ago: executing program 4 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r3 = socket(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r4, 0x0) ftruncate(r4, 0x0) 2.977215182s ago: executing program 0 (id=699): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FIBMAP(0xffffffffffffffff, 0x2284, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd0d, &(0x7f0000000000)="0400000000000000000000007e01") 2.771965861s ago: executing program 3 (id=700): socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x8, 0xfffffffe}}, 0xe8) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) 1.526485429s ago: executing program 4 (id=701): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") creat(0x0, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) 1.68874ms ago: executing program 0 (id=702): socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000180)='.\x00', 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000003c0), 0x76, 0x101b01) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 0s ago: executing program 1 (id=703): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = syz_io_uring_setup(0x75e7, &(0x7f0000000480)={0x0, 0x7210, 0x2, 0x1, 0x1cb, 0x0, r2}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) syz_io_uring_submit$UBLK(0x0, r3, r6, 0x0) syz_ublk_add_dev(r5, 0x0, r3, r6, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r4, &(0x7f0000000180)={0x0, 0x9878, 0x0, 0x1, 0x38c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x40040081, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): ady [ 68.552259][ T4273] device veth0_vlan entered promiscuous mode [ 68.570137][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.581199][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.582906][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 68.597569][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 68.597601][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 68.606336][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 68.617343][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.635191][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.644541][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.654733][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.664334][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.673519][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.681744][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.690361][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.698618][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.709711][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.729565][ T4273] device veth1_vlan entered promiscuous mode [ 68.744178][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.753116][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.774850][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.820392][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.839036][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.863272][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.870408][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.891255][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.900547][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.916163][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.923341][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.932223][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.941631][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.984644][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.999535][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.010151][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.018749][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.031010][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.041133][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.051504][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.060953][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.070987][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.080207][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.088958][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.098718][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.106963][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.114894][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.140063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.154357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.163954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.172264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.186618][ T4273] device veth0_macvtap entered promiscuous mode [ 69.196377][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.211595][ T4272] device veth0_vlan entered promiscuous mode [ 69.219400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.227737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.235691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.245862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.255304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.266183][ T4273] device veth1_macvtap entered promiscuous mode [ 69.288234][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.296828][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.305159][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.329258][ T4272] device veth1_vlan entered promiscuous mode [ 69.348376][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.371378][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.391463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.407803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.419003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.445085][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.477977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.487095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.496959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.505772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.514781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.526194][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.536410][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.545663][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.555211][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.597478][ T4272] device veth0_macvtap entered promiscuous mode [ 69.608688][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.633619][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.642470][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.651161][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.661257][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.677850][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.686682][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.708643][ T4271] device veth0_vlan entered promiscuous mode [ 69.722023][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.730606][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.738737][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.747421][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.766247][ T4272] device veth1_macvtap entered promiscuous mode [ 69.775365][ T4274] device veth0_vlan entered promiscuous mode [ 69.787862][ T4271] device veth1_vlan entered promiscuous mode [ 69.794819][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.803914][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.811656][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.820305][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.837825][ T4274] device veth1_vlan entered promiscuous mode [ 69.886805][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.898529][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.921112][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.934546][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.947939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.958381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.970450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.986480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.996310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.007330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.018896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.041234][ T4271] device veth0_macvtap entered promiscuous mode [ 70.072212][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.088788][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.115193][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.134286][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.149966][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.170672][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.181647][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.198483][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.213767][ T4271] device veth1_macvtap entered promiscuous mode [ 70.230240][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.240303][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.251718][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.260674][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.283414][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.291375][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.304265][ T4274] device veth0_macvtap entered promiscuous mode [ 70.318908][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.333712][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.353533][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.362337][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.390992][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.407864][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.419054][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.430247][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.441918][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.458494][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.469053][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.478233][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.505588][ T4274] device veth1_macvtap entered promiscuous mode [ 70.523275][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.533143][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.540815][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.541518][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.551389][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.551403][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.553688][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.589743][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 70.613910][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.629128][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.637661][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.649077][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.658293][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.663112][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 70.667612][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 70.672351][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 70.678491][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 70.691756][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.706596][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.722184][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.731384][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.744692][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.768249][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.782919][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.792996][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.803536][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.813583][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.825021][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.844474][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.882665][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.890434][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.890589][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.910897][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.921069][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.931760][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.945481][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.955622][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.966991][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.977112][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.989152][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.000651][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.080200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.091252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.101797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.110148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.121942][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.131751][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.140761][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.152133][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.198244][ T4284] device veth0_vlan entered promiscuous mode [ 71.212240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.223718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.227200][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.237478][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.267531][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.276406][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.285692][ T4284] device veth1_vlan entered promiscuous mode [ 71.324293][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.407019][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.431411][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.439457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.489874][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.516159][ T4365] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.516873][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.576287][ T4284] device veth0_macvtap entered promiscuous mode [ 71.618784][ T4284] device veth1_macvtap entered promiscuous mode [ 