last executing test programs: 2m6.310427008s ago: executing program 3 (id=280): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(r0, &(0x7f0000002740)={0x2020}, 0x2020) 2m2.40462441s ago: executing program 3 (id=284): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockname(r3, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='dummy_udc.0', 0xb) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x278, 0x3d8, 0x3d8, 0x278, 0x3d8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xffffff00, 0xff000000], [0x0, 0xffffff00, 0xffffffff], 'vxcan1\x00', 'bond0\x00', {0x1722a77d736144f5}, {0xff}, 0x8, 0x0, 0x3, 0x11}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x1, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x60, 0x1, "bf50e684840e31838b38a8722c839ed5aca31d87e30f043f5135ab48dfbc"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) userfaultfd(0x80001) 1m57.565379676s ago: executing program 3 (id=290): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32], 0x20) 1m57.369853155s ago: executing program 3 (id=292): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m57.031842221s ago: executing program 3 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) syz_emit_ethernet(0xe, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80402, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/248, 0xf8}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 1m54.857428562s ago: executing program 3 (id=297): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 1m54.126066066s ago: executing program 32 (id=297): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 1m25.661400684s ago: executing program 1 (id=370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) syz_emit_ethernet(0xe, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80402, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/248, 0xf8}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 1m23.191884869s ago: executing program 1 (id=372): bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) set_mempolicy(0x1, 0x0, 0x3) 1m21.437354761s ago: executing program 1 (id=379): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(0x0, 0x0) ioctl(r0, 0x9, &(0x7f0000000180)="058b188d56db9426239f153e650276552a7210c0adc623094dd4cd8809b7fcdb020f33c654435d37d5ffa9977b1b9e05fb74c7bfb86d40e6d4759495a4d0e8f31e6f4337f06284c35e872efbbf311ed54c3062ee5131de91df35013e7529b28cca2c5fd320a99d7a171b1462332061c4dec1dfdabd5a9ff1d590f6f0aa16898e4fb9b8eb890a5326d83b0fdb") mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', r3}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1m19.831637187s ago: executing program 1 (id=383): r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x10, &(0x7f0000000080)={[{@notreelog}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f00000000c0)='G', 0x1, 0xe7c) 1m15.502307398s ago: executing program 1 (id=392): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xbd}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m15.25399932s ago: executing program 1 (id=393): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x7, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="0503d0fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 59.921940545s ago: executing program 33 (id=393): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x7, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="0503d0fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 9.718061757s ago: executing program 4 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x22282, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) 8.525139783s ago: executing program 5 (id=554): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='2', 0x1) 8.103703902s ago: executing program 5 (id=557): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 5.772969721s ago: executing program 0 (id=558): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='2\n', 0x2) 5.405486428s ago: executing program 5 (id=559): mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x22) write(r0, &(0x7f0000000000)='3', 0x4e) unshare(0x60000600) 4.732666039s ago: executing program 2 (id=561): r0 = socket$inet6(0xa, 0x3, 0xff) shutdown(r0, 0x1) r1 = dup2(r0, r0) write$tun(r1, 0x0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0xffffffffffffffff, 0x1, 0x3, 0x3, 0x1}, 0x5}) 4.685467682s ago: executing program 5 (id=562): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) timer_create(0x1, 0x0, 0x0) 3.954439856s ago: executing program 2 (id=563): r0 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48) 3.703605067s ago: executing program 2 (id=564): socket(0x9, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040089}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x7, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x880) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031400d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.556651524s ago: executing program 4 (id=565): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='2', 0x1) 3.191157051s ago: executing program 4 (id=566): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c0001000000e4ff0000000010000a800c"], 0x100}}, 0x0) 3.160223903s ago: executing program 2 (id=567): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f00000001c0)='p', 0x1) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2.996030611s ago: executing program 0 (id=568): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='attr/current\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x1}]}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.749221712s ago: executing program 2 (id=569): socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000240), &(0x7f0000000340)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r5, r3, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[], 0x0) 2.536525472s ago: executing program 2 (id=570): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02010009"], 0x70}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000240)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3}}, 0x48) 2.308692053s ago: executing program 5 (id=571): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 1.93349838s ago: executing program 4 (id=572): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002ec0)=ANY=[@ANYBLOB], 0x114}], 0x1}, 0x0) 1.93337608s ago: executing program 0 (id=573): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e20, @broadcast}}}, 0x90) 1.834538185s ago: executing program 0 (id=574): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 1.816467236s ago: executing program 4 (id=575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) syz_emit_ethernet(0xe, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80402, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/248, 0xf8}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 1.563154937s ago: executing program 0 (id=576): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) socket$rds(0x15, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) eventfd2(0xa, 0x80800) eventfd2(0x2, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xfff, 0x9, 0xffffffffffffff01, 0xf, 0x7, 0x4, 0x4, 0x7}, 0x0, 0x0, 0x0, 0x0) 545.235795ms ago: executing program 4 (id=577): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x32, 0xe, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) 523.685136ms ago: executing program 5 (id=578): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004025057a1200010102030109023200010100c0010904000002ff00000007050102"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x0) close(r0) 0s ago: executing program 0 (id=579): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x400, 0x0, 0x2, 0x0, 0x2}) open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000, r2}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_ublk_setup_io_uring(0x1c, &(0x7f0000000580)={0x0, 0xff8c, 0x80, 0x402, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)=0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000100)=0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, 0x0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x198}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2c1, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10000, 0x2, 0x1ed, 0x0, r4}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40587e, 0x8200, 0x1, 0x367, 0x0, r8}}], 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0064008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) r10 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010003704", @ANYRES32, @ANYBLOB, @ANYRESDEC=r9, @ANYRES8, @ANYRES8=r5, @ANYBLOB="64fa3adbea1bd6869d777315ad8b1678b21ad65547a4364f57051ae58a80d52e77ddd61db12757c007c790505c35dfea0db2b85113b5574ffaed831c34035a6eeff932b6e6617337991f771d9b7c388b7cd07678cac3b12ef91caaca6f6e6f6a6a2f3eb368a972927d6ff2f55e8dad8e01191ffda3227ccf8a7c8405f48f4c5674d57f573fecf7896a54f22c8b498424882f80d245d9d984f6c4bd300acfbf4ce39cce9c281ae411f1dc38abb459b359d75d71884dd9abf6aa3f33dd90f69b369c56d462c24b5e3858fbf582930791b6ea9b39935e"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000040) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'sit0\x00', {0x2, 0x483, @private=0xa010102}}) kernel console output (not intermixed with test programs): p link [ 80.461084][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 80.475008][ T5781] team0: Port device team_slave_0 added [ 80.499819][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.507101][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.514688][ T5774] bridge_slave_0: entered allmulticast mode [ 80.521744][ T5774] bridge_slave_0: entered promiscuous mode [ 80.531884][ T5781] team0: Port device team_slave_1 added [ 80.538558][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.545683][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.553010][ T5774] bridge_slave_1: entered allmulticast mode [ 80.562115][ T5774] bridge_slave_1: entered promiscuous mode [ 80.651496][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.658665][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.684798][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.707684][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.714698][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.741006][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.767779][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.777064][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.784318][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.791680][ T5777] bridge_slave_0: entered allmulticast mode [ 80.799418][ T5777] bridge_slave_0: entered promiscuous mode [ 80.807710][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.814928][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.822314][ T5777] bridge_slave_1: entered allmulticast mode [ 80.830201][ T5777] bridge_slave_1: entered promiscuous mode [ 80.856221][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.924784][ T5774] team0: Port device team_slave_0 added [ 80.944674][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.952077][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.960241][ T5785] bridge_slave_0: entered allmulticast mode [ 80.968478][ T5785] bridge_slave_0: entered promiscuous mode [ 80.975994][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.983389][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.991022][ T5785] bridge_slave_1: entered allmulticast mode [ 80.998918][ T5785] bridge_slave_1: entered promiscuous mode [ 81.009370][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.020442][ T5774] team0: Port device team_slave_1 added [ 81.031627][ T5781] hsr_slave_0: entered promiscuous mode [ 81.038089][ T5781] hsr_slave_1: entered promiscuous mode [ 81.068940][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.110162][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.117147][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.143589][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.158363][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.189182][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.196157][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.223089][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.236510][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.248556][ T5777] team0: Port device team_slave_0 added [ 81.295539][ T5777] team0: Port device team_slave_1 added [ 81.351333][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.358426][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.384396][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.402537][ T5785] team0: Port device team_slave_0 added [ 81.411250][ T5785] team0: Port device team_slave_1 added [ 81.425683][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.433004][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.459936][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.493611][ T5774] hsr_slave_0: entered promiscuous mode [ 81.500329][ T5774] hsr_slave_1: entered promiscuous mode [ 81.506634][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.515040][ T5774] Cannot create hsr debugfs directory [ 81.541937][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.549124][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.575213][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.587979][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.594964][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.620969][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.708367][ T5085] Bluetooth: hci1: command tx timeout [ 81.712157][ T5780] Bluetooth: hci0: command tx timeout [ 81.714207][ T5776] Bluetooth: hci2: command tx timeout [ 81.749379][ T5777] hsr_slave_0: entered promiscuous mode [ 81.755637][ T5777] hsr_slave_1: entered promiscuous mode [ 81.762165][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.769816][ T5777] Cannot create hsr debugfs directory [ 81.787615][ T5776] Bluetooth: hci3: command tx timeout [ 81.848454][ T5785] hsr_slave_0: entered promiscuous mode [ 81.854716][ T5785] hsr_slave_1: entered promiscuous mode [ 81.861208][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.868898][ T5785] Cannot create hsr debugfs directory [ 