last executing test programs: 4.675916299s ago: executing program 3 (id=992): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000006c0)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0) mkdir(0x0, 0x0) llistxattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000008c0)=""/4096, 0x1000) 4.595095181s ago: executing program 3 (id=995): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a600)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}], 0x1}, 0x5}], 0x1, 0x102, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x142, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf) inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x80000142) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010101}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x200, &(0x7f0000000200)="00000000000100"/16) syz_usb_connect(0x3, 0x36, &(0x7f0000000f80)=ANY=[@ANYBLOB="12010002b01d63107e0e011085d901020301"], 0x0) 2.146792259s ago: executing program 1 (id=1034): socket$kcm(0x10, 0x2, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(0x4) 2.028656022s ago: executing program 1 (id=1036): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000a00)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9a47cc", 0x18, 0x3a, 0x1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @ndisc_na={0x88, 0x0, 0x0, 0x5, '\x00', @mcast1}}}}}}, 0x0) 1.935684464s ago: executing program 1 (id=1038): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x81, &(0x7f0000000000)={[{@errors_remount}]}, 0x4, 0x4f0, &(0x7f0000000740)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000c80)={r2}, &(0x7f0000001cc0)=0x8) 1.525423204s ago: executing program 1 (id=1041): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r4, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$eJzs3c9qY1UYAPDvpkkaLZIsXIngXczCjWUyWxdmkApiV0oW/gEdnBkYmjDQQGBUDF35BC5c+B7uXLlR3PgGgg/gziKFIze5TWKbpk1rWun8fpsezvm+nO/k3PYuLvf0s1f7ew+fDh4ffPV7NBpZVDrRicMsWlGJY6kUAMCtcJhS/Hmp+3u1sq6aAID1mrv/184I2Tzd9da6ywIA1uiDDz967/7u7s77ed6I6H8z7GYx+TkZv/84nkQvHsXdaMbR7FlASpP2O+/u7kQ1L7TiTn807BaZ/U9/nX9sUOS3oxmtxfntfGIufzTs1uLFiCyLeNIpCrkXzXj5VH4xvnNvQX506/F6o1xkMf92NOO3z+Np9OLh+JnGbP6v23n+dvr2ry8/LoKL/Gw07G6O42bSxnXvDQAAAAAAAAAAAAAAAAAAAAAAt9d2PtWKO/2iqzx/Z+NoPL79r/Hx+TqV8fgkP4uojxsnzgcapfj++Hydu3mep2wSPzvfpxqvVKN6YwsHAAAAAAAAAAAAAAAAAACA/5HBsy/2HvR6j/b/k0b5kv/0tf7Lfk5nrue1WB68udJcsVGGF7WejGn//El/2lMsYvXiD18a1vKIZTXXTvW8UNRz/hR/p5RSlkVcbZtqF5nrnMbW8pjiC/7xu6039h5k532HjeON+2F+qB77g2cn9jSyovHTLxfb7rTS5VdfElMvr5gLfc7WFX+J3vxjMlnZk62wilrZiLMuv8ZK1/M1/QECAAAAAAAAAAAAAAAAAACmZi/9Lhg8WJpaWVtRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDNZv//f4XGqExeHJNSGk176rE/uOElAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bz4JwAA///l5m1V") close_range(r2, r2, 0x0) 1.490555905s ago: executing program 0 (id=1042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xec0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.474901565s ago: executing program 3 (id=1043): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getsadinfo={0x88, 0x23, 0x100, 0x70bd2b, 0x25dfdbff, 0x0, [@etimer_thresh={0x8, 0xc, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd24, 0x70bd26, 0x70bd2b, 0x8, [0x80000001, 0x9, 0xbd93, 0x6bca, 0x800]}}, @policy_type={0xa, 0x10, {0x1}}, @coaddr={0x14, 0xe, @in=@broadcast}, @srcaddr={0x14, 0xd, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.28655563s ago: executing program 3 (id=1044): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) recvmsg(r0, 0x0, 0x100) 1.124554324s ago: executing program 0 (id=1046): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000a00)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9a47cc", 0x18, 0x3a, 0x1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @ndisc_na={0x88, 0x0, 0x0, 0x5, '\x00', @mcast1}}}}}}, 0x0) 1.092707254s ago: executing program 3 (id=1047): write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 999.841377ms ago: executing program 1 (id=1048): mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x5, 0x401d031, r0, 0x0) 883.374009ms ago: executing program 0 (id=1050): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x400, @loopback, 0x7}, 0x1c) listen(r0, 0xb) fchown(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x40, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 880.44815ms ago: executing program 1 (id=1051): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a600)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}], 0x1}, 0x5}], 0x1, 0x102, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x142, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf) inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x80000142) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010101}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x200, &(0x7f0000000200)="00000000000100"/16) syz_usb_connect(0x3, 0x36, &(0x7f0000000f80)=ANY=[@ANYBLOB="12010002b01d63107e0e011085d901020301"], 0x0) 818.742291ms ago: executing program 2 (id=1052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20040004) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='kF', 0x2}], 0x1}, 0x20000885) 818.589031ms ago: executing program 3 (id=1053): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mq_timedreceive(r0, &(0x7f000001a600)=""/102370, 0x18fe2, 0x0, 0x0) 643.812405ms ago: executing program 0 (id=1054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xec0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 623.117435ms ago: executing program 2 (id=1055): fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x101, &(0x7f0000006680)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, &(0x7f0000000000)={0x1f, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x0, 0x0) 546.922147ms ago: executing program 0 (id=1056): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x40180, 0x0) readv(r3, &(0x7f0000000740)=[{&(0x7f0000000340)=""/122, 0x7a}], 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x36}, 0x94) 459.853699ms ago: executing program 2 (id=1057): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) 409.667501ms ago: executing program 2 (id=1058): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000a00)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9a47cc", 0x18, 0x3a, 0x1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @ndisc_na={0x88, 0x0, 0x0, 0x5, '\x00', @mcast1}}}}}}, 0x0) 271.568284ms ago: executing program 2 (id=1059): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 89.182488ms ago: executing program 2 (id=1060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r3, 0x0, 0x400c010) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) 0s ago: executing program 0 (id=1061): mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x5, 0x401d031, r0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.0' (ED25519) to the list of known hosts. [ 62.987631][ T5760] cgroup: Unknown subsys name 'net' [ 