71.640489][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.654744][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.660082][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.678189][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.705987][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.723355][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.741911][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.753870][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.773844][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.787258][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.797979][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.814510][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.827790][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.839312][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.863713][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.886529][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.912909][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.941348][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.942044][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.953025][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.953043][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.953339][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.957403][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.957420][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.957428][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.957439][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.957447][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.957457][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.957466][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.957477][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.973428][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.021301][ T4372] loop0: detected capacity change from 0 to 512 [ 72.039501][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.115525][ T4372] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 72.127838][ T4372] EXT4-fs warning (device loop0): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 72.141710][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.170155][ T4284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.198623][ T4284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.227750][ T4284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.239456][ T4284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.495073][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.519076][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.538340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.562761][ T4385] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 72.592560][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.608940][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.629003][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.666040][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 72.743044][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 72.749138][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 72.755297][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 72.761815][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 72.782542][ T4319] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.997168][ T4319] usb 4-1: Using ep0 maxpacket: 16 [ 73.006476][ T4319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.036081][ T4319] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.067186][ T4319] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 73.095251][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 73.115076][ T4319] usb 4-1: SerialNumber: syz [ 73.185524][ T4319] usb 4-1: 0:2 : does not exist [ 73.514714][ T4279] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 73.521984][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 1 < 9 [ 73.529940][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -38 [ 73.972480][ T4319] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 74.028102][ T4319] usb 4-1: USB disconnect, device number 2 [ 74.115326][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.991915][ T4483] fuse: Unknown parameter 'group_id00000000000000000000' [ 77.166833][ T4486] block device autoloading is deprecated and will be removed. [ 77.555750][ T4485] tipc: Enabling of bearer rejected, failed to enable media [ 77.760092][ T4498] dwc3 pcspkr: missing memory resource [ 77.966179][ T4501] capability: warning: `syz.0.41' uses 32-bit capabilities (legacy support in use) [ 78.245441][ T4494] loop1: detected capacity change from 0 to 8192 [ 78.427783][ T4494] loop1: p1 p2 p4 [ 78.431706][ T4494] loop1: partition table partially beyond EOD, truncated [ 78.490615][ T4494] loop1: p1 start 51379968 is beyond EOD, truncated [ 78.551243][ T4494] loop1: p4 start 33554440 is beyond EOD, truncated [ 78.816056][ T4523] binder: 4522:4523 ioctl c018620c 200000000180 returned -22 [ 79.560958][ T4261] udevd[4261]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 80.009315][ T4544] FAULT_INJECTION: forcing a failure. [ 80.009315][ T4544] name failslab, interval 1, probability 0, space 0, times 1 [ 80.080068][ T4544] CPU: 1 PID: 4544 Comm: syz.4.49 Not tainted syzkaller #0 [ 80.087351][ T4544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.097468][ T4544] Call Trace: [ 80.100760][ T4544] [ 80.103702][ T4544] dump_stack_lvl+0x188/0x24e [ 80.108413][ T4544] ? show_regs_print_info+0x12/0x12 [ 80.113633][ T4544] ? load_image+0x410/0x410 [ 80.118158][ T4544] ? __lock_acquire+0x7c40/0x7c40 [ 80.123214][ T4544] should_fail_ex+0x390/0x4c0 [ 80.127922][ T4544] should_failslab+0x5/0x20 [ 80.132435][ T4544] slab_pre_alloc_hook+0x59/0x300 [ 80.137478][ T4544] ? __vmalloc_node_range+0x584/0x1380 [ 80.142954][ T4544] __kmem_cache_alloc_node+0x4f/0x270 [ 80.148344][ T4544] ? __vmalloc_node_range+0x584/0x1380 [ 80.153833][ T4544] __kmalloc_node+0xa2/0x240 [ 80.158443][ T4544] __vmalloc_node_range+0x584/0x1380 [ 80.163770][ T4544] ? free_vm_area+0x50/0x50 [ 80.168293][ T4544] ? vidtv_mux_init+0x200/0x1950 [ 80.173249][ T4544] vzalloc+0x75/0x80 [ 80.177155][ T4544] ? vidtv_mux_init+0x200/0x1950 [ 80.182103][ T4544] vidtv_mux_init+0x200/0x1950 [ 80.186890][ T4544] vidtv_start_feed+0x368/0x590 [ 80.191753][ T4544] ? vidtv_i2c_func+0x10/0x10 [ 80.196438][ T4544] ? vidtv_stop_feed+0x250/0x250 [ 80.201393][ T4544] ? preempt_schedule_thunk+0x16/0x18 [ 80.206792][ T4544] dmx_ts_feed_start_filtering+0x11c/0x210 [ 80.212609][ T4544] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 80.218518][ T4544] dvb_dmxdev_filter_start+0x422/0x1060 [ 80.224091][ T4544] dvb_demux_do_ioctl+0x47e/0x530 [ 80.229130][ T4544] dvb_usercopy+0x191/0x2b0 [ 80.233657][ T4544] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 80.239213][ T4544] ? dvb_generic_ioctl+0xb0/0xb0 [ 80.244190][ T4544] ? dvb_demux_poll+0x210/0x210 [ 80.249051][ T4544] dvb_demux_ioctl+0x25/0x30 [ 80.253647][ T4544] __se_sys_ioctl+0xfa/0x170 [ 80.258251][ T4544] do_syscall_64+0x4c/0xa0 [ 80.262679][ T4544] ? clear_bhb_loop+0x60/0xb0 [ 80.267368][ T4544] ? clear_bhb_loop+0x60/0xb0 [ 80.272054][ T4544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.277958][ T4544] RIP: 0033:0x7f827e39e159 [ 80.282393][ T4544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.302007][ T4544] RSP: 002b:00007f827f192028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.302396][ C0] sched: RT throttling activated [ 80.315365][ T4544] RAX: ffffffffffffffda RBX: 00007f827e626090 RCX: 00007f827e39e159 [ 80.323359][ T4544] RDX: 0000200000000180 RSI: 0000000040146f2c RDI: 0000000000000004 [ 80.331352][ T4544] RBP: 00007f827e43506b R08: 0000000000000000 R09: 0000000000000000 [ 80.339373][ T4544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.347350][ T4544] R13: 00007f827e626128 R14: 00007f827e626090 R15: 00007ffd4694e8a8 [ 80.355358][ T4544] [ 80.651143][ T4550] FAULT_INJECTION: forcing a failure. [ 80.651143][ T4550] name failslab, interval 1, probability 0, space 0, times 0 [ 80.714523][ T4550] CPU: 1 PID: 4550 Comm: syz.0.52 Not tainted syzkaller #0 [ 80.721779][ T4550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.731848][ T4550] Call Trace: [ 80.735142][ T4550] [ 80.738085][ T4550] dump_stack_lvl+0x188/0x24e [ 80.742785][ T4550] ? show_regs_print_info+0x12/0x12 [ 80.748002][ T4550] ? load_image+0x410/0x410 [ 80.752534][ T4550] ? __might_sleep+0xd0/0xd0 [ 80.757136][ T4550] ? __lock_acquire+0x7c40/0x7c40 [ 80.762183][ T4550] should_fail_ex+0x390/0x4c0 [ 80.766886][ T4550] should_failslab+0x5/0x20 [ 80.771401][ T4550] slab_pre_alloc_hook+0x59/0x300 [ 80.776445][ T4550] kmem_cache_alloc+0x56/0x2f0 [ 80.781221][ T4550] ? security_inode_alloc+0x30/0x110 [ 80.786527][ T4550] security_inode_alloc+0x30/0x110 [ 80.791657][ T4550] inode_init_always+0x910/0xc90 [ 80.796614][ T4550] new_inode_pseudo+0x91/0x1c0 [ 80.801393][ T4550] __sock_create+0x129/0x940 [ 80.806001][ T4550] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 80.812003][ T4550] __sys_socket+0xc4/0x190 [ 80.816439][ T4550] __x64_sys_socket+0x76/0x80 [ 80.821133][ T4550] do_syscall_64+0x4c/0xa0 [ 80.825561][ T4550] ? clear_bhb_loop+0x60/0xb0 [ 80.830253][ T4550] ? clear_bhb_loop+0x60/0xb0 [ 80.834945][ T4550] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.840941][ T4550] RIP: 0033:0x7fa31d39e159 [ 80.845363][ T4550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.864983][ T4550] RSP: 002b:00007fa31e2d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 80.873415][ T4550] RAX: ffffffffffffffda RBX: 00007fa31d626090 RCX: 00007fa31d39e159 [ 80.881397][ T4550] RDX: 0000000000000000 RSI: 0000000000080003 RDI: 0000000000000010 [ 80.889382][ T4550] RBP: 00007fa31d43506b R08: 0000000000000000 R09: 0000000000000000 [ 80.897369][ T4550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.905352][ T4550] R13: 00007fa31d626128 R14: 00007fa31d626090 R15: 00007ffd2afce618 [ 80.913351][ T4550] [ 81.211944][ T4550] socket: no more sockets [ 81.337715][ T4563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 81.478474][ T14] cfg80211: failed to load regulatory.db [ 81.677469][ T4568] mount: server 127.0.0.1 not responding, timed out [ 81.918729][ T4582] Bluetooth: (null): Invalid header checksum [ 82.130857][ T4589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.65'. [ 82.547434][ T4606] loop4: detected capacity change from 0 to 512 [ 82.778204][ T4606] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.69: Invalid block bitmap block 0 in block_group 0 [ 82.895505][ T4606] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 82.904553][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.963421][ T4606] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.69: attempt to clear invalid blocks 983261 len 1 [ 82.989719][ T4606] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.69: invalid indirect mapped block 2683928664 (level 0) [ 83.029934][ T4606] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.69: Invalid inode table block 0 in block_group 0 [ 83.050656][ T4606] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 83.061447][ T4606] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 83.086481][ T4606] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.69: Invalid inode table block 0 in block_group 0 [ 83.111677][ T4606] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 83.124978][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.143381][ T14] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 83.162326][ T4606] EXT4-fs error (device loop4): ext4_truncate:4325: inode #13: comm syz.4.69: mark_inode_dirty error [ 83.186351][ T14] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.210771][ T4606] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 83.229918][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.244645][ T4606] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.69: Invalid inode table block 0 in block_group 0 [ 83.252565][ T4322] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.260240][ T14] usb 4-1: Product: syz [ 83.277000][ T4606] EXT4-fs (loop4): 1 truncate cleaned up [ 83.287771][ T14] usb 4-1: Manufacturer: syz [ 83.292537][ T14] usb 4-1: SerialNumber: syz [ 83.297690][ T4606] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.338468][ T14] cdc_mbim 4-1:1.0: skipping garbage [ 83.463658][ T4322] usb 2-1: Using ep0 maxpacket: 32 [ 83.485394][ T4322] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 83.503835][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.513909][ T4322] usb 2-1: Product: syz [ 83.518719][ T4322] usb 2-1: Manufacturer: syz [ 83.524097][ T4322] usb 2-1: SerialNumber: syz [ 83.559606][ T4608] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 83.739688][ T4284] EXT4-fs (loop4): unmounting filesystem. [ 84.258620][ T4608] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 84.308498][ T14] cdc_mbim 4-1:1.0: dwNtbInMaxSize=15 is too small. Using 2048 [ 85.915600][ T4322] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 85.998072][ T14] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 86.020152][ T14] cdc_mbim 4-1:1.0: setting tx_max = 48 [ 86.033153][ T14] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 86.042902][ T4322] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 86.060775][ T14] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 06:92:88:72:33:22 [ 86.083749][ T14] usb 4-1: USB disconnect, device number 3 [ 86.090185][ T14] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 86.138303][ T4322] usb 2-1: USB disconnect, device number 2 [ 88.128946][ T4657] loop2: detected capacity change from 0 to 512 [ 88.148837][ T4657] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.162125][ T4657] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.201614][ T4657] EXT4-fs (loop2): 1 truncate cleaned up [ 88.207759][ T4657] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.721017][ T4279] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 88.728225][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 1 < 9 [ 88.737061][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -38 [ 88.900822][ T4657] EXT4-fs (loop2): pa ffff888073e47620: logic 294, phys. 37, len 218 [ 88.909482][ T4657] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4894: group 0, free 77, pa_free 217 [ 89.192517][ T4657] EXT4-fs (loop2): Remounting filesystem read-only [ 89.548890][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 89.550045][ T4731] 0: reclassify loop, rule prio 0, protocol 800 [ 