81.954253][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.994925][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.004435][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.048191][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.266300][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.288154][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.298093][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.316230][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.392160][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.402675][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.415504][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.425350][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.528473][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.537995][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.548583][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.582548][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.623959][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.686423][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.699245][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.727555][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.734872][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.771520][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.778669][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.794976][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.812523][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.835961][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.843113][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.852067][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.859255][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.921176][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.963655][ T2921] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.970869][ T2921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.990181][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.997385][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.103890][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.152442][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.191848][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.199080][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.223221][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.230456][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.512465][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.589729][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.656514][ T5774] veth0_vlan: entered promiscuous mode [ 83.699731][ T5774] veth1_vlan: entered promiscuous mode [ 83.772062][ T5781] veth0_vlan: entered promiscuous mode [ 83.788543][ T5776] Bluetooth: hci0: command tx timeout [ 83.793333][ T5774] veth0_macvtap: entered promiscuous mode [ 83.799132][ T5085] Bluetooth: hci2: command tx timeout [ 83.800387][ T5780] Bluetooth: hci1: command tx timeout [ 83.843082][ T5774] veth1_macvtap: entered promiscuous mode [ 83.856242][ T5781] veth1_vlan: entered promiscuous mode [ 83.868495][ T5780] Bluetooth: hci3: command tx timeout [ 83.883446][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.900823][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.926144][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.950363][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.962722][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.972344][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.981260][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.991507][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.025340][ T5781] veth0_macvtap: entered promiscuous mode [ 84.036005][ T5781] veth1_macvtap: entered promiscuous mode [ 84.116793][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.130977][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.143106][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.155324][ T5777] veth0_vlan: entered promiscuous mode [ 84.180392][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.192155][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.204401][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.216934][ T5777] veth1_vlan: entered promiscuous mode [ 84.242954][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.253124][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.262321][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.271679][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.303034][ T5785] veth0_vlan: entered promiscuous mode [ 84.308997][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.316960][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.336311][ T5785] veth1_vlan: entered promiscuous mode [ 84.398474][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.406773][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.450563][ T5777] veth0_macvtap: entered promiscuous mode [ 84.490677][ T5785] veth0_macvtap: entered promiscuous mode [ 84.510352][ T5777] veth1_macvtap: entered promiscuous mode [ 84.544854][ T5785] veth1_macvtap: entered promiscuous mode [ 84.547508][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.569730][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.665206][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.687658][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.698453][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.709334][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.721562][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.435479][ T5780] Bluetooth: hci1: command tx timeout [ 86.435809][ T5776] Bluetooth: hci0: command tx timeout [ 86.440962][ T5780] Bluetooth: hci2: command tx timeout [ 86.440987][ T5780] Bluetooth: hci3: command tx timeout [ 86.485115][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.516001][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.525991][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.536471][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.546659][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.557409][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.569909][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.585328][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.602136][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.613706][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.621716][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.637529][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.653266][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.665292][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.680707][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.700185][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.711816][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.723761][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.737547][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.749258][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.761942][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.789786][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.802162][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.823028][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.833887][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.853326][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.864246][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.873823][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.882775][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.557935][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.646844][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.252965][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.299824][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.403966][ T5853] syz.0.5[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 88.419589][ T5853] loop0: detected capacity change from 0 to 128 [ 88.435156][ T5853] ======================================================= [ 88.435156][ T5853] WARNING: The mand mount option has been deprecated and [ 88.435156][ T5853] and is ignored by this kernel. Remove the mand [ 88.435156][ T5853] option from the mount to silence this warning. [ 88.435156][ T5853] ======================================================= [ 88.509482][ T5780] Bluetooth: hci0: command tx timeout [ 88.515049][ T5780] Bluetooth: hci2: command tx timeout [ 88.521388][ T5780] Bluetooth: hci1: command tx timeout [ 88.526903][ T5780] Bluetooth: hci3: command tx timeout [ 88.628842][ T5853] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 88.634767][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.669654][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.791529][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.839206][ T5853] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.914118][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.053110][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.659423][ T789] cfg80211: failed to load regulatory.db [ 92.685574][ T5874] usb usb8: usbfs: process 5874 (syz.0.8) did not claim interface 0 before use [ 94.822814][ T5879] usb usb8: usbfs: process 5879 (syz.3.11) did not claim interface 0 before use [ 95.202416][ T5891] Zero length message leads to an empty skb [ 96.909482][ T5902] loop0: detected capacity change from 0 to 40427 [ 96.927414][ T5902] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 96.934481][ T5902] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 96.947584][ T5902] F2FS-fs (loop0): invalid crc value [ 96.995623][ T5907] loop2: detected capacity change from 0 to 512 [ 97.094939][ T5902] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 97.102270][ T5902] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 97.108411][ T5769] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.163248][ T5905] event trace: Could not enable event p [ 98.397316][ T5919] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 98.611578][ T5919] syz.0.17: attempt to access beyond end of device [ 98.611578][ T5919] loop0: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 98.657249][ C0] sched: RT throttling activated [ 99.181181][ T5774] syz-executor: attempt to access beyond end of device [ 99.181181][ T5774] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.230020][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 99.306215][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 99.718711][ T5927] binder: BINDER_SET_CONTEXT_MGR already set [ 99.743503][ T5927] binder: 5926:5927 ioctl 4018620d 200000004a80 returned -16 [ 99.983746][ T5934] loop3: detected capacity change from 0 to 512 [ 100.057901][ T56] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.314545][ T56] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 100.325080][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 100.348984][ T56] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 100.505355][ T56] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 100.581281][ T56] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 100.600228][ T5940] bond1: Removing last arp target with arp_interval on [ 100.607217][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.655155][ T5929] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.683782][ T56] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 100.754757][ T56] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 100.987262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 101.027904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 101.067278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 101.257271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 102.007269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 102.037276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.217272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.427276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.437278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.517272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.925143][ T5817] usb 3-1: USB disconnect, device number 2 [ 102.958508][ T5817] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 102.990433][ T5817] cyberjack 3-1:1.0: device disconnected [ 103.013393][ T5950] event trace: Could not enable event p [ 103.380773][ T5954] loop3: detected capacity change from 0 to 40427 [ 103.433715][ T5954] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 103.440610][ T5954] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 103.461429][ T5954] F2FS-fs (loop3): invalid crc value [ 103.568620][ T5954] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 103.575744][ T5954] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 103.709323][ T5962] binder: BINDER_SET_CONTEXT_MGR already set [ 103.715387][ T5962] binder: 5961:5962 ioctl 4018620d 200000004a80 returned -16 [ 104.096536][ T5966] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 104.110893][ T5966] syz.3.36: attempt to access beyond end of device [ 104.110893][ T5966] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 105.008754][ T5777] syz-executor: attempt to access beyond end of device [ 105.008754][ T5777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.086897][ T5777] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 106.827502][ T5817] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.077708][ T5817] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 107.097460][ T5817] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.107662][ T5817] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 107.123364][ T5817] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 107.132913][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.150150][ T5979] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.139328][ T5817] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 108.162850][ T5817] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 108.256751][ T5817] usb 3-1: USB disconnect, device number 3 [ 108.297894][ T5817] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 108.324175][ T5817] cyberjack 3-1:1.0: device disconnected [ 108.446013][ T5992] netlink: 60 bytes leftover after parsing attributes in process `syz.0.46'. [ 110.490025][ T6002] loop2: detected capacity change from 0 to 40427 [ 110.525786][ T6002] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 110.532275][ T6002] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 110.547763][ T6002] F2FS-fs (loop2): invalid crc value [ 110.619041][ T6002] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 110.626202][ T6002] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 111.187063][ T6011] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 111.224919][ T6011] syz.2.51: attempt to access beyond end of device [ 111.224919][ T6011] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 112.070141][ T5785] syz-executor: attempt to access beyond end of device [ 112.070141][ T5785] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.208420][ T5785] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 115.431541][ T6034] usb usb8: usbfs: process 6034 (syz.0.57) did not claim interface 0 before use [ 118.127455][ T56] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.345587][ T56] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 118.375287][ T56] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.392327][ T56] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 118.416586][ T56] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 118.429374][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.667991][ T6042] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.694237][ T56] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 118.736690][ T56] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 119.237914][ T6042] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 119.350580][ T27] usb 2-1: USB disconnect, device number 2 [ 119.438029][ T27] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 119.515351][ T27] cyberjack 2-1:1.0: device disconnected [ 120.252997][ T6059] usb usb8: usbfs: process 6059 (syz.1.68) did not claim interface 0 before use [ 120.493351][ T6061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.59'. [ 120.750136][ T6067] netlink: 60 bytes leftover after parsing attributes in process `syz.0.77'. [ 121.374836][ T6069] usb usb8: usbfs: process 6069 (syz.1.70) did not claim interface 0 before use [ 125.659494][ T6094] netlink: 'syz.1.80': attribute type 72 has an invalid length. [ 125.667198][ T6094] netlink: 124 bytes leftover after parsing attributes in process `syz.1.80'. [ 125.697500][ T5728] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.761185][ T6098] netlink: 'syz.3.87': attribute type 72 has an invalid length. [ 125.769145][ T6098] netlink: 124 bytes leftover after parsing attributes in process `syz.3.87'. [ 126.626893][ T6103] netlink: 'syz.3.90': attribute type 72 has an invalid length. [ 126.674805][ T6103] netlink: 124 bytes leftover after parsing attributes in process `syz.3.90'. [ 127.012777][ T6109] usb usb8: usbfs: process 6109 (syz.3.82) did not claim interface 0 before use [ 127.173706][ T6113] loop3: detected capacity change from 0 to 128 [ 127.217965][ T6113] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 127.264504][ T6113] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.148330][ T6116] usb usb8: usbfs: process 6116 (syz.2.81) did not claim interface 0 before use [ 129.402070][ T5777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.647391][ T5728] usb 1-1: device not accepting address 2, error -71 [ 130.682456][ T6134] netlink: 124 bytes leftover after parsing attributes in process `syz.3.92'. [ 133.745304][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.778108][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.788303][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.451757][ T6154] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.98'. [ 135.598776][ T23] usb 2-1: device not accepting address 3, error -71 [ 136.359463][ T6164] loop2: detected capacity change from 0 to 128 [ 136.491425][ T6164] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 136.558325][ T6164] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.458014][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.620292][ T6174] netlink: 124 bytes leftover after parsing attributes in process `syz.1.104'. [ 137.906462][ T6187] netlink: 124 bytes leftover after parsing attributes in process `syz.0.116'. [ 140.307336][ T5836] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 141.718130][ T6208] TCP: TCP_TX_DELAY enabled [ 143.812924][ T5836] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 143.839444][ T5836] usb 2-1: can't read configurations, error -71 [ 143.966916][ T6218] loop1: detected capacity change from 0 to 128 [ 144.096266][ T6218] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 144.129523][ T6223] warning: `syz.2.120' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 144.156830][ T6221] loop3: detected capacity change from 0 to 1024 [ 144.181705][ T6218] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.091333][ T5781] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.897584][ T5816] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.153511][ T6244] binder: 6243:6244 ioctl 4018620d 0 returned -22 [ 147.204534][ T5816] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 147.303349][ T5816] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 147.411284][ T5816] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 147.504939][ T5816] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 147.601339][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.784353][ T6235] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 148.047363][ T5816] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 148.139191][ T5816] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 148.199541][ T6235] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 148.309408][ T5816] usb 1-1: USB disconnect, device number 4 [ 148.342791][ T5816] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 148.385694][ T5816] cyberjack 1-1:1.0: device disconnected [ 150.137773][ T6263] mmap: syz.1.132 (6263) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 150.840402][ T6271] binder: 6270:6271 ioctl 4018620d 0 returned -22 [ 153.898495][ T6285] netlink: 'syz.2.142': attribute type 1 has an invalid length. [ 154.022403][ T6285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.211048][ T6292] bond1: (slave veth3): Enslaving as an active interface with a down link [ 154.263479][ T6293] bond1: (slave dummy0): making interface the new active one [ 154.311265][ T6293] dummy0: entered promiscuous mode [ 154.317098][ T6293] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 154.857785][ T6307] binder: 6304:6307 ioctl 4018620d 0 returned -22 [ 157.017355][ T5816] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 157.249199][ T5816] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 157.272732][ T5816] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 157.293432][ T5816] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 157.336154][ T5816] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 157.358473][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.374671][ T6322] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 157.397315][ T5816] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 157.423721][ T5816] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 157.746737][ T6322] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 158.283104][ T5816] usb 2-1: USB disconnect, device number 7 [ 159.698450][ T5816] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 159.735511][ T5816] cyberjack 2-1:1.0: device disconnected [ 160.467403][ T5836] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.989493][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.017336][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.027168][ T5836] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 162.047327][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.068494][ T5836] usb 2-1: config 0 descriptor?? [ 162.294922][ T6370] binder: BINDER_SET_CONTEXT_MGR already set [ 162.309114][ T6370] binder: 6369:6370 ioctl 4018620d 200000004a80 returned -16 [ 162.377715][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 162.521243][ T5836] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 162.532689][ T5836] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 162.557183][ T5836] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 162.567380][ T5836] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 162.584386][ T27] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 162.584727][ T5836] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 162.601996][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 162.604619][ T5836] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 162.623359][ T5836] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 162.624760][ T27] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 162.639554][ T5836] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 162.657296][ T27] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 162.676277][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.712685][ T6368] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 162.723022][ T27] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 162.757133][ T27] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 162.938322][ T6368] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 162.943935][ T5776] Bluetooth: hci3: unexpected cc 0x204b length: 34 > 3 [ 162.949525][ T27] usb 1-1: USB disconnect, device number 5 [ 162.971663][ T27] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 162.985086][ T27] cyberjack 1-1:1.0: device disconnected [ 163.135513][ T5836] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 163.147449][ T5836] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 163.170182][ T5836] pyra: probe of 0003:1E7D:2CF6.0001 failed with error -71 [ 163.195661][ T5836] usb 2-1: USB disconnect, device number 8 [ 163.235205][ T6380] syzkaller0: entered promiscuous mode [ 163.241964][ T6380] syzkaller0: entered allmulticast mode [ 163.252578][ T6380] tipc: Started in network mode [ 163.257755][ T6380] tipc: Node identity 6a2ab7ff9466, cluster identity 4711 [ 163.268716][ T6380] tipc: Enabled bearer , priority 0 [ 163.285648][ T6380] tipc: Resetting bearer [ 163.294676][ T6379] tipc: Resetting bearer [ 163.312973][ T6379] tipc: Disabling bearer [ 165.090163][ T6393] input: syz0 as /devices/virtual/input/input5 [ 165.214605][ T6398] binder: BINDER_SET_CONTEXT_MGR already set [ 165.237786][ T6398] binder: 6397:6398 ioctl 4018620d 200000004a80 returned -16 [ 165.655687][ T6401] loop3: detected capacity change from 0 to 32768 [ 166.114394][ T6401] loop3: p1 p2 p3 < > [ 166.124503][ T6401] loop3: p2 size 16775168 extends beyond EOD, truncated [ 166.657905][ T5728] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 168.071641][ T5815] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 168.078204][ T5776] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 168.088701][ T5776] Bluetooth: hci3: Injecting HCI hardware error event [ 168.097140][ T5780] Bluetooth: hci3: hardware error 0x00 [ 168.182983][ T5728] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 168.206536][ T5728] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 168.252753][ T5769] udevd[5769]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 168.260517][ T5767] udevd[5767]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 168.272337][ T5815] usb 4-1: Using ep0 maxpacket: 32 [ 168.278578][ T5728] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 168.293302][ T5986] udevd[5986]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 168.303482][ T5815] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 168.334261][ T5815] usb 4-1: config 0 has no interface number 0 [ 168.341670][ T5728] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 168.365945][ T5815] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 168.388668][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.397428][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.405662][ T5815] usb 4-1: Product: syz [ 168.417374][ T5815] usb 4-1: Manufacturer: syz [ 168.422025][ T5815] usb 4-1: SerialNumber: syz [ 168.443906][ T6409] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 168.454543][ T5815] usb 4-1: config 0 descriptor?? [ 168.466540][ T5728] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 168.484868][ T5815] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 168.500360][ T5728] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 168.723167][ T5815] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 168.734031][ T6409] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 168.762228][ T5728] usb 3-1: USB disconnect, device number 4 [ 168.774828][ T5815] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 168.793151][ T5728] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 168.814024][ T5728] cyberjack 3-1:1.0: device disconnected [ 169.153472][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 169.161909][ T5836] usb 4-1: USB disconnect, device number 2 [ 169.179481][ T5836] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 169.207174][ T5836] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 169.235842][ T5836] quatech2 4-1:0.51: device disconnected [ 169.405576][ T6437] binder: BINDER_SET_CONTEXT_MGR already set [ 169.415272][ T6437] binder: 6434:6437 ioctl 4018620d 200000004a80 returned -16 [ 169.710596][ T6447] loop2: detected capacity change from 0 to 256 [ 171.198000][ T5780] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 172.498542][ T56] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 172.716045][ T56] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 172.747688][ T5836] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 172.747972][ T56] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 172.791830][ T56] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 172.815403][ T56] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 172.853067][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.883809][ T6462] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 172.907620][ T56] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 172.938392][ T56] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 172.968203][ T5836] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.997600][ T5836] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 173.033515][ T5836] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 173.051921][ T5836] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 32, setting to 0 [ 173.078931][ T5836] usb 1-1: string descriptor 0 read error: -22 [ 174.928768][ T5836] usb 1-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 174.937948][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.965977][ T6462] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 175.041846][ T5728] usb 3-1: USB disconnect, device number 5 [ 175.093896][ T5728] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 175.122144][ T6480] binder: 6479:6480 ioctl c0306201 0 returned -14 [ 175.135767][ T5728] cyberjack 3-1:1.0: device disconnected [ 175.210353][ T5836] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 175.234347][ T5836] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 175.263294][ T5836] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 175.277854][ T5836] snd-usb-audio: probe of 1-1:1.1 failed with error -2 [ 175.295110][ T5836] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 175.365852][ T5836] snd-usb-audio: probe of 1-1:1.2 failed with error -2 [ 175.399871][ T5836] usb 1-1: USB disconnect, device number 6 [ 175.679113][ T2921] dummy0: left promiscuous mode [ 176.800242][ T23] IPVS: starting estimator thread 0... [ 178.227375][ T6500] IPVS: using max 18 ests per chain, 43200 per kthread [ 179.691765][ T6512] FAULT_INJECTION: forcing a failure. [ 179.691765][ T6512] name failslab, interval 1, probability 0, space 0, times 1 [ 179.717570][ T6512] CPU: 0 PID: 6512 Comm: syz.2.221 Not tainted syzkaller #0 [ 179.724935][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.735040][ T6512] Call Trace: [ 179.738355][ T6512] [ 179.741321][ T6512] dump_stack_lvl+0x18c/0x250 [ 179.746061][ T6512] ? show_regs_print_info+0x20/0x20 [ 179.751309][ T6512] ? load_image+0x420/0x420 [ 179.755853][ T6512] ? __might_sleep+0xe0/0xe0 [ 179.760484][ T6512] ? __lock_acquire+0x7d80/0x7d80 [ 179.765550][ T6512] should_fail_ex+0x394/0x4c0 [ 179.770285][ T6512] should_failslab+0x9/0x20 [ 179.774840][ T6512] slab_pre_alloc_hook+0x59/0x300 [ 179.779915][ T6512] ? security_task_alloc+0x46/0x130 [ 179.785156][ T6512] ? security_task_alloc+0x46/0x130 [ 179.790487][ T6512] __kmem_cache_alloc_node+0x53/0x250 [ 179.795916][ T6512] ? security_task_alloc+0x46/0x130 [ 179.801160][ T6512] __kmalloc+0xa7/0x240 [ 179.805369][ T6512] security_task_alloc+0x46/0x130 [ 179.810447][ T6512] copy_process+0x14fb/0x3da0 [ 179.815181][ T6512] ? copy_process+0x98e/0x3da0 [ 179.819987][ T6512] ? lockdep_init_map_type+0x9c/0x8e0 [ 179.825426][ T6512] ? __pidfd_prepare+0x140/0x140 [ 179.830416][ T6512] ? __raw_spin_lock_init+0x45/0x100 [ 179.835763][ T6512] vhost_task_create+0x1fb/0x370 [ 179.840751][ T6512] ? vhost_run_work_list+0x1b0/0x1b0 [ 179.846089][ T6512] ? __vhost_worker_flush+0x290/0x290 [ 179.851513][ T6512] ? vhost_task_stop+0x190/0x190 [ 179.856504][ T6512] ? vhost_task_create+0x370/0x370 [ 179.861663][ T6512] ? vscnprintf+0x80/0x80 [ 179.866050][ T6512] vhost_worker_create+0x15e/0x350 [ 179.871228][ T6512] ? vhost_dev_set_owner+0x9b0/0x9b0 [ 179.876563][ T6512] ? vhost_dev_set_owner+0x2a5/0x9b0 [ 179.881888][ T6512] ? vhost_dev_set_owner+0x2a5/0x9b0 [ 179.887233][ T6512] ? __kmalloc+0xe5/0x240 [ 179.891704][ T6512] vhost_dev_set_owner+0x5c8/0x9b0 [ 179.896871][ T6512] vhost_dev_ioctl+0xa9/0xc00 [ 179.901597][ T6512] ? vhost_vsock_dev_ioctl+0x230/0xdd0 [ 179.907093][ T6512] ? mutex_lock_nested+0x20/0x20 [ 179.912064][ T6512] ? vhost_init_device_iotlb+0x200/0x200 [ 179.917754][ T6512] vhost_vsock_dev_ioctl+0x23e/0xdd0 [ 179.923085][ T6512] ? vhost_vsock_chr_poll+0x50/0x50 [ 179.928327][ T6512] ? bpf_lsm_file_ioctl+0x9/0x10 [ 179.933297][ T6512] ? security_file_ioctl+0x80/0xa0 [ 179.938451][ T6512] ? vhost_vsock_chr_poll+0x50/0x50 [ 179.943682][ T6512] __se_sys_ioctl+0xfd/0x170 [ 179.948407][ T6512] do_syscall_64+0x55/0xb0 [ 179.952862][ T6512] ? clear_bhb_loop+0x40/0x90 [ 179.957581][ T6512] ? clear_bhb_loop+0x40/0x90 [ 179.962306][ T6512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.968240][ T6512] RIP: 0033:0x7f1d7659e159 [ 179.972686][ T6512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.992342][ T6512] RSP: 002b:00007f1d77556028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.000807][ T6512] RAX: ffffffffffffffda RBX: 00007f1d76825fa0 RCX: 00007f1d7659e159 [ 180.008812][ T6512] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000004 [ 180.016818][ T6512] RBP: 00007f1d7663506b R08: 0000000000000000 R09: 0000000000000000 [ 180.024821][ T6512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.032826][ T6512] R13: 00007f1d76826038 R14: 00007f1d76825fa0 R15: 00007ffed66b91f8 [ 180.040862][ T6512] [ 180.071201][ T6521] FAULT_INJECTION: forcing a failure. [ 180.071201][ T6521] name failslab, interval 1, probability 0, space 0, times 0 [ 180.091328][ T6521] CPU: 0 PID: 6521 Comm: syz.1.225 Not tainted syzkaller #0 [ 180.098679][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.108767][ T6521] Call Trace: [ 180.112076][ T6521] [ 180.115035][ T6521] dump_stack_lvl+0x18c/0x250 [ 180.119768][ T6521] ? show_regs_print_info+0x20/0x20 [ 180.125006][ T6521] ? load_image+0x420/0x420 [ 180.129551][ T6521] ? __might_sleep+0xe0/0xe0 [ 180.134199][ T6521] ? __lock_acquire+0x7d80/0x7d80 [ 180.139268][ T6521] should_fail_ex+0x394/0x4c0 [ 180.144083][ T6521] should_failslab+0x9/0x20 [ 180.148629][ T6521] slab_pre_alloc_hook+0x59/0x300 [ 180.153711][ T6521] kmem_cache_alloc+0x5a/0x2c0 [ 180.158556][ T6521] ? security_file_alloc+0x34/0x120 [ 180.163778][ T6521] security_file_alloc+0x34/0x120 [ 180.168821][ T6521] init_file+0x94/0x1f0 [ 180.172994][ T6521] alloc_empty_file+0xb7/0x1d0 [ 180.177776][ T6521] dentry_open+0x4b/0x100 [ 180.182123][ T6521] __se_sys_fsmount+0x781/0x9b0 [ 180.187005][ T6521] ? __x64_sys_fsmount+0x80/0x80 [ 180.191959][ T6521] ? lockdep_hardirqs_on+0x98/0x150 [ 180.197172][ T6521] do_syscall_64+0x55/0xb0 [ 180.201623][ T6521] ? clear_bhb_loop+0x40/0x90 [ 180.206317][ T6521] ? clear_bhb_loop+0x40/0x90 [ 180.211008][ T6521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.216919][ T6521] RIP: 0033:0x7fc8b039e159 [ 180.221439][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.241058][ T6521] RSP: 002b:00007fc8b1203028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 180.249486][ T6521] RAX: ffffffffffffffda RBX: 00007fc8b0625fa0 RCX: 00007fc8b039e159 [ 180.257468][ T6521] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000004 [ 180.265467][ T6521] RBP: 00007fc8b043506b R08: 0000000000000000 R09: 0000000000000000 [ 180.273448][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.281427][ T6521] R13: 00007fc8b0626038 R14: 00007fc8b0625fa0 R15: 00007ffed8667028 [ 180.289428][ T6521] [ 180.556606][ T6525] Illegal XDP return value 4294967274 on prog (id 14) dev syz_tun, expect packet loss! [ 180.870753][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 181.165801][ T6537] loop2: detected capacity change from 0 to 256 [ 181.177079][ T6536] binder: 6534:6536 ioctl c0306201 0 returned -14 [ 182.220412][ T6546] loop3: detected capacity change from 0 to 2048 [ 182.288097][ T6546] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 182.404683][ T6549] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.406894][ T6546] syz.3.222: attempt to access beyond end of device [ 182.406894][ T6546] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 182.563071][ T6554] sch_tbf: burst 6 is lower than device ip6tnl0 mtu (1452) ! [ 186.596657][ T5728] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.670971][ T5728] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.677799][ T6582] binder: 6581:6582 ioctl c0306201 0 returned -14 [ 188.313421][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 188.759236][ T6589] ipvlan2: entered allmulticast mode [ 188.764697][ T6589] syz_tun: entered allmulticast mode [ 189.855783][ T6597] loop3: detected capacity change from 0 to 2048 [ 189.982391][ T6601] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.954350][ T6605] loop0: detected capacity change from 0 to 512 [ 191.010920][ T6605] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.250: inode has both inline data and extents flags [ 191.068711][ T6605] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.250: couldn't read orphan inode 15 (err -117) [ 191.131156][ T6605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.302836][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.827410][ T5780] Bluetooth: hci2: link tx timeout [ 191.833058][ T5780] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.172616][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 194.593901][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.601236][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.628698][ T6644] sch_tbf: burst 6 is lower than device ip6tnl0 mtu (1452) ! [ 194.971296][ T6644] FAULT_INJECTION: forcing a failure. [ 194.971296][ T6644] name failslab, interval 1, probability 0, space 0, times 0 [ 195.248540][ T6644] CPU: 0 PID: 6644 Comm: syz.1.263 Not tainted syzkaller #0 [ 195.255906][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.266000][ T6644] Call Trace: [ 195.269312][ T6644] [ 195.272271][ T6644] dump_stack_lvl+0x18c/0x250 [ 195.276997][ T6644] ? show_regs_print_info+0x20/0x20 [ 195.282229][ T6644] ? load_image+0x420/0x420 [ 195.286773][ T6644] ? __might_sleep+0xe0/0xe0 [ 195.291411][ T6644] ? __lock_acquire+0x7d80/0x7d80 [ 195.296479][ T6644] should_fail_ex+0x394/0x4c0 [ 195.301201][ T6644] should_failslab+0x9/0x20 [ 195.305740][ T6644] slab_pre_alloc_hook+0x59/0x300 [ 195.310809][ T6644] kmem_cache_alloc_node+0x5e/0x310 [ 195.316054][ T6644] ? __alloc_skb+0x103/0x2c0 [ 195.320686][ T6644] __alloc_skb+0x103/0x2c0 [ 195.325139][ T6644] qdisc_notify+0x86/0x370 [ 195.329593][ T6644] qdisc_graft+0x133d/0x17d0 [ 195.334231][ T6644] ? qdisc_create+0x1060/0x1060 [ 195.339119][ T6644] ? qdisc_notify+0x370/0x370 [ 195.343845][ T6644] tc_modify_qdisc+0xe95/0x1de0 [ 195.348743][ T6644] ? qdisc_offload_query_caps+0x150/0x150 [ 195.354524][ T6644] ? qdisc_offload_query_caps+0x150/0x150 [ 195.360271][ T6644] rtnetlink_rcv_msg+0x843/0xf90 [ 195.365246][ T6644] ? rtnetlink_rcv_msg+0x220/0xf90 [ 195.370421][ T6644] ? rtnetlink_bind+0x80/0x80 [ 195.375164][ T6644] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 195.381184][ T6644] ? lock_chain_count+0x20/0x20 [ 195.386061][ T6644] ? __local_bh_enable_ip+0x13a/0x1c0 [ 195.391447][ T6644] ? lockdep_hardirqs_on+0x98/0x150 [ 195.396753][ T6644] ? __local_bh_enable_ip+0x13a/0x1c0 [ 195.402149][ T6644] ? _local_bh_enable+0xa0/0xa0 [ 195.407021][ T6644] ? __dev_queue_xmit+0x272/0x37e0 [ 195.412149][ T6644] ? __dev_queue_xmit+0x1329/0x37e0 [ 195.417363][ T6644] ? __dev_queue_xmit+0x272/0x37e0 [ 195.422500][ T6644] ? ref_tracker_free+0x686/0x830 [ 195.427541][ T6644] netlink_rcv_skb+0x235/0x4c0 [ 195.432324][ T6644] ? rtnetlink_bind+0x80/0x80 [ 195.437471][ T6644] ? netlink_ack+0x1160/0x1160 [ 195.442266][ T6644] ? __lock_acquire+0x7d80/0x7d80 [ 195.447328][ T6644] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.452554][ T6644] netlink_unicast+0x7b1/0x930 [ 195.457341][ T6644] netlink_sendmsg+0x8d0/0xbf0 [ 195.462126][ T6644] ? netlink_getsockopt+0x590/0x590 [ 195.467348][ T6644] ? apparmor_socket_sendmsg+0x170/0x330 [ 195.472994][ T6644] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 195.478291][ T6644] ? security_socket_sendmsg+0x80/0xa0 [ 195.483776][ T6644] ? netlink_getsockopt+0x590/0x590 [ 195.489007][ T6644] ____sys_sendmsg+0x61b/0x980 [ 195.493791][ T6644] ? __asan_memset+0x22/0x40 [ 195.498409][ T6644] ? __sys_sendmsg_sock+0x30/0x30 [ 195.503447][ T6644] ? __import_iovec+0x5f2/0x850 [ 195.508347][ T6644] ? import_iovec+0x73/0xa0 [ 195.512882][ T6644] ___sys_sendmsg+0x2a6/0x360 [ 195.517586][ T6644] ? __sys_sendmsg+0x2b0/0x2b0 [ 195.522416][ T6644] __se_sys_sendmsg+0x1d0/0x2c0 [ 195.527305][ T6644] ? __x64_sys_sendmsg+0x80/0x80 [ 195.532279][ T6644] ? lockdep_hardirqs_on+0x98/0x150 [ 195.537498][ T6644] do_syscall_64+0x55/0xb0 [ 195.541942][ T6644] ? clear_bhb_loop+0x40/0x90 [ 195.546659][ T6644] ? clear_bhb_loop+0x40/0x90 [ 195.551374][ T6644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.557310][ T6644] RIP: 0033:0x7fc8b039e159 [ 195.561744][ T6644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.581735][ T6644] RSP: 002b:00007fc8b11e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.590167][ T6644] RAX: ffffffffffffffda RBX: 00007fc8b0626090 RCX: 00007fc8b039e159 [ 195.598151][ T6644] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000007 [ 195.606130][ T6644] RBP: 00007fc8b043506b R08: 0000000000000000 R09: 0000000000000000 [ 195.614111][ T6644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.622091][ T6644] R13: 00007fc8b0626128 R14: 00007fc8b0626090 R15: 00007ffed8667028 [ 195.630095][ T6644] [ 198.625626][ T6670] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 198.757002][ T6670] syz.3.272 (6670) used greatest stack depth: 18384 bytes left [ 202.645435][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 202.653659][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 202.786133][ T6668] loop1: detected capacity change from 0 to 32768 [ 202.846652][ T6668] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop1": -EINTR [ 210.116068][ T28] audit: type=1800 audit(1789924873.444:2): pid=6733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.284" name="id" dev="configfs" ino=9161 res=0 errno=0 [ 210.222297][ T6737] netlink: 'syz.2.286': attribute type 20 has an invalid length. [ 210.230748][ T6737] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.240416][ T6737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.247953][ T6737] IPv6: NLM_F_CREATE should be set when creating new route [ 211.611238][ T6740] input: syz0 as /devices/virtual/input/input6 [ 211.917487][ T56] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 212.129167][ T56] usb 1-1: Dual-Role OTG device on HNP port [ 212.153536][ T56] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 212.189208][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.228967][ T56] gspca_main: spca501-2.14.0 probing 0000:0000 [ 212.247467][ T56] gspca_spca501: reg write: error -32 [ 212.252912][ T56] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 212.277507][ T56] spca501: probe of 1-1:1.0 failed with error -22 [ 212.310320][ T56] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 215.279378][ T6758] loop1: detected capacity change from 0 to 32768 [ 215.475176][ T6767] netlink: 'syz.0.299': attribute type 3 has an invalid length. [ 215.513015][ T5781] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 215.513015][ T5781] [ 215.539679][ T6767] netlink: 224 bytes leftover after parsing attributes in process `syz.0.299'. [ 215.556752][ T5781] ERROR: (device loop1): remounting filesystem as read-only [ 215.837560][ T5817] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 215.943845][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.960408][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.970166][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.983418][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.993635][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.009717][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.038573][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 216.046324][ T5817] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 216.055916][ T5817] usb 3-1: config 0 has no interface number 0 [ 216.068148][ T5817] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 216.078114][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.086164][ T5817] usb 3-1: Product: syz [ 216.090691][ T5817] usb 3-1: Manufacturer: syz [ 216.095317][ T5817] usb 3-1: SerialNumber: syz [ 217.390003][ T5817] usb 3-1: config 0 descriptor?? [ 217.403391][ T5817] hub 3-1:0.132: bad descriptor, ignoring hub [ 217.409589][ T5817] hub: probe of 3-1:0.132 failed with error -5 [ 217.423877][ T5817] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input7 [ 218.094283][ T5776] Bluetooth: hci1: command tx timeout [ 218.754622][ T6777] chnl_net:caif_netlink_parms(): no params data found [ 219.792234][ T6777] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.812442][ T6777] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.818405][ T6801] Bluetooth: MGMT ver 1.22 [ 219.819858][ T6777] bridge_slave_0: entered allmulticast mode [ 219.831824][ T6777] bridge_slave_0: entered promiscuous mode [ 219.841655][ T6777] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.850215][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.858133][ T6777] bridge_slave_1: entered allmulticast mode [ 219.865601][ T6777] bridge_slave_1: entered promiscuous mode [ 219.902430][ T6777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.916937][ T6777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.014005][ T6777] team0: Port device team_slave_0 added [ 220.030753][ T6777] team0: Port device team_slave_1 added [ 220.233699][ T5776] Bluetooth: hci1: command tx timeout [ 220.311272][ T5125] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 220.525608][ T5125] usb 3-1: device reset changed ep0 maxpacket size! [ 220.556092][ T5728] usb 3-1: USB disconnect, device number 6 [ 220.769301][ T6777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.232312][ T6777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.617417][ T6777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.647883][ T6777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.663648][ T6777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.699405][ T6777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.814144][ T6777] hsr_slave_0: entered promiscuous mode [ 221.821337][ T6777] hsr_slave_1: entered promiscuous mode [ 221.830367][ T6777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.838375][ T6777] Cannot create hsr debugfs directory [ 221.877441][ T5728] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 222.075719][ T5728] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 222.103714][ T5728] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 222.125096][ T5728] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 222.139355][ T6777] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.144078][ T5728] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 222.167899][ T6777] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.174303][ T6819] loop0: detected capacity change from 0 to 32768 [ 222.206225][ T6819] BTRFS: device fsid cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 devid 1 transid 8 /dev/loop0 scanned by syz.0.315 (6819) [ 222.206777][ T6777] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.232139][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.256815][ T6806] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 222.267764][ T5776] Bluetooth: hci1: command tx timeout [ 222.275871][ T6777] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.278154][ T6819] BTRFS info (device loop0): first mount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 222.283660][ T5728] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 222.309209][ T6819] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 222.319000][ T6819] BTRFS info (device loop0): using free space tree [ 222.355804][ T5728] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 222.488926][ T6819] BTRFS info (device loop0): enabling ssd optimizations [ 222.496240][ T6777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.527376][ T6819] BTRFS info (device loop0): auto enabling async discard [ 222.550720][ T6777] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.556853][ T6806] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 222.589639][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.597775][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.645135][ T5816] usb 3-1: USB disconnect, device number 7 [ 222.655277][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.662860][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.690505][ T5816] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 222.735133][ T5816] cyberjack 3-1:1.0: device disconnected [ 222.796975][ T5774] BTRFS info (device loop0): last unmount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 222.799746][ T6777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.146512][ T6777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.439104][ T6848] loop0: detected capacity change from 0 to 512 [ 223.508296][ T6848] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.639364][ T6848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.798324][ T6848] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.824417][ T6845] loop1: detected capacity change from 0 to 4096 [ 224.347656][ T5776] Bluetooth: hci1: command tx timeout [ 224.467633][ T6845] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 224.556825][ T6777] veth0_vlan: entered promiscuous mode [ 224.625528][ T6777] veth1_vlan: entered promiscuous mode [ 224.692741][ T6777] veth0_macvtap: entered promiscuous mode [ 224.728098][ T6777] veth1_macvtap: entered promiscuous mode [ 224.766801][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.785824][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.803557][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.825310][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.879012][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.890563][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.902639][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.024315][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.061826][ T6858] netlink: 'syz.2.319': attribute type 3 has an invalid length. [ 225.188782][ T6858] netlink: 224 bytes leftover after parsing attributes in process `syz.2.319'. [ 225.236265][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.497878][ T6777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.563320][ T6863] netlink: 'syz.1.318': attribute type 20 has an invalid length. [ 225.571305][ T6863] IPv6: NLM_F_CREATE should be specified when creating new route [ 225.579309][ T6863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.586541][ T6863] IPv6: NLM_F_CREATE should be set when creating new route [ 225.634099][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.687315][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.718255][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.749343][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.775700][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.786701][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.803181][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.814273][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.846402][ T6777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.913991][ T6777] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.958618][ T6777] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.001489][ T6777] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.027776][ T6777] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.331035][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.360192][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.411959][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.425686][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.577381][ T5816] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 227.230361][ T5816] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 227.490094][ T5816] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 227.503718][ T5816] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 227.515463][ T5816] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 227.526252][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.762225][ T6870] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 227.890940][ T5816] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 227.926619][ T5816] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 228.210640][ T5817] usb 3-1: USB disconnect, device number 8 [ 228.241790][ T5817] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 228.276352][ T5817] cyberjack 3-1:1.0: device disconnected [ 230.961906][ T28] audit: type=1800 audit(1789924894.294:3): pid=6907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.330" name="id" dev="configfs" ino=11287 res=0 errno=0 [ 231.470580][ T6921] loop1: detected capacity change from 0 to 512 [ 231.500245][ T6921] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 231.522207][ T6921] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 231.544730][ T6921] EXT4-fs (loop1): 1 truncate cleaned up [ 231.553132][ T6921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.936655][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.516645][ T6923] loop2: detected capacity change from 0 to 32768 [ 233.547849][ T6923] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.337 (6923) [ 233.561756][ T6933] loop1: detected capacity change from 0 to 8192 [ 233.579104][ T6935] loop4: detected capacity change from 0 to 4096 [ 233.613638][ T6923] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 233.654512][ T6933] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 233.678693][ T6923] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 233.719898][ T6923] BTRFS info (device loop2): disabling tree log [ 233.726225][ T6923] BTRFS info (device loop2): using free space tree [ 233.807675][ T6935] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 233.998578][ T6952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.009107][ T6923] BTRFS info (device loop2): enabling ssd optimizations [ 234.016101][ T6923] BTRFS info (device loop2): auto enabling async discard [ 234.038564][ T6952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.108829][ T6955] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 234.595257][ T1104] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 234.879520][ T5785] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 236.467786][ T6977] loop0: detected capacity change from 0 to 8192 [ 236.540282][ T6977] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.021751][ T6987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.047765][ T6987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.864594][ T6981] loop2: detected capacity change from 0 to 32768 [ 243.397022][ T7020] loop2: detected capacity change from 0 to 8192 [ 243.421157][ T7020] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.887389][ T5728] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 245.877521][ T5728] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 245.891915][ T5728] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 245.902597][ T5728] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 245.919395][ T5728] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 245.929047][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.955698][ T7026] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 245.990739][ T5728] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 246.027809][ T5728] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 246.162930][ T7022] loop0: detected capacity change from 0 to 32768 [ 246.209185][ T7022] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.366 (7022) [ 246.224813][ T23] usb 5-1: USB disconnect, device number 2 [ 246.259527][ T23] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 246.276594][ T7022] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.301356][ T23] cyberjack 5-1:1.0: device disconnected [ 246.318039][ T7022] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 246.347586][ T7022] BTRFS info (device loop0): disabling tree log [ 246.356637][ T7022] BTRFS info (device loop0): using free space tree [ 246.375041][ T7022] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 246.377467][ T7022] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 246.397763][ T7022] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 246.432720][ T7022] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 246.470239][ T7022] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 246.512523][ T7022] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 246.548800][ T7022] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 246.581916][ T7022] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 246.616717][ T7022] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 246.649008][ T7022] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 246.687956][ T7022] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 246.724084][ T7022] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 246.787606][ T7022] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 246.857485][ T7022] BTRFS error (device loop0): open_ctree failed: -12 [ 247.605171][ T28] audit: type=1800 audit(1789924910.934:4): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.376" name="id" dev="configfs" ino=11443 res=0 errno=0 [ 248.136565][ T7076] loop4: detected capacity change from 0 to 4096 [ 248.429880][ T7076] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 249.114399][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.263658][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.428547][ T7076] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 249.454998][ T7076] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 250.037036][ T28] audit: type=1800 audit(1789924913.364:5): pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.386" name="id" dev="configfs" ino=10845 res=0 errno=0 [ 253.668033][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 253.857332][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 253.870725][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 253.903156][ T23] usb 5-1: config 9 has an invalid interface number: 57 but max is 0 [ 253.923685][ T23] usb 5-1: config 9 has no interface number 0 [ 253.933837][ T23] usb 5-1: config 9 interface 57 has no altsetting 0 [ 253.951153][ T23] usb 5-1: string descriptor 0 read error: -22 [ 253.957981][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 253.967091][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.900806][ T7120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.919813][ T7120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.038780][ T23] video4linux radio48: keene_cmd_set failed (-71) [ 255.052600][ T23] radio-keene 5-1:9.57: V4L2 device registered as radio48 [ 255.079716][ T23] usb 5-1: USB disconnect, device number 3 [ 256.048351][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.054765][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.420018][ T28] audit: type=1800 audit(1789924921.754:6): pid=7149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.405" name="id" dev="configfs" ino=10941 res=0 errno=0 [ 258.461431][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.481304][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.544486][ T7154] loop4: detected capacity change from 0 to 4096 [ 258.633694][ T7154] ntfs3: loop4: ino=19, mi_enum_attr [ 258.724718][ T7160] loop2: detected capacity change from 0 to 4096 [ 258.753243][ T7160] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 258.885868][ T7160] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 258.906616][ T7160] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 259.249391][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 259.522904][ T7164] team0: Port device team_slave_0 removed [ 259.810741][ T7162] loop4: detected capacity change from 0 to 32768 [ 259.894985][ T7162] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 259.932736][ T7174] loop2: detected capacity change from 0 to 2048 [ 259.999983][ T7174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.087461][ T7174] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.119381][ T7180] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 260.125446][ T7162] XFS (loop4): Ending clean mount [ 260.389713][ T6777] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 260.820675][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.134723][ T7188] loop0: detected capacity change from 0 to 512 [ 261.288722][ T7188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.328040][ T7188] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.140297][ T7200] EXT4-fs (loop0): shut