90.302401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 90.332403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 90.922589][ T4749] loop4: detected capacity change from 0 to 4096 [ 91.792422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #292!!! [ 91.970559][ T4749] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 93.050804][ T4700] Trying to write to read-only block-device loop4 [ 93.063463][ T4284] Trying to write to read-only block-device loop4 [ 93.070937][ T4284] Trying to write to read-only block-device loop4 [ 93.149849][ T32] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.174009][ T4284] Trying to write to read-only block-device loop4 [ 93.190971][ T4700] Trying to write to read-only block-device loop4 [ 93.200091][ T4700] Trying to write to read-only block-device loop4 [ 93.220173][ T4284] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 93.356066][ T32] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.482214][ T32] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.597712][ T32] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.222407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 94.352406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 94.444698][ T4279] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 94.452598][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 1 < 9 [ 94.461967][ T4287] Bluetooth: hci4: Opcode 0x1003 failed: -38 [ 95.042784][ T4869] syz.0.97 uses obsolete (PF_INET,SOCK_PACKET) [ 95.472404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 95.552434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 95.712419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 95.742403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 95.752417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 96.957881][ T4917] fuse: Bad value for 'fd' [ 98.710933][ T4261] udevd[4261]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 100.967453][ T4955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'. [ 101.615471][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.625345][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.633874][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.652642][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.660482][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 101.692908][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.874440][ T4960] event trace: Could not enable event p [ 102.214199][ T4982] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 102.312107][ T4986] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 102.687017][ T4993] loop2: detected capacity change from 0 to 512 [ 102.703786][ T4993] EXT4-fs: Ignoring removed oldalloc option [ 102.759578][ T4993] EXT4-fs (loop2): Test dummy encryption mode enabled [ 102.789789][ T4288] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 102.797097][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 1 < 9 [ 102.805579][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -38 [ 102.843160][ T4965] chnl_net:caif_netlink_parms(): no params data found [ 102.871701][ T4993] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 103.110894][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 103.862809][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 104.199506][ T32] device hsr_slave_0 left promiscuous mode [ 104.673342][ T32] device hsr_slave_1 left promiscuous mode [ 105.738048][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.762676][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.839601][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.869345][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.880498][ T32] device bridge_slave_1 left promiscuous mode [ 105.918703][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.936689][ T32] device bridge_slave_0 left promiscuous mode [ 105.943254][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.952462][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 106.470143][ T32] device veth1_macvtap left promiscuous mode [ 106.487591][ T32] device veth0_macvtap left promiscuous mode [ 106.503960][ T32] device veth1_vlan left promiscuous mode [ 106.516129][ T32] device veth0_vlan left promiscuous mode [ 106.872613][ T4322] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.066128][ T4322] usb 4-1: Using ep0 maxpacket: 8 [ 107.074509][ T4322] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 107.083411][ T4322] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.093565][ T4322] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.104178][ T4322] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.114431][ T4322] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.127783][ T4322] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.136940][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.306505][ T32] team0 (unregistering): Port device team_slave_1 removed [ 107.340414][ T32] team0 (unregistering): Port device team_slave_0 removed [ 107.355721][ T4322] usb 4-1: usb_control_msg returned -32 [ 107.361671][ T4322] usbtmc 4-1:16.0: can't read capabilities [ 107.401832][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.437561][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.668718][ T5135] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 107.681616][ T4322] usb 4-1: USB disconnect, device number 4 [ 107.683396][ T32] bond0 (unregistering): Released all slaves [ 107.696248][ T5141] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -19 [ 107.799101][ T4965] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.806329][ T4965] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.814948][ T4965] device bridge_slave_0 entered promiscuous mode [ 107.862663][ T4965] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.876888][ T4965] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.910886][ T4965] device bridge_slave_1 entered promiscuous mode [ 108.006786][ T4965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.022462][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 108.052878][ T4965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.090322][ T4965] team0: Port device team_slave_0 added [ 108.099547][ T4965] team0: Port device team_slave_1 added [ 108.135870][ T4965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.143532][ T4965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.196260][ T4965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.234550][ T4965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.241536][ T4965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.341029][ T4965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.452190][ T5159] FAULT_INJECTION: forcing a failure. [ 108.452190][ T5159] name failslab, interval 1, probability 0, space 0, times 0 [ 108.481709][ T4965] device hsr_slave_0 entered promiscuous mode [ 108.505219][ T4965] device hsr_slave_1 entered promiscuous mode [ 108.526934][ T4965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.535783][ T5159] CPU: 0 PID: 5159 Comm: syz.0.125 Not tainted syzkaller #0 [ 108.541732][ T4965] Cannot create hsr debugfs directory [ 108.543092][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.543111][ T5159] Call Trace: [ 108.543117][ T5159] [ 108.543124][ T5159] dump_stack_lvl+0x188/0x24e [ 108.543152][ T5159] ? show_regs_print_info+0x12/0x12 [ 108.543171][ T5159] ? load_image+0x410/0x410 [ 108.543197][ T5159] ? __might_sleep+0xd0/0xd0 [ 108.543215][ T5159] ? __lock_acquire+0x7c40/0x7c40 [ 108.543244][ T5159] should_fail_ex+0x390/0x4c0 [ 108.543274][ T5159] should_failslab+0x5/0x20 [ 108.543289][ T5159] slab_pre_alloc_hook+0x59/0x300 [ 108.543310][ T5159] ? kobject_get_path+0xac/0x220 [ 108.607999][ T5159] __kmem_cache_alloc_node+0x4f/0x270 [ 108.613401][ T5159] ? kobject_get_path+0xac/0x220 [ 108.618360][ T5159] __kmalloc+0xa3/0x240 [ 108.622546][ T5159] kobject_get_path+0xac/0x220 [ 108.627332][ T5159] kobject_uevent_env+0x28d/0x890 [ 108.632383][ T5159] ? dummy_pullup+0x120/0x120 [ 108.637077][ T5159] ? dummy_udc_set_speed+0xd0/0xd0 [ 108.642204][ T5159] gadget_bind_driver+0x5cf/0x760 [ 108.647264][ T5159] ? gadget_match_driver+0x130/0x130 [ 108.652574][ T5159] really_probe+0x24a/0xb40 [ 108.657097][ T5159] ? pm_runtime_barrier+0x147/0x1c0 [ 108.662318][ T5159] __driver_probe_device+0x1f5/0x390 [ 108.667628][ T5159] driver_probe_device+0x4f/0x420 [ 108.672680][ T5159] __driver_attach+0x43d/0x6c0 [ 108.677466][ T5159] ? driver_attach+0x40/0x40 [ 108.682082][ T5159] bus_for_each_dev+0x182/0x1f0 [ 108.686965][ T5159] ? kobject_add+0x230/0x230 [ 108.691576][ T5159] ? bus_remove_file+0xd0/0xd0 [ 108.696360][ T5159] ? do_raw_spin_unlock+0x11d/0x230 [ 108.701579][ T5159] bus_add_driver+0x324/0x5d0 [ 108.706282][ T5159] driver_register+0x32d/0x430 [ 108.711073][ T5159] usb_gadget_register_driver_owner+0xf5/0x260 [ 108.717254][ T5159] raw_ioctl+0x13a0/0x3cd0 [ 108.721695][ T5159] ? __kmem_cache_free+0xb6/0x200 [ 108.726743][ T5159] ? tomoyo_path_number_perm+0x205/0x650 [ 108.732400][ T5159] ? tomoyo_path_number_perm+0x5a4/0x650 [ 108.738055][ T5159] ? tomoyo_path_number_perm+0x205/0x650 [ 108.743708][ T5159] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 108.749188][ T5159] ? make_qualifier+0x3b0/0x3b0 [ 108.754080][ T5159] ? __fget_files+0x28/0x460 [ 108.758700][ T5159] ? bpf_lsm_file_ioctl+0x5/0x10 [ 108.763651][ T5159] ? security_file_ioctl+0x7c/0xa0 [ 108.768784][ T5159] ? make_qualifier+0x3b0/0x3b0 [ 108.773655][ T5159] __se_sys_ioctl+0xfa/0x170 [ 108.778265][ T5159] do_syscall_64+0x4c/0xa0 [ 108.782678][ T5159] ? clear_bhb_loop+0x60/0xb0 [ 108.787349][ T5159] ? clear_bhb_loop+0x60/0xb0 [ 108.792014][ T5159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.797901][ T5159] RIP: 0033:0x7fa31d39ddeb [ 108.802314][ T5159] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 108.821910][ T5159] RSP: 002b:00007fa31e2f5f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.830319][ T5159] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fa31d39ddeb [ 108.838279][ T5159] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 108.846238][ T5159] RBP: 00007fa31e2f6fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 108.854195][ T5159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.862150][ T5159] R13: 00002000000002c0 R14: 0000000000000000 R15: 0000000000000000 [ 108.870128][ T5159] [ 109.182698][ T4319] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.196106][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 109.336629][ T5174] loop2: detected capacity change from 0 to 1024 [ 109.367381][ T4319] usb 1-1: device descriptor read/64, error -32 [ 109.374748][ T5174] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.442112][ T4965] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.451835][ T5174] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 109.464720][ T4965] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.479588][ T5174] ip_tables: iptables: counters copy to user failed while replacing table [ 109.503242][ T4965] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.541039][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 109.560316][ T4965] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.642716][ T4319] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.766530][ T4965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.827744][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.843330][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.843642][ T4319] usb 1-1: Using ep0 maxpacket: 8 [ 109.874460][ T4965] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.882895][ T4319] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 109.902173][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.910563][ T4319] usb 1-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 109.921773][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.930053][ T4319] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 109.930079][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.960319][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.967558][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.981146][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.007188][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.026631][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.044925][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.052099][ T5112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.080896][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.090767][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.101298][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.109516][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 110.122080][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.132176][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.166739][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.198737][ T14] usb 1-1: USB disconnect, device number 3 [ 110.208755][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.248527][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.257968][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.315954][ T4965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.345913][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.364115][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.384632][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.405563][ T5186] device syzkaller0 entered promiscuous mode [ 110.428054][ T5189] tipc: Started in network mode [ 110.462671][ T5189] tipc: Node identity 825d256c8171, cluster identity 4711 [ 110.485811][ T5189] tipc: Enabled bearer , priority 0 [ 110.529259][ T5185] tipc: Resetting bearer [ 110.563241][ T5193] event trace: Could not enable event p [ 110.618303][ T5185] tipc: Disabling bearer [ 110.917954][ T5203] tipc: Enabled bearer , priority 0 [ 111.051065][ T5208] device syzkaller0 entered promiscuous mode [ 111.108800][ T5208] tipc: Resetting bearer [ 111.296159][ T4934] tipc: Resetting bearer [ 111.349560][ T5213] can0: slcan on pts0. [ 111.358299][ T5202] tipc: Resetting bearer [ 112.504605][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.697714][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 112.713204][ T22] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 112.726646][ T22] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 112.735824][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.744017][ T22] usb 2-1: Product: syz [ 112.748199][ T22] usb 2-1: Manufacturer: syz [ 112.753289][ T22] usb 2-1: SerialNumber: syz [ 113.116038][ T22] usb 2-1: USB disconnect, device number 3 [ 113.395225][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.506565][ T5202] tipc: Disabling bearer [ 113.526137][ T26] tipc: Node number set to 53224812 [ 113.584564][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.603362][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.615675][ T5212] can0 (unregistered): slcan off pts0. [ 113.634582][ T4965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.921782][ T5257] loop2: detected capacity change from 0 to 256 [ 113.946966][ T5257] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x990b46a1, utbl_chksum : 0xe619d30d) [ 113.964598][ T5257] process 'syz.2.142' launched './file0' with NULL argv: empty string added [ 113.975351][ T5257] exFAT-fs (loop2): error, broken FAT chain. [ 113.981625][ T5257] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880702b07e0 iblock : 0, err : -5) [ 113.991741][ T5257] exFAT-fs (loop2): error, broken FAT chain. [ 113.997759][ T5257] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880702b07e0 iblock : 0, err : -5) [ 114.007696][ T5257] exFAT-fs (loop2): error, broken FAT chain. [ 114.013705][ T5257] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880702b07e0 iblock : 1, err : -5) [ 114.024177][ T5257] exFAT-fs (loop2): error, broken FAT chain. [ 114.030165][ T5257] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880702b07e0 iblock : 2, err : -5) [ 114.040151][ T5257] exFAT-fs (loop2): error, broken FAT chain. [ 114.046167][ T5257] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880702b07e0 iblock : 3, err : -5) [ 114.056167][ T5257] exFAT-fs (loop2): error, broken FAT chain. [ 114.062146][ T5257] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880702b07e0 iblock : 4, err : -5) [ 114.072086][ T5257] exFAT-fs (loop2): error, broken FAT chain. [ 114.078109][ T5257] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880702b07e0 iblock : 5, err : -5) [ 114.088030][ T5257] exFAT-fs (loop2): error, broken FAT chain. [ 114.094027][ T5257] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880702b07e0 iblock : 6, err : -5) [ 114.104010][ T5257] exFAT-fs (loop2): error, broken FAT chain. [ 114.110006][ T5257] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880702b07e0 iblock : 7, err : -5) [ 114.119976][ T5257] exFAT-fs (loop2): error, broken FAT chain. [ 114.125962][ T5257] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880702b07e0 iblock : 0, err : -5) [ 114.136190][ T5257] exFAT-fs (loop2): error, broken FAT chain. [ 114.142164][ T5257] exFAT-fs (loop2): error, broken FAT chain. [ 114.148443][ T5257] exFAT-fs (loop2): error, broken FAT chain. [ 114.154494][ T5257] exFAT-fs (loop2): error, broken FAT chain. [ 114.160463][ T5257] exFAT-fs (loop2): error, broken FAT chain. [ 114.166489][ T5257] exFAT-fs (loop2): error, broken FAT chain. [ 114.172537][ T5257] exFAT-fs (loop2): error, broken FAT chain. [ 115.622707][ T4316] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.243695][ T4316] usb 4-1: config 0 has no interfaces? [ 116.249249][ T4316] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 116.332466][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.382998][ T4316] usb 4-1: config 0 descriptor?? [ 116.699092][ T5305] netlink: 'syz.1.152': attribute type 1 has an invalid length. [ 117.354740][ T4319] usb 4-1: USB disconnect, device number 5 [ 117.597611][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.607405][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.655837][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.678673][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.700153][ T4965] device veth0_vlan entered promiscuous mode [ 117.718957][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.736240][ T4629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.761622][ T4965] device veth1_vlan entered promiscuous mode [ 118.246217][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.312099][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.445574][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.644069][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.719333][ T4965] device veth0_macvtap entered promiscuous mode [ 118.797557][ T4965] device veth1_macvtap entered promiscuous mode [ 118.881632][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.901995][ T4936] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.049483][ T5353] fuse: Bad value for 'fd' [ 120.045578][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.765059][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.462191][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.662426][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.767826][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.898204][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.952722][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.968028][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.034173][ T4965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.092791][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.110859][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.162903][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.183999][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.197928][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.227496][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.251166][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.272524][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.291340][ T4965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.352492][ T4965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.364021][ T4965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.377314][ T4965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.386177][ T4965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.394953][ T4965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.403792][ T4965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.458078][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.491743][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.300049][ T4465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.330610][ T4465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.442482][ T4929] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.456084][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.536896][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.570679][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.654452][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.672642][ T4929] usb 2-1: Using ep0 maxpacket: 32 [ 124.689808][ T4929] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 124.787866][ T4929] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 124.817023][ T4929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.853114][ T4929] usb 2-1: Product: syz [ 124.872936][ T4929] usb 2-1: Manufacturer: syz [ 124.877593][ T4929] usb 2-1: SerialNumber: syz [ 124.931318][ T5464] device syzkaller0 entered promiscuous mode [ 125.109726][ T4929] usb 2-1: selecting invalid altsetting 1 [ 125.198291][ T5483] loop3: detected capacity change from 0 to 256 [ 125.323835][ T4929] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 125.324710][ T4929] dvb_usb_lmedm04: probe of 2-1:2.0 failed with error -22 [ 125.896231][ T5496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.160011][ T5496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.243534][ T5544] fuse: Bad value for 'fd' [ 127.870697][ T5549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'. [ 127.890400][ T4929] usb 2-1: USB disconnect, device number 4 [ 128.020976][ T5553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 128.268609][ T5564] kvm: pic: non byte write [ 132.666088][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.672491][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.435862][ T5670] fuse: Bad value for 'user_id' [ 134.300479][ T5673] tipc: Started in network mode [ 134.347069][ T5673] tipc: Node identity 4ed7824b1258, cluster identity 4711 [ 134.354599][ T5673] tipc: Enabled bearer , priority 0 [ 134.372011][ T5663] tipc: Resetting bearer [ 134.395733][ T5663] tipc: Resetting bearer [ 136.427531][ T5699] "syz.4.196" (5699) uses obsolete ecb(arc4) skcipher [ 139.942192][ T5736] fuse: Bad value for 'user_id' [ 141.717838][ T5663] tipc: Disabling bearer [ 141.726201][ T4316] tipc: Node number set to 1552908875 [ 142.201097][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 142.542834][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 142.550810][ T7] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 142.610307][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.722333][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.890482][ T5762] bridge0: port 3(macvlan2) entered blocking state [ 143.965004][ T5762] bridge0: port 3(macvlan2) entered disabled state [ 143.977701][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.987736][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.000762][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 144.009863][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.033503][ T5762] device macvlan2 entered promiscuous mode [ 144.040434][ T5762] bridge0: port 3(macvlan2) entered blocking state [ 144.047466][ T5762] bridge0: port 3(macvlan2) entered forwarding state [ 144.075071][ T5762] Zero length message leads to an empty skb [ 144.265541][ T7] usb 1-1: usb_control_msg returned -32 [ 144.272023][ T7] usbtmc 1-1:16.0: can't read capabilities [ 144.626572][ T4317] usb 1-1: USB disconnect, device number 4 [ 144.636409][ T5746] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 144.805210][ T5771] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -19 [ 147.468759][ T5854] device syzkaller0 entered promiscuous mode [ 149.046692][ T5875] Illegal XDP return value 4294967294 on prog (id 9) dev syz_tun, expect packet loss! [ 152.001959][ T27] audit: type=1326 audit(1789682280.411:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.2.239" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cb819e159 code=0x0 [ 152.272739][ T27] audit: type=1326 audit(1789682280.541:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.2.239" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9cb819e159 code=0x0 [ 152.658511][ T5966] binder: BINDER_SET_CONTEXT_MGR already set [ 152.672553][ T5966] binder: 5965:5966 ioctl 4018620d 200000000140 returned -16 [ 155.833229][ T6024] binder_alloc: 6023: binder_alloc_buf, no vma [ 155.944946][ T6017] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 156.037863][ T27] audit: type=1800 audit(1789682284.461:4): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.247" name="dev" dev="configfs" ino=39046 res=0 errno=0 [ 156.334459][ T6035] fuse: Bad value for 'fd' [ 156.342875][ T4929] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.554516][ T4929] usb 2-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice= 1.00 [ 156.599858][ T4929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.610373][ T6032] netlink: 'syz.4.252': attribute type 4 has an invalid length. [ 156.646276][ T6032] netlink: 'syz.4.252': attribute type 7 has an invalid length. [ 157.077106][ T4929] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 157.546052][ T6043] trusted_key: encrypted_key: keylen parameter is missing [ 157.593192][ T4929] gspca_nw80x: reg_w err -110 [ 157.598082][ T4929] gspca_nw80x: Bad webcam type 6 for NW801 [ 157.663581][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'. [ 157.695251][ T6052] ======================================================= [ 157.695251][ T6052] WARNING: The mand mount option has been deprecated and [ 157.695251][ T6052] and is ignored by this kernel. Remove the mand [ 157.695251][ T6052] option from the mount to silence this warning. [ 157.695251][ T6052] ======================================================= [ 158.583526][ T7] usb 2-1: USB disconnect, device number 5 [ 159.012543][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 159.342628][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 159.521701][ T14] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 159.551788][ T14] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 159.568529][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.642556][ T6105] binder_alloc: 6104: binder_alloc_buf, no vma [ 159.652609][ T14] usb 1-1: Product: syz [ 159.656812][ T14] usb 1-1: Manufacturer: syz [ 159.803724][ T14] usb 1-1: SerialNumber: syz [ 160.032478][ T4318] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 160.108843][ T14] usb 1-1: selecting invalid altsetting 1 [ 160.257681][ T4318] usb 5-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 160.677356][ T6118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.779506][ T4318] usb 5-1: config 0 has no interfaces? [ 160.844558][ T6118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.956255][ T14] LME2510(C): Firmware Status: 09 03 47 4c ff 6a [ 160.956296][ T14] usb 1-1: dvb_usb_v2: found a 'DM04_LME2510C_DVB-S RS2000' in warm state [ 161.014983][ T4318] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 161.016342][ T14] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 161.078714][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 161.200527][ T4318] usb 5-1: Product: syz [ 161.234214][ T6117] xt_nfacct: accounting object `' does not exist [ 161.259394][ T4318] usb 5-1: config 0 descriptor?? [ 161.268358][ T14] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 162.061940][ T14] dvbdev: DVB: registering new adapter (DM04_LME2510C_DVB-S RS2000) [ 162.148778][ T6133] fuse: Bad value for 'fd' [ 162.906256][ T14] usb 1-1: media controller created [ 162.924960][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.933790][ T4318] usb 5-1: USB disconnect, device number 2 [ 164.325650][ T14] DVB: Unable to find symbol m88rs2000_attach() [ 164.332074][ T14] LME2510(C): DM04/QQBOX Not Powered up or not Supported [ 164.332114][ T14] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 164.382688][ T14] usb 1-1: USB disconnect, device number 5 [ 164.430396][ T6143] device syzkaller0 entered promiscuous mode [ 167.344185][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 167.357944][ T6148] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.367318][ T6148] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.376555][ T6148] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.385482][ T6148] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.443712][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 167.638143][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'. [ 169.594503][ T6209] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 175.884212][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 175.992937][ T6312] netlink: 16 bytes leftover after parsing attributes in process `syz.4.298'. [ 176.082416][ T26] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 176.297020][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 176.322178][ T26] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 176.347476][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.362196][ T26] usb 4-1: Product: syz [ 176.366690][ T26] usb 4-1: Manufacturer: syz [ 176.375942][ T26] usb 4-1: SerialNumber: syz [ 176.384115][ T26] usb 4-1: config 0 descriptor?? [ 176.418927][ T26] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 176.452433][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 176.647095][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.672271][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.710704][ T7] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 176.735449][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.769181][ T7] usb 1-1: config 0 descriptor?? [ 177.110516][ T6328] device syzkaller0 entered promiscuous mode [ 177.191851][ T7] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 177.208193][ T7] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 177.222472][ T7] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 177.229922][ T7] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 177.272910][ T7] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 177.295447][ T7] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 177.505089][ T6330] device syzkaller0 entered promiscuous mode [ 177.606343][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.618848][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.673382][ T7] playstation 0003:054C:0DF2.0001: Invalid reportID received, expected 9 got 104 [ 177.692455][ T7] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -22 [ 177.701740][ T7] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 177.739263][ T6325] syz.2.304 (6325): drop_caches: 2 [ 177.755238][ T7] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 177.778079][ T7] playstation: probe of 0003:054C:0DF2.0001 failed with error -22 [ 177.906658][ T4317] usb 1-1: USB disconnect, device number 6 [ 177.941185][ T6335] fido_id[6335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 178.605472][ T6344] futex_wake_op: syz.2.309 tries to shift op by 144; fix this program [ 179.653601][ T26] gspca_sonixj: reg_w err -110 [ 179.658468][ T26] sonixj: probe of 4-1:0.0 failed with error -110 [ 180.933379][ T6368] fuse: Unknown parameter 'use00000000000000000000' [ 181.137130][ T4317] usb 4-1: USB disconnect, device number 6 [ 184.141358][ T6414] netlink: 'syz.3.326': attribute type 11 has an invalid length. [ 184.751779][ T6419] 8250_pericom: probe of 0000:00:00.0 failed with error -12 [ 185.313221][ T6425] comedi comedi0: aio_aio12_8: I/O port conflict (0x59,32) [ 186.587692][ T6433] fuse: Unknown parameter 'user_i00000000000000000000' [ 191.062447][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 191.069605][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 191.070111][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 191.677917][ T6454] device syzkaller0 entered promiscuous mode [ 191.802627][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 192.002095][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.032744][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.058821][ T7] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 192.083735][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.106066][ T7] usb 3-1: config 0 descriptor?? [ 192.975051][ T7] hid-led 0003:1D34:000A.0002: item fetching failed at offset 0/3 [ 193.003522][ T7] hid-led: probe of 0003:1D34:000A.0002 failed with error -22 [ 193.206855][ T7] usb 3-1: USB disconnect, device number 2 [ 193.403122][ T26] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 193.606070][ T26] usb 2-1: unable to get BOS descriptor or descriptor too short [ 193.641578][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.657749][ T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.299541][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.305971][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.341615][ T26] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 194.361188][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.409037][ T26] usb 2-1: Product: syz [ 194.422571][ T26] usb 2-1: Manufacturer: syz [ 194.429214][ T26] usb 2-1: SerialNumber: syz [ 194.480165][ T26] usb 2-1: selecting invalid altsetting 1 [ 194.486251][ T26] usb 2-1: unit 6 not found! [ 195.465096][ T26] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 195.527866][ T26] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 195.555062][ T26] usb 2-1: USB disconnect, device number 6 [ 195.570255][ T6448] udevd[6448]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.201908][ T6511] fuse: Unknown parameter 'user_i00000000000000000000' [ 203.685638][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.694101][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.980216][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.008915][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.279110][ T6488] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.288140][ T6488] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.297378][ T6488] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.306358][ T6488] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.392096][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 204.426755][ T6526] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.883925][ T6599] block device autoloading is deprecated and will be removed. [ 209.708636][ T6623] device syzkaller0 entered promiscuous mode [ 210.172447][ T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 210.432973][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 210.473102][ T22] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 210.563172][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.890787][ T22] pvrusb2: Hardware description: Terratec Grabster AV400 [ 211.034598][ T22] pvrusb2: ********** [ 211.042680][ T22] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 211.065809][ T22] pvrusb2: Important functionality might not be entirely working. [ 211.158269][ T22] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 211.189796][ T22] pvrusb2: ********** [ 211.198727][ T2312] pvrusb2: Invalid write control endpoint [ 211.219789][ T6638] ftl_cs: FTL header not found. [ 211.291381][ T6648] fuse: Bad value for 'fd' [ 211.671003][ T6638] block2mtd: mtd1: [/dev/ram0] erase_size = 128KiB [131072] [ 211.784645][ T6631] pvrusb2: Invalid write control endpoint [ 212.579099][ T22] usb 5-1: USB disconnect, device number 3 [ 212.778489][ T2312] pvrusb2: Invalid write control endpoint [ 212.784560][ T2312] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 212.794178][ T2312] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 212.804149][ T2312] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 212.818029][ T2312] pvrusb2: Device being rendered inoperable [ 212.835330][ T2312] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 212.860545][ T2312] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 212.896990][ T2312] pvrusb2: Attached sub-driver cx25840 [ 212.919422][ T2312] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 212.948965][ T2312] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 213.053607][ T6668] syz.1.383: attempt to access beyond end of device [ 213.053607][ T6668] loop0: rw=524800, sector=0, nr_sectors = 32 limit=0 [ 213.083247][ T6668] device-mapper: multipath: 248:0: Failing path 7:0. [ 213.106038][ T6668] Buffer I/O error on dev dm-0, logical block 0, async page read [ 213.446371][ T6690] file system registered [ 213.488644][ T6690] ffs_data_put(): freeing [ 213.567339][ T4271] ffs_data_put(): freeing [ 213.631278][ T6697] EXT4-fs warning (device sda1): verify_group_input:175: Bad blocks count 0 [ 217.511161][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'. [ 217.541808][ T26] kworker/1:1: attempt to access beyond end of device [ 217.541808][ T26] loop0: rw=512, sector=0, nr_sectors = 8 limit=0 [ 217.557541][ T26] device-mapper: multipath: 248:0: Failing path 7:0. [ 217.566227][ T26] Buffer I/O error on dev dm-0, logical block 0, async page read [ 217.606172][ T6774] device batadv0 entered promiscuous mode [ 217.728554][ T6774] device macvtap1 entered promiscuous mode [ 217.742576][ T6537] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 217.975188][ T6774] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 218.044261][ T6537] usb 1-1: Using ep0 maxpacket: 16 [ 218.085058][ T6537] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.194746][ T6537] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.213056][ T6774] device batadv0 left promiscuous mode [ 218.238828][ T6537] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.250447][ T6537] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.263570][ T6537] usb 1-1: Product: syz [ 218.269994][ T6537] usb 1-1: Manufacturer: syz [ 218.277027][ T6537] usb 1-1: SerialNumber: syz [ 218.442188][ T6781] fuse: Bad value for 'rootmode' [ 218.551095][ T6537] usb 1-1: 0:2 : does not exist [ 219.113932][ T6537] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 219.136864][ T6537] usb 1-1: USB disconnect, device number 7 [ 219.439299][ T6786] overlayfs: missing 'workdir' [ 219.606765][ T6520] udevd[6520]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.046586][ T6807] xt_nfacct: accounting object `' does not exist [ 223.561799][ T6820] tmpfs: Unknown parameter 'quota' [ 225.659602][ T6830] fuse: Unknown parameter 'use00000000000000000000' [ 226.902445][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 227.150696][ T6832] netlink: 'syz.2.418': attribute type 13 has an invalid length. [ 227.329264][ T6832] eql: refused to change device tx_queue_len [ 227.342444][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 227.383285][ T6832] A link change request failed with some changes committed already. Interface eql may have been left with an inconsistent configuration, please check. [ 228.221579][ T4318] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 228.467995][ T4318] usb 3-1: unable to get BOS descriptor or descriptor too short [ 228.541475][ T4318] usb 3-1: not running at top speed; connect to a high speed hub [ 228.618552][ T4318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 228.698812][ T4318] usb 3-1: New USB device found, idVendor=0e41, idProduct=4141, bcdDevice= 0.40 [ 228.747787][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.763346][ T4318] usb 3-1: Product: syz [ 228.768439][ T4318] usb 3-1: Manufacturer: syz [ 228.782655][ T4318] usb 3-1: SerialNumber: syz [ 228.940906][ T6837] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 229.517391][ T4318] usb 3-1: USB disconnect, device number 3 [ 229.949746][ T6852] udevd[6852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.806090][ T6865] i2c i2c-0: new_device: Extra parameters [ 230.889082][ T6865] tcpci: probe of 0-0002 failed with error -5 [ 230.905609][ T6865] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 231.020228][ T6876] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 231.055699][ T6879] xt_nfacct: accounting object `' does not exist [ 232.081745][ T6898] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 0, id = 0 [ 232.207434][ T6897] IPVS: stopping master sync thread 6898 ... [ 235.454888][ T6934] input: syz1 as /devices/virtual/input/input5 [ 238.442838][ T6955] ubi0: attaching mtd0 [ 238.459601][ T6955] ubi0: scanning is finished [ 238.464432][ T6955] ubi0: empty MTD device detected [ 239.108724][ T6955] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 241.227045][ T7] hid-generic 0008:046D:C082.0003: hidraw0: HID v0.04 Device [syz0] on syz0 [ 241.381037][ T6970] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 241.564774][ T6976] fido_id[6976]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 247.913103][ T7012] device syzkaller0 entered promiscuous mode [ 249.330697][ T7029] fuse: Unknown parameter '0xffffffffffffffff' [ 250.608830][ T7040] gadgetfs: bound to dummy_udc driver [ 250.892492][ T6536] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 252.149001][ C0] gadgetfs: connected [ 252.168528][ T6536] gadgetfs: disconnected [ 252.191667][ T7039] device lo entered promiscuous mode [ 252.317658][ T7039] device tunl0 entered promiscuous mode [ 252.484032][ T7049] FAULT_INJECTION: forcing a failure. [ 252.484032][ T7049] name failslab, interval 1, probability 0, space 0, times 0 [ 252.497399][ T7049] CPU: 1 PID: 7049 Comm: syz.3.470 Not tainted syzkaller #0 [ 252.504718][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.514809][ T7049] Call Trace: [ 252.518121][ T7049] [ 252.521065][ T7049] dump_stack_lvl+0x188/0x24e [ 252.525762][ T7049] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 252.531425][ T7049] ? show_regs_print_info+0x12/0x12 [ 252.536651][ T7049] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 252.542322][ T7049] should_fail_ex+0x390/0x4c0 [ 252.547033][ T7049] should_failslab+0x5/0x20 [ 252.551574][ T7049] slab_pre_alloc_hook+0x59/0x300 [ 252.556631][ T7049] kmem_cache_alloc+0x56/0x2f0 [ 252.561422][ T7049] ? zswap_frontswap_store+0x414/0x1680 [ 252.566996][ T7049] zswap_frontswap_store+0x414/0x1680 [ 252.572404][ T7049] ? zswap_frontswap_init+0x100/0x100 [ 252.577805][ T7049] ? __lock_acquire+0x7c40/0x7c40 [ 252.582867][ T7049] ? do_raw_spin_lock+0x128/0x2f0 [ 252.587924][ T7049] ? __rwlock_init+0x140/0x140 [ 252.592713][ T7049] ? do_raw_spin_unlock+0x11d/0x230 [ 252.597940][ T7049] __frontswap_store+0x2d9/0x5b0 [ 252.602918][ T7049] swap_writepage+0xc8/0x1a0 [ 252.607539][ T7049] shrink_folio_list+0x2f81/0x8050 [ 252.612702][ T7049] ? reclaim_clean_pages_from_list+0xb80/0xb80 [ 252.618892][ T7049] ? mark_lock+0x94/0x320 [ 252.623252][ T7049] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 252.629266][ T7049] ? finish_task_switch+0x262/0x8e0 [ 