down requested (2) [ 262.148028][ T28] audit: type=1800 audit(1789924925.484:7): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.417" name="id" dev="configfs" ino=11587 res=0 errno=0 [ 262.327055][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.553503][ T7205] loop0: detected capacity change from 0 to 4096 [ 262.644552][ T7205] ntfs3: loop0: ino=19, mi_enum_attr [ 262.747352][ T5817] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 262.963363][ T5817] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 262.975520][ T5817] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 263.017372][ T5817] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 263.043781][ T5817] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 263.052379][ T7208] loop0: detected capacity change from 0 to 4096 [ 263.055963][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.086636][ T7208] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 263.103800][ T7206] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 263.120411][ T5817] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 263.167392][ T5817] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 263.253305][ T7208] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 263.283179][ T7212] loop4: detected capacity change from 0 to 2364 [ 263.300465][ T7208] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 263.384702][ T5815] usb 3-1: USB disconnect, device number 9 [ 263.409397][ T5815] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 263.453003][ T5815] cyberjack 3-1:1.0: device disconnected [ 269.784349][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.794046][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.802584][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.810841][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.819126][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.826429][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.030155][ T7222] chnl_net:caif_netlink_parms(): no params data found [ 270.096330][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.103926][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.111825][ T7222] bridge_slave_0: entered allmulticast mode [ 270.119644][ T7222] bridge_slave_0: entered promiscuous mode [ 270.127889][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.135017][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.142585][ T7222] bridge_slave_1: entered allmulticast mode [ 270.150105][ T7222] bridge_slave_1: entered promiscuous mode [ 270.210151][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.229900][ T7222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.241846][ T7222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.271939][ T7222] team0: Port device team_slave_0 added [ 270.280584][ T7222] team0: Port device team_slave_1 added [ 270.306803][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.314980][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.341644][ T7222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.370437][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.388919][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.395911][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.422703][ T7222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.007338][ T5780] Bluetooth: hci4: command tx timeout [ 272.084817][ T7237] loop2: detected capacity change from 0 to 4096 [ 272.087071][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.140231][ T28] audit: type=1800 audit(1789924935.474:8): pid=7232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.428" name="id" dev="configfs" ino=11670 res=0 errno=0 [ 272.227231][ T7237] ntfs3: loop2: ino=19, mi_enum_attr [ 272.430294][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'. [ 272.469303][ T7244] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 272.537136][ T7222] hsr_slave_0: entered promiscuous mode [ 272.576148][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'. [ 272.608363][ T7245] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 272.617612][ T7222] hsr_slave_1: entered promiscuous mode [ 272.667489][ T7222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.685570][ T7222] Cannot create hsr debugfs directory [ 272.891311][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.172312][ T28] audit: type=1800 audit(1789924936.504:9): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.435" name="zoned" dev="configfs" ino=11700 res=0 errno=0 [ 273.529052][ T28] audit: type=1800 audit(1789924936.534:10): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.435" name="zone_nr_conv" dev="configfs" ino=11701 res=0 errno=0 [ 274.027314][ T5780] Bluetooth: hci4: command tx timeout [ 274.063646][ T28] audit: type=1800 audit(1789924936.724:11): pid=7255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.435" name="power" dev="configfs" ino=11113 res=0 errno=0 [ 276.107440][ T5780] Bluetooth: hci4: command tx timeout [ 276.309637][ T7222] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 276.450190][ T7275] FAULT_INJECTION: forcing a failure. [ 276.450190][ T7275] name failslab, interval 1, probability 0, space 0, times 0 [ 276.495777][ T7222] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 276.504902][ T7275] CPU: 0 PID: 7275 Comm: syz.4.431 Not tainted syzkaller #0 [ 276.511459][ T7222] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 276.512232][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.529037][ T7275] Call Trace: [ 276.532344][ T7275] [ 276.535312][ T7275] dump_stack_lvl+0x18c/0x250 [ 276.540055][ T7275] ? show_regs_print_info+0x20/0x20 [ 276.545307][ T7275] ? load_image+0x420/0x420 [ 276.549865][ T7275] ? __might_sleep+0xe0/0xe0 [ 276.554512][ T7275] ? __lock_acquire+0x7d80/0x7d80 [ 276.559594][ T7275] should_fail_ex+0x394/0x4c0 [ 276.564346][ T7275] should_failslab+0x9/0x20 [ 276.568901][ T7275] slab_pre_alloc_hook+0x59/0x300 [ 276.573988][ T7275] kmem_cache_alloc_lru+0x4d/0x2b0 [ 276.579153][ T7275] ? sock_alloc_inode+0x28/0xc0 [ 276.584063][ T7275] sock_alloc_inode+0x28/0xc0 [ 276.588795][ T7275] ? sockfs_init_fs_context+0xb0/0xb0 [ 276.594225][ T7275] new_inode_pseudo+0x63/0x1d0 [ 276.599038][ T7275] __sock_create+0x12d/0x940 [ 276.603682][ T7275] sctp_do_peeloff+0x3bf/0x690 [ 276.608498][ T7275] ? sctp_transport_traverse_process+0x490/0x490 [ 276.614881][ T7275] ? __lock_acquire+0x7d80/0x7d80 [ 276.619957][ T7275] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 276.626000][ T7275] sctp_getsockopt_peeloff_common+0x63/0x280 [ 276.632040][ T7275] sctp_getsockopt_peeloff_flags+0x148/0x230 [ 276.638592][ T7275] ? sctp_getsockopt_peeloff+0x230/0x230 [ 276.644288][ T7275] sctp_getsockopt+0x3a7/0xb60 [ 276.649119][ T7275] ? sock_recv_errqueue+0x5e0/0x5e0 [ 276.654375][ T7275] do_sock_getsockopt+0x379/0x450 [ 276.659457][ T7275] ? __ia32_sys_setsockopt+0x200/0x200 [ 276.664971][ T7275] ? warn_bogus_irq_restore+0x20/0x30 [ 276.670401][ T7275] __x64_sys_getsockopt+0x1d6/0x280 [ 276.675655][ T7275] ? warn_bogus_irq_restore+0x20/0x30 [ 276.681072][ T7275] ? warn_bogus_irq_restore+0x20/0x30 [ 276.686500][ T7275] do_syscall_64+0x55/0xb0 [ 276.690970][ T7275] ? clear_bhb_loop+0x40/0x90 [ 276.695692][ T7275] ? clear_bhb_loop+0x40/0x90 [ 276.700424][ T7275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.706370][ T7275] RIP: 0033:0x7f27aed9e159 [ 276.710827][ T7275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.730495][ T7275] RSP: 002b:00007f27afbe9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 276.738964][ T7275] RAX: ffffffffffffffda RBX: 00007f27af025fa0 RCX: 00007f27aed9e159 [ 276.746982][ T7275] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 276.754998][ T7275] RBP: 00007f27aee3506b R08: 0000200000000040 R09: 0000000000000000 [ 276.763013][ T7275] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 276.771029][ T7275] R13: 00007f27af026038 R14: 00007f27af025fa0 R15: 00007fff6c8e15c8 [ 276.779066][ T7275] [ 276.791420][ T7275] socket: no more sockets [ 276.798871][ T7222] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 277.143706][ T7222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.179211][ T7222] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.218035][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.225193][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.254228][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.261465][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.845917][ T11] hsr_slave_0: left promiscuous mode [ 277.852011][ T11] hsr_slave_1: left promiscuous mode [ 277.862192][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.870193][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.882165][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.890273][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.899789][ T11] bridge_slave_1: left allmulticast mode [ 277.905462][ T11] bridge_slave_1: left promiscuous mode [ 277.913068][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.926329][ T11] bridge_slave_0: left allmulticast mode [ 277.934067][ T11] bridge_slave_0: left promiscuous mode [ 277.939948][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.964936][ T11] veth1_macvtap: left promiscuous mode [ 277.971223][ T11] veth0_macvtap: left promiscuous mode [ 277.978323][ T11] veth1_vlan: left promiscuous mode [ 277.983730][ T11] veth0_vlan: left promiscuous mode [ 278.194704][ T5776] Bluetooth: hci4: command tx timeout [ 278.614281][ T11] team0 (unregistering): Port device team_slave_1 removed [ 278.661394][ T11] team0 (unregistering): Port device team_slave_0 removed [ 278.715067][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.762458][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.135334][ T11] bond0 (unregistering): Released all slaves [ 279.206264][ T7222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.654985][ T11] IPVS: stop unused estimator thread 0... [ 279.777105][ T7222] veth0_vlan: entered promiscuous mode [ 279.802344][ T7222] veth1_vlan: entered promiscuous mode [ 279.859055][ T7222] veth0_macvtap: entered promiscuous mode [ 279.872841][ T7222] veth1_macvtap: entered promiscuous mode [ 279.902873][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.914437][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.925103][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.936677][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.947048][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.959672][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.969844][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.980994][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.992778][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.006876][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.018525][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.034945][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.061971][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.076206][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.094988][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.106214][ T7222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.116872][ T7222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.130670][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.167136][ T7222] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.176237][ T7222] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.186742][ T7222] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.195923][ T7222] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.267713][ T5776] Bluetooth: hci4: command tx timeout [ 280.295926][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.312163][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.351067][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.368129][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.626525][ T7326] bond0: (slave ip6tnl1): refused to change device type [ 282.812870][ T7335] tipc: Started in network mode [ 282.828791][ T7335] tipc: Node identity , cluster identity 4711 [ 282.849610][ T7335] tipc: Failed to obtain node identity [ 282.855156][ T7335] tipc: Enabling of bearer rejected, failed to enable media [ 283.033499][ T28] audit: type=1800 audit(1789924946.364:12): pid=7348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.439" name="id" dev="configfs" ino=12169 res=0 errno=0 [ 283.356258][ T7361] loop0: detected capacity change from 0 to 512 [ 283.443917][ T7361] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 283.487697][ T7361] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 283.495858][ T7361] System zones: 0-1, 15-15, 18-18, 34-34 [ 283.528034][ T7361] EXT4-fs (loop0): orphan cleanup on readonly fs [ 283.536970][ T7361] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 283.546831][ T7361] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 283.563336][ T7361] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 283.571627][ T7361] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.443: bad orphan inode 16 [ 283.593900][ T7361] ext4_test_bit(bit=15, block=18) = 1 [ 283.607518][ T7361] is_bad_inode(inode)=0 [ 283.611747][ T7361] NEXT_ORPHAN(inode)=0 [ 283.626611][ T7361] max_ino=32 [ 283.641420][ T7361] i_nlink=2 [ 283.658579][ T7361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 283.673254][ T28] audit: type=1800 audit(1789924946.984:13): pid=7367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.444" name="zoned" dev="configfs" ino=12199 res=0 errno=0 [ 283.714496][ T28] audit: type=1800 audit(1789924947.034:14): pid=7367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.444" name="zone_nr_conv" dev="configfs" ino=12200 res=0 errno=0 [ 283.892802][ T28] audit: type=1800 audit(1789924947.224:15): pid=7370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.444" name="power" dev="configfs" ino=12513 res=0 errno=0 [ 284.225888][ T5780] Bluetooth: hci4: command tx timeout [ 284.261249][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.078727][ T7376] loop0: detected capacity change from 0 to 512 [ 286.998639][ T7376] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 287.007059][ T7376] System zones: 0-2, 18-18, 34-34 [ 287.540204][ T7376] EXT4-fs (loop0): 1 orphan inode deleted [ 287.552104][ T7376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.593892][ T7376] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.162073][ T7390] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 288.173737][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.299592][ T7393] loop5: detected capacity change from 0 to 16 [ 288.342229][ T7393] erofs: (device loop5): mounted with root inode @ nid 36. [ 288.403884][ T7393] syz.5.453: attempt to access beyond end of device [ 288.403884][ T7393] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 288.466480][ T7393] syz.5.453: attempt to access beyond end of device [ 288.466480][ T7393] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 288.547400][ T7393] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -41 in[61, 4035] out[8192] [ 