252.634492][ T7049] ? lockdep_hardirqs_on+0x94/0x140 [ 252.639736][ T7049] ? finish_task_switch+0x262/0x8e0 [ 252.644967][ T7049] ? __schedule+0x1087/0x4030 [ 252.649677][ T7049] reclaim_folio_list+0x85/0x2e0 [ 252.654663][ T7049] reclaim_pages+0x575/0x690 [ 252.659291][ T7049] ? folio_isolate_lru+0xf10/0xf10 [ 252.664517][ T7049] ? preempt_schedule_thunk+0x16/0x18 [ 252.669926][ T7049] madvise_cold_or_pageout_pte_range+0x1936/0x1f30 [ 252.676523][ T7049] ? folio_put+0xd0/0xd0 [ 252.680815][ T7049] walk_pgd_range+0xb28/0x1370 [ 252.685632][ T7049] __walk_page_range+0x136/0x590 [ 252.690603][ T7049] walk_page_range+0x3b9/0x590 [ 252.695399][ T7049] ? page_mapped_in_vma+0x800/0x800 [ 252.700623][ T7049] ? mlock_page_drain_local+0x75/0x490 [ 252.706109][ T7049] ? mlock_page_drain_local+0x75/0x490 [ 252.711597][ T7049] do_madvise+0x1cb1/0x3520 [ 252.716130][ T7049] ? plist_add+0x3d7/0x490 [ 252.720572][ T7049] ? madvise_set_anon_name+0x420/0x420 [ 252.726058][ T7049] ? schedule+0xd0/0x180 [ 252.730317][ T7049] ? futex_wait_queue+0x23/0x1b0 [ 252.735274][ T7049] ? futex_wait_queue+0x134/0x1b0 [ 252.740316][ T7049] ? futex_unqueue+0xc7/0xf0 [ 252.744926][ T7049] ? futex_wait+0x4a3/0x5c0 [ 252.749451][ T7049] ? futex_wait_setup+0x270/0x270 [ 252.754510][ T7049] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 252.760514][ T7049] ? preempt_schedule_notrace+0x120/0x120 [ 252.766259][ T7049] ? do_futex+0x310/0x320 [ 252.770608][ T7049] ? __ia32_sys_get_robust_list+0x100/0x100 [ 252.776534][ T7049] ? lock_chain_count+0x20/0x20 [ 252.781413][ T7049] __x64_sys_madvise+0xa2/0xb0 [ 252.786202][ T7049] do_syscall_64+0x4c/0xa0 [ 252.790634][ T7049] ? clear_bhb_loop+0x60/0xb0 [ 252.795326][ T7049] ? clear_bhb_loop+0x60/0xb0 [ 252.800111][ T7049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.806064][ T7049] RIP: 0033:0x7f5165d9e159 [ 252.810506][ T7049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.830133][ T7049] RSP: 002b:00007f5166ca9028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 252.838592][ T7049] RAX: ffffffffffffffda RBX: 00007f5166026090 RCX: 00007f5165d9e159 [ 252.846587][ T7049] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 252.854579][ T7049] RBP: 00007f5165e3506b R08: 0000000000000000 R09: 0000000000000000 [ 252.862568][ T7049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.870553][ T7049] R13: 00007f5166026128 R14: 00007f5166026090 R15: 00007ffee84bca78 [ 252.878557][ T7049] [ 253.258610][ T7039] device gre0 entered promiscuous mode [ 253.660750][ T7055] binder: BINDER_SET_CONTEXT_MGR already set [ 253.676996][ T7055] binder: 7054:7055 ioctl 4018620d 200000000040 returned -16 [ 253.688532][ T7039] device gretap0 entered promiscuous mode [ 253.730375][ T7039] device erspan0 entered promiscuous mode [ 253.761104][ T7039] device ip_vti0 entered promiscuous mode [ 253.786229][ T7039] device ip6_vti0 entered promiscuous mode [ 253.825221][ T7039] device sit0 entered promiscuous mode [ 253.887879][ T7039] device ip6tnl0 entered promiscuous mode [ 253.919839][ T7039] device ip6gre0 entered promiscuous mode [ 253.957620][ T7039] device syz_tun entered promiscuous mode [ 253.983069][ T6967] x86/PAT: syz.2.452:6967 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 253.995683][ T7039] device ip6gretap0 entered promiscuous mode [ 254.035465][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.043951][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.070714][ T7039] device bridge0 entered promiscuous mode [ 254.147933][ T7039] device vcan0 entered promiscuous mode [ 254.187686][ T7039] device bond0 entered promiscuous mode [ 254.195725][ T7039] device bond_slave_0 entered promiscuous mode [ 254.216522][ T7039] device bond_slave_1 entered promiscuous mode [ 254.259918][ T7039] device team0 entered promiscuous mode [ 254.267051][ T7039] device team_slave_0 entered promiscuous mode [ 254.280764][ T7039] device team_slave_1 entered promiscuous mode [ 254.324509][ T7039] device dummy0 entered promiscuous mode [ 254.360285][ T7039] device nlmon0 entered promiscuous mode [ 254.377590][ T7039] device caif0 entered promiscuous mode [ 254.399534][ T7039] device batadv0 entered promiscuous mode [ 254.436958][ T7039] device veth0 entered promiscuous mode [ 254.488426][ T7039] device veth1 entered promiscuous mode [ 254.533946][ T7039] device wg0 entered promiscuous mode [ 254.600879][ T7039] device wg1 entered promiscuous mode [ 254.630477][ T7039] device wg2 entered promiscuous mode [ 254.673907][ T7039] device veth0_to_bridge entered promiscuous mode [ 254.733017][ T7039] device veth1_to_bridge entered promiscuous mode [ 254.814822][ T7039] device veth0_to_bond entered promiscuous mode [ 254.880049][ T7058] syz.3.472 (7058): drop_caches: 2 [ 254.903504][ T7039] device veth1_to_bond entered promiscuous mode [ 254.971830][ T7039] device veth0_to_team entered promiscuous mode [ 255.069907][ T7039] device veth1_to_team entered promiscuous mode [ 255.129750][ T7039] device veth0_to_batadv entered promiscuous mode [ 255.163740][ T7039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.181971][ T7039] device batadv_slave_0 entered promiscuous mode [ 255.218564][ T7039] device veth1_to_batadv entered promiscuous mode [ 255.238975][ T7039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.257509][ T7039] device batadv_slave_1 entered promiscuous mode [ 255.291223][ T7039] device xfrm0 entered promiscuous mode [ 255.330432][ T7039] device veth0_to_hsr entered promiscuous mode [ 255.393240][ T7039] device veth1_to_hsr entered promiscuous mode [ 255.451075][ T7039] device hsr0 entered promiscuous mode [ 255.491601][ T7039] device veth1_virt_wifi entered promiscuous mode [ 255.528252][ T7039] device veth0_virt_wifi entered promiscuous mode [ 255.545156][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.551515][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.571599][ T7039] device virt_wifi0 entered promiscuous mode [ 255.683953][ T7039] device vlan0 entered promiscuous mode [ 255.689773][ T7039] device vlan1 entered promiscuous mode [ 255.753326][ T7039] device macvlan0 entered promiscuous mode [ 255.792805][ T7039] device macvlan1 entered promiscuous mode [ 255.829209][ T7039] device ipvlan0 entered promiscuous mode [ 255.852685][ T7039] device ipvlan1 entered promiscuous mode [ 255.895580][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.907029][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.920676][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.931350][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.938661][ T7039] device macvtap0 entered promiscuous mode [ 255.945349][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 255.953522][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.982633][ T7039] device macsec0 entered promiscuous mode [ 256.041179][ T7039] device geneve0 entered promiscuous mode [ 256.071251][ T7039] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.083395][ T7039] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.096611][ T7039] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.106921][ T7039] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.120286][ T7039] device geneve1 entered promiscuous mode [ 256.157066][ T7039] device netdevsim0 entered promiscuous mode [ 256.188167][ T7039] device netdevsim1 entered promiscuous mode [ 256.210682][ T7039] device netdevsim2 entered promiscuous mode [ 256.234650][ T7039] device netdevsim3 entered promiscuous mode [ 256.275792][ T7039] device wlan0 entered promiscuous mode [ 256.312723][ T7039] device wlan1 entered promiscuous mode [ 256.816720][ T7076] syz.3.478 (7076): /proc/7074/oom_adj is deprecated, please use /proc/7074/oom_score_adj instead. [ 257.613394][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 258.043609][ T4288] Bluetooth: hci5: command 0x0409 tx timeout [ 259.635857][ T4712] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.926183][ T4712] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.105539][ T4712] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.112497][ T4288] Bluetooth: hci5: command 0x041b tx timeout [ 260.828508][ T7116] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 260.932596][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 262.192434][ T4288] Bluetooth: hci5: command 0x040f tx timeout [ 262.278598][ T26] usb 5-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.345497][ T26] usb 5-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 262.477031][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 262.542928][ T26] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 262.609548][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.700892][ T26] usb 5-1: config 0 descriptor?? [ 262.751497][ T4712] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.841141][ T7071] chnl_net:caif_netlink_parms(): no params data found [ 262.926138][ T7118] nvmet_tcp: malformed ip/port passed: : [ 263.115994][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.490'. [ 263.151643][ T26] aquacomputer_d5next 0003:0C70:F011.0004: hidraw0: USB HID v80.00 Joystick [HID 0c70:f011] on usb-dummy_hcd.4-1/input0 [ 263.226102][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.257238][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.323940][ T7071] device bridge_slave_0 entered promiscuous mode [ 263.434335][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.441467][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.549860][ T7071] device bridge_slave_1 entered promiscuous mode [ 263.775765][ T7144] Cannot find add_set index 0 as target [ 263.851943][ T7] usb 5-1: USB disconnect, device number 4 [ 264.262377][ T4288] Bluetooth: hci5: command 0x0419 tx timeout [ 264.733509][ T7136] fido_id[7136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 264.779310][ T7071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.820399][ T4712] tipc: Left network mode [ 264.879941][ T7071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.988752][ T7071] team0: Port device team_slave_0 added [ 265.076561][ T7071] team0: Port device team_slave_1 added [ 265.995276][ T7155] device syzkaller0 entered promiscuous mode [ 266.011186][ T7071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.036527][ T7071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.129179][ T7071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.258314][ T7071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.272025][ T7071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.308050][ T7071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.456429][ T7071] device hsr_slave_0 entered promiscuous mode [ 267.547447][ T7071] device hsr_slave_1 entered promiscuous mode [ 267.565580][ T7071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.597012][ T7071] Cannot create hsr debugfs directory [ 268.381014][ T7193] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 271.423153][ T22] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 271.643799][ T22] usb 2-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.715455][ T22] usb 2-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 271.905011][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 271.911688][ T22] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 271.992573][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.018212][ T22] usb 2-1: config 0 descriptor?? [ 273.033273][ T22] aquacomputer_d5next 0003:0C70:F011.0005: hidraw0: USB HID v80.00 Joystick [HID 0c70:f011] on usb-dummy_hcd.1-1/input0 [ 273.041301][ T7210] netlink: 'syz.4.504': attribute type 2 has an invalid length. [ 273.224163][ T22] usb 2-1: USB disconnect, device number 7 [ 274.073415][ T4712] device hsr_slave_0 left promiscuous mode [ 274.242633][ T4712] device hsr_slave_1 left promiscuous mode [ 274.423384][ T4712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.558494][ T4712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.863720][ T7282] fuse: Unknown parameter '0x0000000000000009' [ 275.919171][ T4712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.062607][ T4712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.083074][ T4712] device bridge_slave_1 left promiscuous mode [ 276.089363][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.207625][ T4712] device bridge_slave_0 left promiscuous mode [ 276.221532][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.246017][ T7277] fido_id[7277]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 276.271549][ T7289] syz.3.515: attempt to access beyond end of device [ 276.271549][ T7289] loop0: rw=524800, sector=0, nr_sectors = 32 limit=0 [ 276.296264][ T7289] device-mapper: multipath: 248:0: Failing path 7:0. [ 276.319525][ T7289] Buffer I/O error on dev dm-0, logical block 0, async page read [ 276.397348][ T4712] device veth1_macvtap left promiscuous mode [ 276.415362][ T4712] device veth0_macvtap left promiscuous mode [ 276.445364][ T4712] device veth1_vlan left promiscuous mode [ 276.462265][ T4712] device veth0_vlan left promiscuous mode [ 281.234523][ T7357] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 282.989969][ T4318] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 283.157885][ T4712] team0 (unregistering): Port device team_slave_1 removed [ 283.183714][ T4318] usb 1-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.207058][ T4318] usb 1-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 283.240810][ T4318] usb 1-1: config 0 interface 0 has no altsetting 0 [ 283.252518][ T4318] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 283.261603][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.287291][ T4318] usb 1-1: config 0 descriptor?? [ 283.360988][ T4712] team0 (unregistering): Port device team_slave_0 removed [ 283.426108][ T4712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.498297][ T4712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.730603][ T4318] aquacomputer_d5next 0003:0C70:F011.0006: hidraw0: USB HID v80.00 Joystick [HID 0c70:f011] on usb-dummy_hcd.0-1/input0 [ 284.115762][ T4712] bond0 (unregistering): Released all slaves [ 284.331516][ T7376] device syzkaller0 entered promiscuous mode [ 284.350547][ T7071] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 284.437460][ T7071] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 284.452245][ T7389] fuse: Unknown parameter 'fd0x0000000000000009' [ 284.460218][ T6535] usb 1-1: USB disconnect, device number 9 [ 285.630821][ T7071] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 287.548632][ T7410] fuse: Bad value for 'fd' [ 288.452191][ T7412] input: syz1 as /devices/virtual/input/input6 [ 290.154385][ T7426] FAULT_INJECTION: forcing a failure. [ 290.154385][ T7426] name failslab, interval 1, probability 0, space 0, times 0 [ 290.168277][ T7426] CPU: 0 PID: 7426 Comm: syz.4.538 Not tainted syzkaller #0 [ 290.175595][ T7426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.185668][ T7426] Call Trace: [ 290.188957][ T7426] [ 290.191896][ T7426] dump_stack_lvl+0x188/0x24e [ 290.196595][ T7426] ? show_regs_print_info+0x12/0x12 [ 290.201807][ T7426] ? load_image+0x410/0x410 [ 290.206335][ T7426] ? __might_sleep+0xd0/0xd0 [ 290.210921][ T7426] ? __lock_acquire+0x7c40/0x7c40 [ 290.215948][ T7426] should_fail_ex+0x390/0x4c0 [ 290.220625][ T7426] should_failslab+0x5/0x20 [ 290.225118][ T7426] slab_pre_alloc_hook+0x59/0x300 [ 290.230155][ T7426] ? kvmalloc_node+0x6c/0x180 [ 290.234831][ T7426] __kmem_cache_alloc_node+0x4f/0x270 [ 290.240199][ T7426] ? kvmalloc_node+0x6c/0x180 [ 290.244873][ T7426] __kmalloc_node+0xa2/0x240 [ 290.249465][ T7426] kvmalloc_node+0x6c/0x180 [ 290.253971][ T7426] ceph_msg_new2+0x15e/0x490 [ 290.258573][ T7426] ceph_monc_init+0x607/0xa60 [ 290.263253][ T7426] ceph_create_client+0x221/0x300 [ 290.268274][ T7426] ceph_get_tree+0x1c1/0x1350 [ 290.272961][ T7426] ? bpf_lsm_capable+0x5/0x10 [ 290.277640][ T7426] ? security_capable+0x85/0xb0 [ 290.282490][ T7426] vfs_get_tree+0x88/0x270 [ 290.286915][ T7426] vfs_fsconfig_locked+0x22f/0x400 [ 290.292027][ T7426] __se_sys_fsconfig+0x69e/0x7e0 [ 290.296971][ T7426] ? __x64_sys_fsconfig+0xc0/0xc0 [ 290.301999][ T7426] ? lockdep_hardirqs_on+0x94/0x140 [ 290.307193][ T7426] ? __x64_sys_fsconfig+0x1c/0xc0 [ 290.312216][ T7426] do_syscall_64+0x4c/0xa0 [ 290.316637][ T7426] ? clear_bhb_loop+0x60/0xb0 [ 290.321566][ T7426] ? clear_bhb_loop+0x60/0xb0 [ 290.326240][ T7426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.332134][ T7426] RIP: 0033:0x7f7279b9e159 [ 290.336547][ T7426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.356148][ T7426] RSP: 002b:00007f727aa8a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 290.364556][ T7426] RAX: ffffffffffffffda RBX: 00007f7279e25fa0 RCX: 00007f7279b9e159 [ 290.372519][ T7426] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 290.380568][ T7426] RBP: 00007f7279c3506b R08: 0000000000000000 R09: 0000000000000000 [ 290.388532][ T7426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.396490][ T7426] R13: 00007f7279e26038 R14: 00007f7279e25fa0 R15: 00007ffe8178d6a8 [ 290.404461][ T7426] [ 293.428990][ T7479] nvmet: adding nsid 1 to subsystem testnqn [ 293.447728][ T7479] nvmet: failed to open block device (null): (-22) [ 293.451603][ T27] audit: type=1800 audit(1789682421.871:5): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.542" name="enable" dev="configfs" ino=42954 res=0 errno=0 [ 293.459644][ T7479] nvmet_tcp: malformed ip/port passed: : [ 293.481994][ T27] audit: type=1800 audit(1789682421.881:6): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.542" name="addr_trsvcid" dev="configfs" ino=42955 res=0 errno=0 [ 294.605745][ T7493] fuse: Bad value for 'fd' [ 296.165726][ T7071] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 299.102645][ T7] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 299.122012][ T7071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.268831][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.319645][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.330604][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.377820][ T7] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 299.421242][ T7071] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.500068][ T7] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 299.511028][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.526137][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.538787][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.545993][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.550256][ T7] usb 4-1: Product: syz [ 299.554723][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.607195][ T7] usb 4-1: Manufacturer: syz [ 299.613154][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.621873][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.691714][ T7] usb 4-1: Found UVC 1.00 device syz (225a:e1d4) [ 299.704094][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.711222][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.719253][ T7] usb 4-1: No streaming interface found for terminal 2. [ 299.991819][ T7] usb 4-1: USB disconnect, device number 7 [ 300.157278][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.212123][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.231488][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.248720][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.258724][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.270151][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.293567][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.307932][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.319142][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.332440][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.341917][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.451036][ T7071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 302.298511][ T7560] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 304.895932][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.961539][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.160857][ T7071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.772510][ T7626] xt_nfacct: accounting object `' does not exist [ 308.629021][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 308.648451][ T4938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.720837][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.753538][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.765007][ T7071] device veth0_vlan entered promiscuous mode [ 308.790561][ T7071] device veth1_vlan entered promiscuous mode [ 308.816341][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.833063][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.843433][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 308.889932][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 308.913957][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.922998][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.946158][ T7071] device veth0_macvtap entered promiscuous mode [ 308.964934][ T7071] device veth1_macvtap entered promiscuous mode [ 308.986095][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.996895][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.012953][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.028146][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.044133][ T7071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.051814][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 309.066000][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 309.081096][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 309.097800][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 309.110088][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.122476][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.132346][ T7071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.143329][ T7071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.156746][ T7071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.172727][ T7071] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.181455][ T7071] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.209323][ T7071] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.222341][ T7071] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.234660][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 309.245821][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 309.320312][ T4727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.340639][ T4727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.353433][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 309.377354][ T4712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.387170][ T4712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.396534][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 310.954416][ T7677] device syzkaller0 entered promiscuous mode [ 312.255553][ T27] audit: type=1800 audit(1789682440.681:7): pid=7698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.569" name=08 dev="sda1" ino=2053 res=0 errno=0 [ 316.640344][ T7758] overlayfs: failed to resolve './bus': -2 [ 317.023233][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.029886][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.774034][ T4288] Bluetooth: hci5: link tx timeout [ 318.779555][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.789317][ T4288] Bluetooth: hci5: link tx timeout [ 318.794472][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.802638][ T4288] Bluetooth: hci5: link tx timeout [ 318.807755][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.830092][ T4288] Bluetooth: hci5: link tx timeout [ 318.847292][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.863730][ T4288] Bluetooth: hci5: link tx timeout [ 318.868957][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.877949][ T4288] Bluetooth: hci5: link tx timeout [ 318.883345][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.892746][ T4288] Bluetooth: hci5: link tx timeout [ 318.897975][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.908410][ T4288] Bluetooth: hci5: link tx timeout [ 318.913987][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.921941][ T4288] Bluetooth: hci5: link tx timeout [ 318.928178][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.936400][ T4288] Bluetooth: hci5: link tx timeout [ 318.941835][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.950917][ T4288] Bluetooth: hci5: link tx timeout [ 318.956543][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.964990][ T4288] Bluetooth: hci5: link tx timeout [ 318.970470][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.989517][ T4288] Bluetooth: hci5: link tx timeout [ 318.995347][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.005225][ T4288] Bluetooth: hci5: link tx timeout [ 319.010496][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.018685][ T4288] Bluetooth: hci5: link tx timeout [ 319.024700][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.037326][ T4288] Bluetooth: hci5: link tx timeout [ 319.043218][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.051596][ T4288] Bluetooth: hci5: link tx timeout [ 319.057324][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.066047][ T4288] Bluetooth: hci5: link tx timeout [ 319.071673][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.080010][ T4288] Bluetooth: hci5: link tx timeout [ 319.085970][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.098652][ T4288] Bluetooth: hci5: link tx timeout [ 319.104514][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.113500][ T4288] Bluetooth: hci5: link tx timeout [ 319.119088][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.127755][ T4288] Bluetooth: hci5: link tx timeout [ 319.137887][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.146831][ T4288] Bluetooth: hci5: link tx timeout [ 319.152762][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.160856][ T4288] Bluetooth: hci5: link tx timeout [ 319.166966][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.175232][ T4288] Bluetooth: hci5: link tx timeout [ 319.180817][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.189668][ T4288] Bluetooth: hci5: link tx timeout [ 319.195312][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.206342][ T4288] Bluetooth: hci5: link tx timeout [ 319.212196][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.220984][ T4288] Bluetooth: hci5: link tx timeout [ 319.227153][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.238713][ T4288] Bluetooth: hci5: link tx timeout [ 319.244675][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.253654][ T4288] Bluetooth: hci5: link tx timeout [ 319.259357][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.268696][ T4288] Bluetooth: hci5: link tx timeout [ 319.274473][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.285228][ T4288] Bluetooth: hci5: link tx timeout [ 319.290447][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.298808][ T4288] Bluetooth: hci5: link tx timeout [ 319.304240][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.312989][ T4288] Bluetooth: hci5: link tx timeout [ 319.318515][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.326879][ T4288] Bluetooth: hci5: link tx timeout [ 319.333770][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.347927][ T4288] Bluetooth: hci5: link tx timeout [ 319.354060][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.362126][ T4288] Bluetooth: hci5: link tx timeout [ 319.367945][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.376453][ T4288] Bluetooth: hci5: link tx timeout [ 319.381936][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.390279][ T4288] Bluetooth: hci5: link tx timeout [ 319.396155][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 319.405843][ T4288] Bluetooth: hci5: link tx timeout [ 319.411314][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 321.012595][ T4288] Bluetooth: hci5: command 0x0406 tx timeout [ 326.971963][ T7798] syz.4.591 (7798) used greatest stack depth: 20368 bytes left [ 327.342319][ T27] audit: type=1804 audit(1789682455.761:8): pid=7802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.593" name="bus" dev="ramfs" ino=43990 res=1 errno=0 [ 328.367638][ T27] audit: type=1804 audit(1789682456.621:9): pid=7802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.593" name="bus" dev="ramfs" ino=43990 res=1 errno=0 [ 329.729829][ T7843] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4271] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7843] [ 329.770896][ T4288] Bluetooth: hci5: link tx timeout [ 329.776209][ T4288] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 332.205555][ T7868] binder_alloc: 7867: binder_alloc_buf, no vma [ 332.391568][ T7870] Bluetooth: MGMT ver 1.22 [ 333.904311][ T7873] kvm [7872]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800100000080 [ 342.089713][ T7934] netlink: 224 bytes leftover after parsing attributes in process `syz.4.619'. [ 345.402808][ T7950] device syzkaller0 entered promiscuous mode [ 345.698783][ T7955] gadgetfs: bound to dummy_udc driver [ 346.642810][ T7956] gadgetfs: suspended from state 2 [ 346.777065][ T6537] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 347.344148][ T7971] xt_nfacct: accounting object `' does not exist [ 348.518838][ T7979] device syzkaller0 entered promiscuous mode [ 349.150636][ T7989] ubi0: attaching mtd0 [ 349.155330][ T7989] ubi0: scanning is finished [ 349.190587][ T7989] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 349.198233][ T7989] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 349.205573][ T7989] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 349.212592][ T7989] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 349.219951][ T7989] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 349.226737][ T7989] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 349.234736][ T7989] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3457288677 [ 349.245066][ T7989] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 349.261639][ T7992] ubi0: background thread "ubi_bgt0d" started, PID 7992 [ 351.817991][ T8006] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 352.157122][ T8006] kvm: pic: non byte read [ 352.208118][ T8006] kvm: pic: level sensitive irq not supported [ 352.208237][ T8006] kvm: pic: non byte read [ 352.271384][ T8006] kvm: pic: level sensitive irq not supported [ 352.271450][ T8006] kvm: pic: non byte read [ 352.308060][ T8006] kvm: pic: level sensitive irq not supported [ 352.308143][ T8006] kvm: pic: non byte read [ 354.596457][ T8025] xt_hashlimit: max too large, truncated to 1048576 [ 354.603562][ T8025] xt_hashlimit: overflow, try lower: 18446744073709551612/8 [ 357.277546][ T8042] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[8043] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8042] [ 360.042466][ T6537] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 360.854240][ T6537] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.887766][ T6537] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 360.910643][ T6537] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.959625][ T6537] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 360.978418][ T6537] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 360.993222][ T6537] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 361.011641][ T6537] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 361.020251][ T6537] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 361.046974][ T6537] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 361.060145][ T6537] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 361.071098][ T6537] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 361.099391][ T6537] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 361.838296][ T7] usb 4-1: USB disconnect, device number 8 [ 361.879067][ T7] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 362.100737][ T7] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 362.263617][ T7] keyspan 4-1:1.0: device disconnected [ 363.941374][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.649'. [ 368.801712][ T8126] tipc: Enabling of bearer rejected, failed to enable media [ 369.389521][ T8140] ubi: mtd0 is already attached to ubi0 [ 374.510282][ T8173] ima: policy update completed [ 374.694050][ T27] audit: type=1807 audit(1789682502.491:10): action=measure res=1 [ 374.762392][ T27] audit: type=1802 audit(1789682502.941:11): pid=8173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.0.652" res=1 errno=0 [ 377.640147][ T27] audit: type=1800 audit(1789682506.061:12): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=45705 res=0 errno=0 [ 377.748780][ T27] audit: type=1800 audit(1789682506.091:13): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=46543 res=0 errno=0 [ 377.791988][ T27] audit: type=1800 audit(1789682506.191:14): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="dev" dev="sysfs" ino=45754 res=0 errno=0 [ 377.840761][ T8213] nvmet: failed to open block device (null): (-22) [ 377.849629][ T8213] nvmet_tcp: malformed ip/port passed: : [ 377.899032][ T27] audit: type=1800 audit(1789682506.261:15): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.674" name="enable" dev="configfs" ino=45879 res=0 errno=0 [ 377.959106][ T8210] kvm [8209]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 377.975228][ T8210] kvm [8209]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x20 [ 378.095991][ T27] audit: type=1800 audit(1789682506.271:16): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.674" name="addr_trsvcid" dev="configfs" ino=45880 res=0 errno=0 [ 378.189186][ T27] audit: type=1800 audit(1789682506.291:17): pid=3639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14651 res=0 errno=0 [ 378.800023][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.810416][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.469128][ T8245] fuse: Bad value for 'fd' [ 380.489754][ T27] audit: type=1800 audit(1789682508.911:18): pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.678" name="resume" dev="sysfs" ino=1367 res=0 errno=0 [ 380.509498][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.636705][ T8276] device syzkaller0 entered promiscuous mode [ 383.842306][ T27] audit: type=1800 audit(1789682512.261:19): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=46543 res=0 errno=0 [ 387.516655][ T27] audit: type=1800 audit(1789682515.941:20): pid=8293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.692" name="ipv4_address" dev="configfs" ino=45971 res=0 errno=0 [ 387.567815][ T27] audit: type=1800 audit(1789682515.971:21): pid=8293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.692" name="dev" dev="configfs" ino=45978 res=0 errno=0 [ 387.836811][ T8301] fuse: Bad value for 'fd' [ 387.852478][ T27] audit: type=1800 audit(1789682516.271:22): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.693" name="resume" dev="sysfs" ino=1367 res=0 errno=0 [ 389.871728][ T8314] fuse: Unknown parameter 'fd0x0000000000000009' [ 389.890726][ T27] audit: type=1800 audit(1789682518.311:23): pid=8314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.696" name="resume" dev="sysfs" ino=1367 res=0 errno=0 [ 390.451603][ T27] audit: type=1800 audit(1789682518.871:24): pid=8317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.697" name="report_desc" dev="configfs" ino=46419 res=0 errno=0 [ 393.382583][ T27] audit: type=1800 audit(1789682521.311:25): pid=8333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.688" name="resume" dev="sysfs" ino=1367 res=0 errno=0 [ 393.449929][ T8332] [ 393.452309][ T8332] ====================================================== [ 393.459332][ T8332] WARNING: possible circular locking dependency detected [ 393.466373][ T8332] syzkaller #0 Not tainted [ 393.470790][ T8332] ------------------------------------------------------ [ 393.477818][ T8332] syz.5.691/8332 is trying to acquire lock: [ 393.483707][ T8332] ffffffff8d7b02b0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 393.495044][ T8332] [ 393.495044][ T8332] but task is already holding lock: [ 393.502406][ T8332] ffff8880701369d0 (&sb->s_type->i_mutex_key#25){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0 [ 393.512931][ T8332] [ 393.512931][ T8332] which lock already depends on the new lock. [ 393.512931][ T8332] [ 393.523333][ T8332] [ 393.523333][ T8332] the existing dependency chain (in reverse order) is: [ 393.532349][ T8332] [ 393.532349][ T8332] -> #3 (&sb->s_type->i_mutex_key#25){++++}-{3:3}: [ 393.541057][ T8332] down_write+0x36/0x60 [ 393.545824][ T8332] configfs_depend_item_unlocked+0x14f/0x430 [ 393.552326][ T8332] usbg_make_tpg+0x1dd/0x550 [ 393.557486][ T8332] target_fabric_make_tpg+0xa0/0x6d0 [ 393.563320][ T8332] configfs_mkdir+0x511/0x9e0 [ 393.568509][ T8332] vfs_mkdir+0x386/0x570 [ 393.573270][ T8332] do_mkdirat+0x1d8/0x440 [ 393.578105][ T8332] __x64_sys_mkdir+0x6a/0x80 [ 393.583202][ T8332] do_syscall_64+0x4c/0xa0 [ 393.588133][ T8332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.594595][ T8332] [ 393.594595][ T8332] -> #2 (tpg_instances_lock){+.+.}-{3:3}: [ 393.602484][ T8332] __mutex_lock+0x12d/0xae0 [ 393.607499][ T8332] tcm_alloc_inst+0x61/0x190 [ 393.612598][ T8332] usb_get_function_instance+0xd9/0x2e0 [ 393.618730][ T8332] function_make+0x118/0x350 [ 393.623826][ T8332] configfs_mkdir+0x511/0x9e0 [ 393.629014][ T8332] vfs_mkdir+0x386/0x570 [ 393.633762][ T8332] do_mkdirat+0x1d8/0x440 [ 393.638599][ T8332] __x64_sys_mkdir+0x6a/0x80 [ 393.643695][ T8332] do_syscall_64+0x4c/0xa0 [ 393.648619][ T8332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.655025][ T8332] [ 393.655025][ T8332] -> #1 (func_lock){+.+.}-{3:3}: [ 393.662130][ T8332] __mutex_lock+0x12d/0xae0 [ 393.667144][ T8332] usb_get_function_instance+0x2a/0x2e0 [ 393.673198][ T8332] function_make+0x118/0x350 [ 393.678298][ T8332] configfs_mkdir+0x511/0x9e0 [ 393.683488][ T8332] vfs_mkdir+0x386/0x570 [ 393.688240][ T8332] do_mkdirat+0x1d8/0x440 [ 393.693076][ T8332] __x64_sys_mkdirat+0x85/0x90 [ 393.698345][ T8332] do_syscall_64+0x4c/0xa0 [ 393.703270][ T8332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.709674][ T8332] [ 393.709674][ T8332] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 393.717913][ T8332] __lock_acquire+0x2d18/0x7c40 [ 393.723355][ T8332] lock_acquire+0x1bb/0x4a0 [ 393.728365][ T8332] __mutex_lock+0x12d/0xae0 [ 393.733376][ T8332] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 393.740036][ T8332] configfs_symlink+0x5a4/0x13c0 [ 393.745479][ T8332] vfs_symlink+0x245/0x3d0 [ 393.750404][ T8332] do_symlinkat+0x1b6/0x400 [ 393.755413][ T8332] __x64_sys_symlink+0x7a/0x90 [ 393.760683][ T8332] do_syscall_64+0x4c/0xa0 [ 393.765603][ T8332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.772015][ T8332] [ 393.772015][ T8332] other info that might help us debug this: [ 393.772015][ T8332] [ 393.782230][ T8332] Chain exists of: [ 393.782230][ T8332] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#25 [ 393.782230][ T8332] [ 393.797167][ T8332] Possible unsafe locking scenario: [ 393.797167][ T8332] [ 393.804598][ T8332] CPU0 CPU1 [ 393.809944][ T8332] ---- ---- [ 393.815295][ T8332] lock(&sb->s_type->i_mutex_key#25); [ 393.820742][ T8332] lock(tpg_instances_lock); [ 393.827923][ T8332] lock(&sb->s_type->i_mutex_key#25); [ 393.835888][ T8332] lock(gadget_subsys.su_mutex); [ 393.840896][ T8332] [ 393.840896][ T8332] *** DEADLOCK *** [ 393.840896][ T8332] [ 393.849020][ T8332] 2 locks held by syz.5.691/8332: [ 393.854024][ T8332] #0: ffff888019378460 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 393.863261][ T8332] #1: ffff8880701369d0 (&sb->s_type->i_mutex_key#25){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0 [ 393.874122][ T8332] [ 393.874122][ T8332] stack backtrace: [ 393.879993][ T8332] CPU: 1 PID: 8332 Comm: syz.5.691 Not tainted syzkaller #0 [ 393.887258][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.897308][ T8332] Call Trace: [ 393.900572][ T8332] [ 393.903491][ T8332] dump_stack_lvl+0x188/0x24e [ 393.908156][ T8332] ? load_image+0x410/0x410 [ 393.912667][ T8332] ? show_regs_print_info+0x12/0x12 [ 393.917851][ T8332] ? print_circular_bug+0x12b/0x1a0 [ 393.923041][ T8332] check_noncircular+0x296/0x330 [ 393.927968][ T8332] ? add_chain_block+0x9b0/0x9b0 [ 393.932893][ T8332] ? lockdep_lock+0xf1/0x1f0 [ 393.937471][ T8332] ? _find_first_zero_bit+0xd2/0x100 [ 393.942817][ T8332] __lock_acquire+0x2d18/0x7c40 [ 393.947659][ T8332] ? __bfs+0x27a/0x560 [ 393.951724][ T8332] ? add_chain_block+0x9b0/0x9b0 [ 393.956652][ T8332] ? lockdep_lock+0xf1/0x1f0 [ 393.961229][ T8332] ? verify_lock_unused+0x140/0x140 [ 393.966416][ T8332] ? lockdep_unlock+0x142/0x2e0 [ 393.971251][ T8332] ? lockdep_lock+0x1f0/0x1f0 [ 393.975918][ T8332] ? __lock_acquire+0x28d6/0x7c40 [ 393.980941][ T8332] lock_acquire+0x1bb/0x4a0 [ 393.985433][ T8332] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 393.991750][ T8332] ? __might_sleep+0xd0/0xd0 [ 393.996393][ T8332] ? read_lock_is_recursive+0x10/0x10 [ 394.001760][ T8332] __mutex_lock+0x12d/0xae0 [ 394.006250][ T8332] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 394.012566][ T8332] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 394.018878][ T8332] ? mutex_lock_nested+0x10/0x10 [ 394.023807][ T8332] ? rwsem_write_trylock+0x135/0x1c0 [ 394.029078][ T8332] ? clear_nonspinnable+0x60/0x60 [ 394.034090][ T8332] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 394.040227][ T8332] ? inode_permission+0xef/0x480 [ 394.045155][ T8332] ? bpf_lsm_inode_permission+0x5/0x10 [ 394.050699][ T8332] ? security_inode_permission+0xac/0xf0 [ 394.056357][ T8332] configfs_symlink+0x5a4/0x13c0 [ 394.062146][ T8332] ? end_current_label_crit_section+0x14b/0x170 [ 394.068432][ T8332] ? common_perm+0x15d/0x1b0 [ 394.073012][ T8332] ? from_kgid+0x14f/0x6a0 [ 394.077453][ T8332] ? make_kgid+0x650/0x650 [ 394.081854][ T8332] ? apparmor_path_symlink+0x1ac/0x230 [ 394.087298][ T8332] ? lookup_one_qstr_excl+0x11c/0x240 [ 394.092660][ T8332] ? detach_groups+0x370/0x370 [ 394.097409][ T8332] ? inode_permission+0xef/0x480 [ 394.102328][ T8332] ? bpf_lsm_inode_symlink+0x5/0x10 [ 394.107518][ T8332] ? security_inode_symlink+0xb2/0x100 [ 394.112964][ T8332] vfs_symlink+0x245/0x3d0 [ 394.117370][ T8332] do_symlinkat+0x1b6/0x400 [ 394.121862][ T8332] ? vfs_symlink+0x3d0/0x3d0 [ 394.126440][ T8332] ? getname_flags+0x206/0x500 [ 394.131188][ T8332] __x64_sys_symlink+0x7a/0x90 [ 394.135952][ T8332] do_syscall_64+0x4c/0xa0 [ 394.140373][ T8332] ? clear_bhb_loop+0x60/0xb0 [ 394.145056][ T8332] ? clear_bhb_loop+0x60/0xb0 [ 394.149727][ T8332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.155630][ T8332] RIP: 0033:0x7f514d39e159 [ 394.160047][ T8332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.179649][ T8332] RSP: 002b:00007f514e2e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 394.188062][ T8332] RAX: ffffffffffffffda RBX: 00007f514d625fa0 RCX: 00007f514d39e159 [ 394.196037][ T8332] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000200000001000 [ 394.204004][ T8332] RBP: 00007f514d43506b R08: 0000000000000000 R09: 0000000000000000 [ 394.211966][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.219925][ T8332] R13: 00007f514d626038 R14: 00007f514d625fa0 R15: 00007ffef5744e58 [ 394.227903][ T8332]