288.597307][ T28] audit: type=1800 audit(1789924951.914:16): pid=7393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.453" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 290.022858][ T7423] FAULT_INJECTION: forcing a failure. [ 290.022858][ T7423] name failslab, interval 1, probability 0, space 0, times 0 [ 290.073567][ T7423] CPU: 1 PID: 7423 Comm: syz.0.467 Not tainted syzkaller #0 [ 290.080961][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.091060][ T7423] Call Trace: [ 290.094388][ T7423] [ 290.097359][ T7423] dump_stack_lvl+0x18c/0x250 [ 290.102093][ T7423] ? show_regs_print_info+0x20/0x20 [ 290.107338][ T7423] ? load_image+0x420/0x420 [ 290.111900][ T7423] ? __might_sleep+0xe0/0xe0 [ 290.116541][ T7423] ? __lock_acquire+0x7d80/0x7d80 [ 290.121622][ T7423] should_fail_ex+0x394/0x4c0 [ 290.126369][ T7423] should_failslab+0x9/0x20 [ 290.130915][ T7423] slab_pre_alloc_hook+0x59/0x300 [ 290.135979][ T7423] kmem_cache_alloc_lru+0x4d/0x2b0 [ 290.141136][ T7423] ? sock_alloc_inode+0x28/0xc0 [ 290.146040][ T7423] sock_alloc_inode+0x28/0xc0 [ 290.150764][ T7423] ? sockfs_init_fs_context+0xb0/0xb0 [ 290.154760][ T7429] loop4: detected capacity change from 0 to 2048 [ 290.156163][ T7423] new_inode_pseudo+0x63/0x1d0 [ 290.167314][ T7423] __sock_create+0x12d/0x940 [ 290.171962][ T7423] sctp_do_peeloff+0x3bf/0x690 [ 290.176776][ T7423] ? sctp_transport_traverse_process+0x490/0x490 [ 290.183131][ T7423] ? __lock_acquire+0x7d80/0x7d80 [ 290.188178][ T7423] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 290.194183][ T7423] sctp_getsockopt_peeloff_common+0x63/0x280 [ 290.200187][ T7423] sctp_getsockopt_peeloff_flags+0x148/0x230 [ 290.206180][ T7423] ? sctp_getsockopt_peeloff+0x230/0x230 [ 290.211834][ T7423] sctp_getsockopt+0x3a7/0xb60 [ 290.216618][ T7423] ? sock_recv_errqueue+0x5e0/0x5e0 [ 290.221837][ T7423] do_sock_getsockopt+0x379/0x450 [ 290.226900][ T7423] ? __ia32_sys_setsockopt+0x200/0x200 [ 290.232374][ T7423] ? warn_bogus_irq_restore+0x20/0x30 [ 290.237786][ T7423] __x64_sys_getsockopt+0x1d6/0x280 [ 290.242999][ T7423] ? warn_bogus_irq_restore+0x20/0x30 [ 290.248382][ T7423] ? warn_bogus_irq_restore+0x20/0x30 [ 290.253769][ T7423] do_syscall_64+0x55/0xb0 [ 290.258202][ T7423] ? clear_bhb_loop+0x40/0x90 [ 290.262903][ T7423] ? clear_bhb_loop+0x40/0x90 [ 290.267602][ T7423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.273513][ T7423] RIP: 0033:0x7f8cdcf9e159 [ 290.277944][ T7423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.297563][ T7423] RSP: 002b:00007f8cdb1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 290.305988][ T7423] RAX: ffffffffffffffda RBX: 00007f8cdd225fa0 RCX: 00007f8cdcf9e159 [ 290.313969][ T7423] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 290.321948][ T7423] RBP: 00007f8cdd03506b R08: 0000200000000040 R09: 0000000000000000 [ 290.329930][ T7423] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 290.337925][ T7423] R13: 00007f8cdd226038 R14: 00007f8cdd225fa0 R15: 00007ffd8f3636c8 [ 290.345926][ T7423] [ 290.356030][ T7428] kernel read not supported for file /!selinu˙ (pid: 7428 comm: syz.2.460) [ 290.374910][ T28] audit: type=1800 audit(1789924953.704:17): pid=7428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.460" name=2173656C696E75FF7F dev="mqueue" ino=12581 res=0 errno=0 [ 290.414631][ T7423] socket: no more sockets [ 290.425460][ T7429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.450119][ T7429] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.818062][ T56] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 291.835591][ T6777] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.901881][ T7452] loop5: detected capacity change from 0 to 128 [ 292.211930][ T56] usb 3-1: Using ep0 maxpacket: 8 [ 292.220766][ T56] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 292.239790][ T56] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 292.257501][ T56] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 292.268609][ T56] usb 3-1: Product: syz [ 292.278500][ T56] usb 3-1: Manufacturer: syz [ 292.947574][ T5780] Bluetooth: Unknown LE signaling command 0x08 [ 292.954233][ T5780] Bluetooth: Wrong link type (-22) [ 293.001638][ T56] usb 3-1: SerialNumber: syz [ 293.175756][ T7474] FAULT_INJECTION: forcing a failure. [ 293.175756][ T7474] name failslab, interval 1, probability 0, space 0, times 0 [ 293.224688][ T7474] CPU: 0 PID: 7474 Comm: syz.5.472 Not tainted syzkaller #0 [ 293.232057][ T7474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.242159][ T7474] Call Trace: [ 293.245474][ T7474] [ 293.248435][ T7474] dump_stack_lvl+0x18c/0x250 [ 293.249815][ T56] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 293.253146][ T7474] ? show_regs_print_info+0x20/0x20 [ 293.253179][ T7474] ? load_image+0x420/0x420 [ 293.271190][ T7474] ? __might_sleep+0xe0/0xe0 [ 293.275837][ T7474] ? __lock_acquire+0x7d80/0x7d80 [ 293.279264][ T7476] loop0: detected capacity change from 0 to 512 [ 293.280887][ T7474] should_fail_ex+0x394/0x4c0 [ 293.291858][ T7474] should_failslab+0x9/0x20 [ 293.296417][ T7474] slab_pre_alloc_hook+0x59/0x300 [ 293.301500][ T7474] kmem_cache_alloc_lru+0x4d/0x2b0 [ 293.302380][ T56] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 293.306640][ T7474] ? sock_alloc_inode+0x28/0xc0 [ 293.318473][ T7476] ext4: Bad value for 'data' [ 293.319299][ T7474] sock_alloc_inode+0x28/0xc0 [ 293.328633][ T7474] ? sockfs_init_fs_context+0xb0/0xb0 [ 293.334059][ T7474] new_inode_pseudo+0x63/0x1d0 [ 293.338872][ T7474] __sock_create+0x12d/0x940 [ 293.343520][ T7474] sctp_do_peeloff+0x3bf/0x690 [ 293.344767][ T56] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 293.348317][ T7474] ? sctp_transport_traverse_process+0x490/0x490 [ 293.348350][ T7474] ? __lock_acquire+0x7d80/0x7d80 [ 293.348377][ T7474] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 293.348408][ T7474] sctp_getsockopt_peeloff_common+0x63/0x280 [ 293.356370][ T56] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 293.362543][ T7474] sctp_getsockopt_peeloff_flags+0x148/0x230 [ 293.362574][ T7474] ? sctp_getsockopt_peeloff+0x230/0x230 [ 293.362606][ T7474] sctp_getsockopt+0x3a7/0xb60 [ 293.362634][ T7474] ? sock_recv_errqueue+0x5e0/0x5e0 [ 293.362660][ T7474] do_sock_getsockopt+0x379/0x450 [ 293.362691][ T7474] ? __ia32_sys_setsockopt+0x200/0x200 [ 293.362716][ T7474] ? warn_bogus_irq_restore+0x20/0x30 [ 293.362753][ T7474] __x64_sys_getsockopt+0x1d6/0x280 [ 293.362779][ T7474] ? warn_bogus_irq_restore+0x20/0x30 [ 293.362799][ T7474] ? warn_bogus_irq_restore+0x20/0x30 [ 293.362829][ T7474] do_syscall_64+0x55/0xb0 [ 293.444872][ T7474] ? clear_bhb_loop+0x40/0x90 [ 293.449593][ T7474] ? clear_bhb_loop+0x40/0x90 [ 293.454314][ T7474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.460258][ T7474] RIP: 0033:0x7f3a9299e159 [ 293.463347][ T56] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 293.464691][ T7474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.464711][ T7474] RSP: 002b:00007f3a9391b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 293.464736][ T7474] RAX: ffffffffffffffda RBX: 00007f3a92c25fa0 RCX: 00007f3a9299e159 [ 293.464752][ T7474] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 293.516341][ T7474] RBP: 00007f3a92a3506b R08: 0000200000000040 R09: 0000000000000000 [ 293.524360][ T7474] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 293.532391][ T7474] R13: 00007f3a92c26038 R14: 00007f3a92c25fa0 R15: 00007ffeeb6d94e8 [ 293.540436][ T7474] [ 293.543615][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.560170][ T7474] socket: no more sockets [ 293.566581][ T56] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 293.599702][ T7243] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 293.845336][ T56] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 293.861073][ T56] usb 3-1: USB disconnect, device number 10 [ 293.881058][ T56] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 295.287898][ T56] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 295.303147][ T56] visor 3-1:1.0: device disconnected [ 297.091514][ T28] audit: type=1800 audit(1789924960.424:18): pid=7518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.483" name="zoned" dev="configfs" ino=12687 res=0 errno=0 [ 297.135617][ T28] audit: type=1800 audit(1789924960.424:19): pid=7518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.483" name="zone_nr_conv" dev="configfs" ino=12688 res=0 errno=0 [ 297.269924][ T28] audit: type=1800 audit(1789924960.604:20): pid=7521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.483" name="power" dev="configfs" ino=12691 res=0 errno=0 [ 297.852759][ T7515] loop4: detected capacity change from 0 to 764 [ 298.122861][ T7537] FAULT_INJECTION: forcing a failure. [ 298.122861][ T7537] name failslab, interval 1, probability 0, space 0, times 0 [ 298.135850][ T7537] CPU: 1 PID: 7537 Comm: syz.5.487 Not tainted syzkaller #0 [ 298.143191][ T7537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.153290][ T7537] Call Trace: [ 298.156604][ T7537] [ 298.159584][ T7537] dump_stack_lvl+0x18c/0x250 [ 298.164473][ T7537] ? show_regs_print_info+0x20/0x20 [ 298.169701][ T7537] ? load_image+0x420/0x420 [ 298.174234][ T7537] ? __might_sleep+0xe0/0xe0 [ 298.178846][ T7537] ? __lock_acquire+0x7d80/0x7d80 [ 298.183886][ T7537] ? netlink_rcv_skb+0x235/0x4c0 [ 298.188845][ T7537] should_fail_ex+0x394/0x4c0 [ 298.193548][ T7537] should_failslab+0x9/0x20 [ 298.198079][ T7537] slab_pre_alloc_hook+0x59/0x300 [ 298.203150][ T7537] ? fifo_create_dflt+0x13e/0x2b0 [ 298.208196][ T7537] __kmem_cache_alloc_node+0x53/0x250 [ 298.213636][ T7537] ? fifo_create_dflt+0x13e/0x2b0 [ 298.218679][ T7537] kmalloc_trace+0x2a/0xe0 [ 298.223121][ T7537] fifo_create_dflt+0x13e/0x2b0 [ 298.227993][ T7537] sfb_change+0x1e7/0x9a0 [ 298.232345][ T7537] ? sfb_destroy+0x70/0x70 [ 298.236780][ T7537] ? tcf_block_get+0xa0/0xa0 [ 298.241389][ T7537] ? sfb_peek+0x90/0x90 [ 298.245560][ T7537] qdisc_create+0x90f/0x1060 [ 298.250177][ T7537] ? qdisc_notify+0x370/0x370 [ 298.254871][ T7537] tc_modify_qdisc+0xb47/0x1de0 [ 298.259747][ T7537] ? qdisc_offload_query_caps+0x150/0x150 [ 298.265499][ T7537] ? qdisc_offload_query_caps+0x150/0x150 [ 298.271227][ T7537] rtnetlink_rcv_msg+0x843/0xf90 [ 298.276184][ T7537] ? rtnetlink_rcv_msg+0x220/0xf90 [ 298.281315][ T7537] ? rtnetlink_bind+0x80/0x80 [ 298.286012][ T7537] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 298.292011][ T7537] ? lock_chain_count+0x20/0x20 [ 298.296879][ T7537] ? __local_bh_enable_ip+0x13a/0x1c0 [ 298.302262][ T7537] ? lockdep_hardirqs_on+0x98/0x150 [ 298.307475][ T7537] ? __local_bh_enable_ip+0x13a/0x1c0 [ 298.312861][ T7537] ? _local_bh_enable+0xa0/0xa0 [ 298.317732][ T7537] ? __dev_queue_xmit+0x272/0x37e0 [ 298.322854][ T7537] ? __dev_queue_xmit+0x1329/0x37e0 [ 298.328065][ T7537] ? __dev_queue_xmit+0x272/0x37e0 [ 298.333203][ T7537] ? ref_tracker_free+0x686/0x830 [ 298.338249][ T7537] netlink_rcv_skb+0x235/0x4c0 [ 298.343028][ T7537] ? rtnetlink_bind+0x80/0x80 [ 298.347725][ T7537] ? netlink_ack+0x1160/0x1160 [ 298.352514][ T7537] ? __lock_acquire+0x7d80/0x7d80 [ 298.357566][ T7537] ? netlink_deliver_tap+0x2e/0x1b0 [ 298.362788][ T7537] netlink_unicast+0x7b1/0x930 [ 298.367580][ T7537] netlink_sendmsg+0x8d0/0xbf0 [ 298.372364][ T7537] ? netlink_getsockopt+0x590/0x590 [ 298.377581][ T7537] ? apparmor_socket_sendmsg+0x170/0x330 [ 298.383226][ T7537] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 298.388550][ T7537] ? security_socket_sendmsg+0x80/0xa0 [ 298.394029][ T7537] ? netlink_getsockopt+0x590/0x590 [ 298.399241][ T7537] ____sys_sendmsg+0x61b/0x980 [ 298.404028][ T7537] ? __asan_memset+0x22/0x40 [ 298.408637][ T7537] ? __sys_sendmsg_sock+0x30/0x30 [ 298.413680][ T7537] ? __import_iovec+0x5f2/0x850 [ 298.418561][ T7537] ? import_iovec+0x73/0xa0 [ 298.423091][ T7537] ___sys_sendmsg+0x2a6/0x360 [ 298.427789][ T7537] ? __sys_sendmsg+0x2b0/0x2b0 [ 298.432617][ T7537] __se_sys_sendmsg+0x1d0/0x2c0 [ 298.437485][ T7537] ? __x64_sys_sendmsg+0x80/0x80 [ 298.442456][ T7537] ? lockdep_hardirqs_on+0x98/0x150 [ 298.447674][ T7537] do_syscall_64+0x55/0xb0 [ 298.452116][ T7537] ? clear_bhb_loop+0x40/0x90 [ 298.456809][ T7537] ? clear_bhb_loop+0x40/0x90 [ 298.461503][ T7537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.467413][ T7537] RIP: 0033:0x7f3a9299e159 [ 298.471844][ T7537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.491477][ T7537] RSP: 002b:00007f3a9391b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.499913][ T7537] RAX: ffffffffffffffda RBX: 00007f3a92c25fa0 RCX: 00007f3a9299e159 [ 298.507900][ T7537] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000005 [ 298.515884][ T7537] RBP: 00007f3a92a3506b R08: 0000000000000000 R09: 0000000000000000 [ 298.523863][ T7537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.531840][ T7537] R13: 00007f3a92c26038 R14: 00007f3a92c25fa0 R15: 00007ffeeb6d94e8 [ 298.539841][ T7537] [ 299.867928][ T7556] tipc: Started in network mode [ 299.887634][ T7556] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 299.912522][ T7556] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 299.948889][ T7556] tipc: Enabled bearer , priority 10 [ 301.160729][ T5728] tipc: Node number set to 1 [ 301.485705][ T28] audit: type=1800 audit(1789924964.814:21): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.501" name="zoned" dev="configfs" ino=13448 res=0 errno=0 [ 301.580512][ T28] audit: type=1800 audit(1789924964.814:22): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.501" name="zone_nr_conv" dev="configfs" ino=13449 res=0 errno=0 [ 301.592084][ T7594] loop5: detected capacity change from 0 to 256 [ 301.629244][ T7594] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 301.780190][ T28] audit: type=1800 audit(1789924965.044:23): pid=7594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.500" name="file1" dev="loop5" ino=1048663 res=0 errno=0 [ 306.064323][ T7616] loop0: detected capacity change from 0 to 4096 [ 306.181634][ T7616] ntfs3: loop0: ino=19, mi_enum_attr [ 306.269372][ T28] audit: type=1800 audit(1789924969.604:24): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.512" name="zoned" dev="configfs" ino=13532 res=0 errno=0 [ 306.397302][ T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 306.499581][ T28] audit: type=1800 audit(1789924969.624:25): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.512" name="zone_nr_conv" dev="configfs" ino=13533 res=0 errno=0 [ 307.377285][ T5815] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 307.557351][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.588587][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 307.614770][ T5815] usb 5-1: config index 0 descriptor too short (expected 50, got 32) [ 307.617284][ T27] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 307.631561][ T5815] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.646802][ T27] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.661736][ T27] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 307.672615][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.717591][ T5815] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 307.756768][ T5815] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 307.788324][ T5815] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.873852][ T5815] usb 5-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 307.900319][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.918743][ T5815] usb 5-1: Product: syz [ 307.922978][ T5815] usb 5-1: Manufacturer: syz [ 307.935028][ T5815] usb 5-1: SerialNumber: syz [ 307.960023][ T5815] usb_debug 5-1:1.0: debug converter detected [ 308.014474][ T5815] usb 5-1: debug converter now attached to ttyUSB0 [ 308.084464][ T28] audit: type=1800 audit(1789924971.414:26): pid=7665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.524" name="id" dev="configfs" ino=12869 res=0 errno=0 [ 308.268114][ T5815] usb 5-1: USB disconnect, device number 4 [ 308.302436][ T5815] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 308.324772][ T5815] usb_debug 5-1:1.0: device disconnected [ 310.451601][ T27] gud 3-1:1.0: Failed to get connectors (error=-71) [ 310.474636][ T27] gud: probe of 3-1:1.0 failed with error -71 [ 310.619943][ T27] usb 3-1: USB disconnect, device number 11 [ 311.819335][ T7654] loop5: detected capacity change from 0 to 764 [ 312.801850][ T7699] loop4: detected capacity change from 0 to 4096 [ 313.233357][ T7699] ntfs3: loop4: ino=19, mi_enum_attr [ 313.650121][ T28] audit: type=1800 audit(1789924976.974:27): pid=7716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.526" name="id" dev="configfs" ino=12928 res=0 errno=0 [ 315.457288][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 315.520584][ T7742] loop2: detected capacity change from 0 to 1024 [ 315.559779][ T7742] EXT4-fs: Ignoring removed bh option [ 315.571748][ T7744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.597912][ T7744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.626299][ T7742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.677325][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 315.686407][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.697383][ T9] usb 6-1: config 0 has no interfaces? [ 315.702979][ T9] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 315.712873][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.735785][ T9] usb 6-1: config 0 descriptor?? [ 315.793553][ T7742] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 315.864047][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.957709][ T9] usb 6-1: USB disconnect, device number 2 [ 316.044963][ T7755] loop2: detected capacity change from 0 to 4096 [ 316.078286][ T7755] ntfs3: loop2: ino=19, mi_enum_attr [ 316.397338][ T7769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.406305][ T7769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.067981][ T7761] loop2: detected capacity change from 0 to 764 [ 317.474881][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.481396][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.761942][ T7808] loop5: detected capacity change from 0 to 24 [ 318.790514][ T7808] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 318.837567][ T7808] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 324.089785][ T7877] FAULT_INJECTION: forcing a failure. [ 324.089785][ T7877] name failslab, interval 1, probability 0, space 0, times 0 [ 324.107425][ T7877] CPU: 0 PID: 7877 Comm: syz.5.559 Not tainted syzkaller #0 [ 324.114792][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.124884][ T7877] Call Trace: [ 324.128198][ T7877] [ 324.131169][ T7877] dump_stack_lvl+0x18c/0x250 [ 324.135901][ T7877] ? show_regs_print_info+0x20/0x20 [ 324.141147][ T7877] ? load_image+0x420/0x420 [ 324.145690][ T7877] ? __might_sleep+0xe0/0xe0 [ 324.150324][ T7877] ? __lock_acquire+0x7d80/0x7d80 [ 324.155397][ T7877] should_fail_ex+0x394/0x4c0 [ 324.160125][ T7877] should_failslab+0x9/0x20 [ 324.164673][ T7877] slab_pre_alloc_hook+0x59/0x300 [ 324.169762][ T7877] ? sk_prot_alloc+0xe7/0x210 [ 324.174475][ T7877] ? sk_prot_alloc+0xe7/0x210 [ 324.179183][ T7877] __kmem_cache_alloc_node+0x53/0x250 [ 324.184600][ T7877] ? sk_prot_alloc+0xe7/0x210 [ 324.189334][ T7877] __kmalloc+0xa7/0x240 [ 324.193533][ T7877] ? bpf_lsm_inode_alloc_security+0x9/0x10 [ 324.199423][ T7877] sk_prot_alloc+0xe7/0x210 [ 324.203962][ T7877] ? sk_alloc+0x24/0x350 [ 324.208243][ T7877] sk_alloc+0x3a/0x350 [ 324.212344][ T7877] __netlink_create+0x6c/0x290 [ 324.217143][ T7877] __netlink_kernel_create+0x148/0x7b0 [ 324.222642][ T7877] ? netlink_set_err+0x3b0/0x3b0 [ 324.227619][ T7877] ? __asan_memset+0x22/0x40 [ 324.232256][ T7877] ? genl_pernet_init+0xa8/0x170 [ 324.237339][ T7877] genl_pernet_init+0xba/0x170 [ 324.242148][ T7877] ? ctrl_dumppolicy_put_op+0xa30/0xa30 [ 324.247747][ T7877] ? genl_pernet_exit+0x60/0x60 [ 324.252647][ T7877] ? genl_rcv+0x40/0x40 [ 324.256850][ T7877] ? __raw_spin_lock_init+0x45/0x100 [ 324.262182][ T7877] ? debug_mutex_init+0x38/0x70 [ 324.267078][ T7877] ops_init+0x391/0x640 [ 324.271282][ T7877] setup_net+0x3b6/0xa20 [ 324.275569][ T7877] ? copy_net_ns+0x530/0x530 [ 324.280199][ T7877] ? copy_net_ns+0x347/0x530 [ 324.284830][ T7877] ? down_read_killable+0x1d0/0x340 [ 324.290065][ T7877] copy_net_ns+0x361/0x530 [ 324.294527][ T7877] create_new_namespaces+0x3ce/0x700 [ 324.299865][ T7877] unshare_nsproxy_namespaces+0x11a/0x160 [ 324.305631][ T7877] ksys_unshare+0x4fa/0x8f0 [ 324.310183][ T7877] ? sighand_ctor+0x50/0x50 [ 324.314720][ T7877] ? lock_chain_count+0x20/0x20 [ 324.319624][ T7877] ? syscall_enter_from_user_mode+0x25/0x80 [ 324.325560][ T7877] __x64_sys_unshare+0x38/0x40 [ 324.330361][ T7877] do_syscall_64+0x55/0xb0 [ 324.334816][ T7877] ? clear_bhb_loop+0x40/0x90 [ 324.339530][ T7877] ? clear_bhb_loop+0x40/0x90 [ 324.344246][ T7877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.350176][ T7877] RIP: 0033:0x7f3a9299e159 [ 324.354627][ T7877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.374269][ T7877] RSP: 002b:00007f3a9391b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 324.382733][ T7877] RAX: ffffffffffffffda RBX: 00007f3a92c25fa0 RCX: 00007f3a9299e159 [ 324.390754][ T7877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 324.398763][ T7877] RBP: 00007f3a92a3506b R08: 0000000000000000 R09: 0000000000000000 [ 324.406771][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.414785][ T7877] R13: 00007f3a92c26038 R14: 00007f3a92c25fa0 R15: 00007ffeeb6d94e8 [ 324.422812][ T7877] [ 325.821426][ T7905] syzkaller0: entered promiscuous mode [ 325.842026][ T7905] syzkaller0: entered allmulticast mode [ 326.524572][ T28] audit: type=1326 audit(1789924989.854:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.0.568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cdcf9e159 code=0x0 [ 327.134540][ T7945] binder: BINDER_SET_CONTEXT_MGR already set [ 327.140763][ T7945] binder: 7943:7945 ioctl 4018620d 200000000100 returned -16 [ 327.159022][ T7945] binder: BINDER_SET_CONTEXT_MGR already set [ 327.165071][ T7945] binder: 7943:7945 ioctl 4018620d 200000004a80 returned -16 [ 327.179738][ T5816] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 327.181990][ T7945] binder: 7943:7945 ioctl c0306201 0 returned -14 [ 327.349809][ T5816] usb 3-1: device descriptor read/64, error -71 [ 327.637349][ T5816] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 327.857301][ T5816] usb 3-1: device descriptor read/64, error -71 [ 328.648922][ T5816] usb usb3-port1: attempt power cycle [ 329.177509][ T5816] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 329.182590][ T5815] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 329.224612][ T5816] usb 3-1: device descriptor read/8, error -71 [ 329.390709][ T5815] usb 6-1: config index 0 descriptor too short (expected 50, got 32) [ 329.420372][ T5815] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.447509][ T5815] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 329.461912][ T23] [ 329.464289][ T23] ============================================ [ 329.470460][ T23] WARNING: possible recursive locking detected [ 329.475262][ T5815] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 329.476701][ T23] syzkaller #0 Not tainted [ 329.490767][ T23] -------------------------------------------- [ 329.492128][ T5815] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.497013][ T23] kworker/1:0/23 is trying to acquire lock: [ 329.515693][ T23] ffff88814ccf0930 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x248/0x970 [ 329.525483][ T23] [ 329.525483][ T23] but task is already holding lock: [ 329.532849][ T23] ffff88801f2d2130 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x248/0x970 [ 329.542603][ T23] [ 329.542603][ T23] other info that might help us debug this: [ 329.550662][ T23] Possible unsafe locking scenario: [ 329.550662][ T23] [ 329.558115][ T23] CPU0 [ 329.561393][ T23] ---- [ 329.564679][ T23] lock(&grp->list_lock); [ 329.569100][ T23] lock(&grp->list_lock); [ 329.573522][ T23] [ 329.573522][ T23] *** DEADLOCK *** [ 329.573522][ T23] [ 329.581665][ T23] May be due to missing lock nesting notation [ 329.581665][ T23] [ 329.589986][ T23] 3 locks held by kworker/1:0/23: [ 329.595010][ T23] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 329.605985][ T23] #1: ffffc900001d7d00 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 329.618696][ T23] #2: ffff88801f2d2130 (&grp->list_lock){.+.+}-{2:2}, at: snd_seq_deliver_event+0x248/0x970 [ 329.628971][ T23] [ 329.628971][ T23] stack backtrace: [ 329.634862][ T23] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 329.642149][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 329.652215][ T23] Workqueue: events snd_rawmidi_input_event_work [ 329.658640][ T23] Call Trace: [ 329.661926][ T23] [ 329.664946][ T23] dump_stack_lvl+0x18c/0x250 [ 329.669638][ T23] ? show_regs_print_info+0x20/0x20 [ 329.674851][ T23] ? print_deadlock_bug+0x435/0x5d0 [ 329.680061][ T23] __lock_acquire+0x6809/0x7d80 [ 329.684923][ T23] ? verify_lock_unused+0x140/0x140 [ 329.690127][ T23] ? verify_lock_unused+0x140/0x140 [ 329.695334][ T23] ? verify_lock_unused+0x140/0x140 [ 329.700622][ T23] ? __rwlock_init+0x150/0x150 [ 329.705400][ T23] lock_acquire+0x19e/0x420 [ 329.709929][ T23] ? snd_seq_deliver_event+0x248/0x970 [ 329.715423][ T23] ? __lock_acquire+0x7d80/0x7d80 [ 329.720470][ T23] ? read_lock_is_recursive+0x20/0x20 [ 329.725853][ T23] ? mark_lock+0x94/0x320 [ 329.730198][ T23] ? do_raw_read_unlock+0x3d/0x80 [ 329.735228][ T23] ? snd_seq_deliver_event+0x220/0x970 [ 329.740692][ T23] _raw_read_lock+0x36/0x50 [ 329.745202][ T23] ? snd_seq_deliver_event+0x248/0x970 [ 329.750666][ T23] snd_seq_deliver_event+0x248/0x970 [ 329.755962][ T23] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 329.761863][ T23] ? snd_seq_dispatch_event+0x4f0/0x4f0 [ 329.767500][ T23] ? client_use_ptr+0xa9/0xaa0 [ 329.772273][ T23] ? snd_seq_kernel_client_dispatch+0x17a/0x2f0 [ 329.778533][ T23] snd_seq_kernel_client_dispatch+0x201/0x2f0 [ 329.784630][ T23] snd_seq_control_queue+0x886/0x1060 [ 329.790027][ T23] ? snd_seq_queue_remove_cells+0x2e0/0x2e0 [ 329.795934][ T23] ? mark_lock+0x94/0x320 [ 329.800294][ T23] ? snd_seq_port_use_ptr+0x101/0x130 [ 329.805680][ T23] ? __lock_acquire+0x7d80/0x7d80 [ 329.810800][ T23] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 329.816700][ T23] ? _raw_spin_unlock+0x40/0x40 [ 329.821556][ T23] ? verify_lock_unused+0x140/0x140 [ 329.826762][ T23] ? do_raw_read_unlock+0x3d/0x80 [ 329.831797][ T23] ? _raw_read_unlock+0x28/0x40 [ 329.836657][ T23] ? snd_seq_port_use_ptr+0x101/0x130 [ 329.842062][ T23] snd_seq_deliver_single_event+0x5a3/0xbc0 [ 329.847960][ T23] ? snd_seq_system_notify+0x170/0x170 [ 329.853430][ T23] ? snd_sequencer_device_done+0x30/0x30 [ 329.859063][ T23] ? mark_lock+0x94/0x320 [ 329.863436][ T23] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 329.869434][ T23] ? __lock_acquire+0x7d80/0x7d80 [ 329.874477][ T23] snd_seq_deliver_event+0x270/0x970 [ 329.879793][ T23] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 329.885724][ T23] ? snd_seq_dispatch_event+0x4f0/0x4f0 [ 329.891311][ T23] ? client_use_ptr+0xa9/0xaa0 [ 329.896202][ T23] ? snd_seq_kernel_client_dispatch+0x17a/0x2f0 [ 329.902586][ T23] snd_seq_kernel_client_dispatch+0x201/0x2f0 [ 329.908681][ T23] snd_seq_oss_timer_start+0x337/0x570 [ 329.914163][ T23] ? snd_seq_oss_process_timer_event+0x3e0/0x3e0 [ 329.920547][ T23] ? snd_seq_oss_readq_put_event+0x161/0x250 [ 329.926552][ T23] ? snd_seq_oss_readq_put_timestamp+0x137/0x1a0 [ 329.932890][ T23] ? snd_seq_oss_readq_poll+0xb0/0xb0 [ 329.938271][ T23] snd_seq_oss_midi_input+0x34d/0x9b0 [ 329.943663][ T23] ? snd_seq_port_use_ptr+0x101/0x130 [ 329.949044][ T23] ? snd_seq_oss_midi_get_addr+0x260/0x260 [ 329.954864][ T23] ? do_raw_read_unlock+0x3d/0x80 [ 329.959905][ T23] ? _raw_read_unlock+0x28/0x40 [ 329.964761][ T23] ? snd_seq_port_use_ptr+0x101/0x130 [ 329.970145][ T23] snd_seq_deliver_single_event+0x5a3/0xbc0 [ 329.976059][ T23] ? snd_seq_oss_process_event+0x2a30/0x2a30 [ 329.982059][ T23] ? snd_sequencer_device_done+0x30/0x30 [ 329.987698][ T23] ? mark_lock+0x94/0x320 [ 329.992037][ T23] ? do_raw_read_unlock+0x3d/0x80 [ 329.997073][ T23] snd_seq_deliver_event+0x502/0x970 [ 330.002373][ T23] ? snd_seq_dispatch_event+0x4f0/0x4f0 [ 330.007927][ T23] ? client_use_ptr+0xa9/0xaa0 [ 330.012692][ T23] ? snd_seq_kernel_client_dispatch+0x17a/0x2f0 [ 330.018940][ T23] snd_seq_kernel_client_dispatch+0x201/0x2f0 [ 330.025014][ T23] snd_midi_input_event+0x5d6/0x700 [ 330.030221][ T23] ? event_process_midi+0x6b0/0x6b0 [ 330.035425][ T23] ? _raw_spin_unlock_irq+0x23/0x50 [ 330.040636][ T23] ? process_scheduled_works+0x975/0x1600 [ 330.046363][ T23] ? process_scheduled_works+0x975/0x1600 [ 330.052090][ T23] process_scheduled_works+0xa60/0x1600 [ 330.057654][ T23] ? worker_attach_to_pool+0x370/0x370 [ 330.063121][ T23] ? assign_work+0x3cc/0x5d0 [ 330.067724][ T23] worker_thread+0xa5e/0xfe0 [ 330.072328][ T23] kthread+0x2fa/0x390 [ 330.076399][ T23] ? pr_cont_work+0x550/0x550 [ 330.081084][ T23] ? kthread_blkcg+0xd0/0xd0 [ 330.085676][ T23] ret_from_fork+0x48/0x80 [ 330.090104][ T23] ? kthread_blkcg+0xd0/0xd0 [ 330.094705][ T23] ret_from_fork_asm+0x11/0x20 [ 330.099495][ T23] [ 330.115005][ T5816] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 330.238037][ T5816] usb 3-1: device descriptor read/8, error -71 [ 330.265422][ T5815] usb 6-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 330.329769][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.454818][ T5815] usb 6-1: Product: syz [ 330.517501][ T5815] usb 6-1: Manufacturer: syz [ 330.549438][ T5815] usb 6-1: SerialNumber: syz [ 330.931777][ T5815] usb_debug 6-1:1.0: debug converter detected [ 331.125988][ T5815] usb 6-1: debug converter now attached to ttyUSB0 [ 331.391874][ T5816] usb usb3-port1: unable to enumerate USB device [ 332.466873][ T5728] usb 6-1: USB disconnect, device number 3 [ 332.483298][ T5728] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 332.492929][ T5728] usb_debug 6-1:1.0: device disconnected