63.120518][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.538699][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.972127][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.980906][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.988903][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.997760][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.005502][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.012824][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.020851][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.037827][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.040509][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.046084][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.053912][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.066934][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.068744][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.081640][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.085602][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.096217][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.104832][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.104852][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.113358][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.126065][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.127167][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.133344][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.140314][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.157728][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.524604][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 66.577915][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 66.611515][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 66.725587][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.733236][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.740780][ T5774] bridge_slave_0: entered allmulticast mode [ 66.747526][ T5774] bridge_slave_0: entered promiscuous mode [ 66.756932][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.764138][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.771290][ T5774] bridge_slave_1: entered allmulticast mode [ 66.778575][ T5774] bridge_slave_1: entered promiscuous mode [ 66.857825][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.866255][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.873520][ T5772] bridge_slave_0: entered allmulticast mode [ 66.883645][ T5772] bridge_slave_0: entered promiscuous mode [ 66.892322][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.900857][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.908197][ T5775] bridge_slave_0: entered allmulticast mode [ 66.917392][ T5775] bridge_slave_0: entered promiscuous mode [ 66.927543][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.941330][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.960308][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.967750][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.975153][ T5772] bridge_slave_1: entered allmulticast mode [ 66.981892][ T5772] bridge_slave_1: entered promiscuous mode [ 66.988859][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.996294][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.003449][ T5775] bridge_slave_1: entered allmulticast mode [ 67.010281][ T5775] bridge_slave_1: entered promiscuous mode [ 67.040856][ T5774] team0: Port device team_slave_0 added [ 67.057714][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 67.080391][ T5774] team0: Port device team_slave_1 added [ 67.102832][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.114735][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.141576][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.152761][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.183032][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.190234][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.216239][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.266816][ T5772] team0: Port device team_slave_0 added [ 67.273240][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.280747][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.306979][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.333210][ T5775] team0: Port device team_slave_0 added [ 67.340954][ T5772] team0: Port device team_slave_1 added [ 67.365345][ T5775] team0: Port device team_slave_1 added [ 67.420763][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.429036][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.455058][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.473118][ T5774] hsr_slave_0: entered promiscuous mode [ 67.480098][ T5774] hsr_slave_1: entered promiscuous mode [ 67.516244][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.523209][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.549298][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.567297][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.574650][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.601096][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.612417][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.624147][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.631450][ T5773] bridge_slave_0: entered allmulticast mode [ 67.638932][ T5773] bridge_slave_0: entered promiscuous mode [ 67.663073][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.670183][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.696558][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.712405][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.719972][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.727259][ T5773] bridge_slave_1: entered allmulticast mode [ 67.734135][ T5773] bridge_slave_1: entered promiscuous mode [ 67.744995][ T5772] hsr_slave_0: entered promiscuous mode [ 67.751306][ T5772] hsr_slave_1: entered promiscuous mode [ 67.758519][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.766592][ T5772] Cannot create hsr debugfs directory [ 67.857590][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.880234][ T5775] hsr_slave_0: entered promiscuous mode [ 67.886486][ T5775] hsr_slave_1: entered promiscuous mode [ 67.892525][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.901111][ T5775] Cannot create hsr debugfs directory [ 67.931240][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.039686][ T5773] team0: Port device team_slave_0 added [ 68.064734][ T5773] team0: Port device team_slave_1 added [ 68.095366][ T5785] Bluetooth: hci1: command tx timeout [ 68.122569][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.129707][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.155957][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.174472][ T5785] Bluetooth: hci0: command tx timeout [ 68.195604][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.202581][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.228955][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.254690][ T5785] Bluetooth: hci2: command tx timeout [ 68.254706][ T5781] Bluetooth: hci3: command tx timeout [ 68.353961][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.375071][ T5773] hsr_slave_0: entered promiscuous mode [ 68.381450][ T5773] hsr_slave_1: entered promiscuous mode [ 68.390246][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.398072][ T5773] Cannot create hsr debugfs directory [ 68.414922][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.445740][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.457083][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.567827][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.591430][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.601823][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.611463][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.697634][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.712674][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.727187][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.740509][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.815708][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.826403][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.843397][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.861229][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.893639][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.938901][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.963765][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.971077][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.983462][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.990622][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.101834][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.122479][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.153138][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.171578][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.202755][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.219473][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.230670][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.237837][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.268625][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.275742][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.298378][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.305583][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.333710][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.340935][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.364942][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.408531][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.415673][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.457854][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.465072][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.508732][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.539696][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.652957][ T5774] veth0_vlan: entered promiscuous mode [ 69.691266][ T5774] veth1_vlan: entered promiscuous mode [ 69.788747][ T5774] veth0_macvtap: entered promiscuous mode [ 69.818889][ T5774] veth1_macvtap: entered promiscuous mode [ 69.862874][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.882077][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.899370][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.909496][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.919829][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.935733][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.043428][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.060556][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.174953][ T5785] Bluetooth: hci1: command tx timeout [ 70.181762][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.191932][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.215361][ T5772] veth0_vlan: entered promiscuous mode [ 70.222661][ T5775] veth0_vlan: entered promiscuous mode [ 70.239592][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.257549][ T5785] Bluetooth: hci0: command tx timeout [ 70.265954][ T5772] veth1_vlan: entered promiscuous mode [ 70.285088][ T5775] veth1_vlan: entered promiscuous mode [ 70.320790][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.334540][ T5785] Bluetooth: hci3: command tx timeout [ 70.340122][ T5785] Bluetooth: hci2: command tx timeout [ 70.344200][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.403038][ T5775] veth0_macvtap: entered promiscuous mode [ 70.435414][ T5772] veth0_macvtap: entered promiscuous mode [ 70.449453][ T5775] veth1_macvtap: entered promiscuous mode [ 70.463653][ T5772] veth1_macvtap: entered promiscuous mode [ 70.472858][ T5773] veth0_vlan: entered promiscuous mode [ 70.525205][ T5773] veth1_vlan: entered promiscuous mode [ 70.540536][ T5833] syz.1.2[5833]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 70.556078][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.563631][ T5833] loop1: detected capacity change from 0 to 1024 [ 70.570177][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.578678][ T5833] ======================================================= [ 70.578678][ T5833] WARNING: The mand mount option has been deprecated and [ 70.578678][ T5833] and is ignored by this kernel. Remove the mand [ 70.578678][ T5833] option from the mount to silence this warning. [ 70.578678][ T5833] ======================================================= [ 70.594956][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.635859][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.646939][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.659156][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.670047][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.681488][ T5833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.694535][ T5833] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.722862][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.732602][ T5833] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.2: lblock 0 mapped to illegal pblock 0 (length 1) [ 70.755753][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.770083][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.781880][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.791072][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.802473][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.813761][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.825076][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.836964][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.847954][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.857518][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.868179][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.877029][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.887828][ T1111] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm kworker/u4:8: lblock 0 mapped to illegal pblock 0 (length 1) [ 70.908040][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.917254][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.926140][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.935673][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.936770][ T1111] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 70.961007][ T1111] EXT4-fs (loop1): This should not happen!! Data will be lost [ 70.961007][ T1111] [ 70.995105][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.128597][ T5773] veth0_macvtap: entered promiscuous mode [ 71.170230][ T5773] veth1_macvtap: entered promiscuous mode [ 71.196632][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.221995][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.225012][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.237972][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.250387][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.265536][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.291127][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.303640][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.319179][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.356991][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.371585][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.383556][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.394407][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.404550][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.420399][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.432955][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.442801][ T5844] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.474939][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.481537][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.492483][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.508934][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.551752][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.572104][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.582454][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.593685][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.628275][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.651694][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.684451][ T5844] kvm: pic: single mode not supported [ 71.690122][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.705518][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.905831][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.933428][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.980179][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.010003][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.247444][ T5856] capability: warning: `syz.3.9' uses deprecated v2 capabilities in a way that may be insecure [ 72.264571][ T5785] Bluetooth: hci1: command tx timeout [ 72.313518][ T5859] loop2: detected capacity change from 0 to 512 [ 72.335144][ T5785] Bluetooth: hci0: command tx timeout [ 72.403371][ T5857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 72.416833][ T5785] Bluetooth: hci3: command tx timeout [ 72.424545][ T5785] Bluetooth: hci2: command tx timeout [ 72.437975][ T5861] loop1: detected capacity change from 0 to 1024 [ 73.415812][ T5859] EXT4-fs (loop2): Test dummy encryption mode enabled [ 73.480356][ T5859] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.3: inode has both inline data and extents flags [ 73.495922][ T5859] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.3: couldn't read orphan inode 15 (err -117) [ 73.511645][ T5859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.335473][ T5785] Bluetooth: hci1: command tx timeout [ 74.415227][ T5785] Bluetooth: hci0: command tx timeout [ 74.494578][ T5781] Bluetooth: hci3: command tx timeout [ 74.500053][ T5785] Bluetooth: hci2: command tx timeout [ 74.592952][ T5859] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 74.815037][ T5813] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 74.860947][ T5859] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 74.932687][ T5859] overlayfs: upper fs does not support tmpfile. [ 74.966471][ T5859] fscrypt (loop2): Error allocating 'xts(aes)' transform: -4 [ 75.067403][ T5914] loop0: detected capacity change from 0 to 256 [ 75.112948][ T5813] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 75.172604][ T5813] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 75.208369][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.225545][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.233059][ T5813] usb 2-1: config 0 descriptor?? [ 75.704636][ T5813] betop 0003:11C2:2208.0001: unknown main item tag 0xe [ 75.753019][ T5813] betop 0003:11C2:2208.0001: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.1-1/input0 [ 75.789582][ T5813] betop 0003:11C2:2208.0001: no inputs found [ 77.803179][ T5776] usb 2-1: USB disconnect, device number 2 [ 78.700839][ T5955] loop0: detected capacity change from 0 to 512 [ 78.767070][ T5955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.801277][ T5955] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.028868][ T5955] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.29: Invalid inode table block 2728587064 in block_group 0 [ 79.064297][ T5963] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 2420121474 in block_group 0 [ 79.071201][ T5955] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 79.795701][ T5963] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 2420121474 in block_group 0 [ 79.811786][ T5955] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #18: comm syz.0.29: mark_inode_dirty error [ 79.960511][ T5955] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.29: Invalid block bitmap block 2420121474 in block_group 0 [ 80.061654][ T5955] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.29: Invalid block bitmap block 2420121474 in block_group 0 [ 80.102568][ T5955] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz.0.29: Invalid inode table block 2728587064 in block_group 0 [ 81.209849][ T11] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm kworker/u4:0: Invalid inode table block 2728587064 in block_group 0 [ 81.254054][ T5955] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 81.338402][ T5955] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 81.462897][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.476295][ T5965] loop3: detected capacity change from 0 to 40427 [ 81.512204][ T5965] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 81.532999][ T5965] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 81.546584][ T5965] F2FS-fs (loop3): invalid crc value [ 81.590160][ T5965] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.707237][ T5992] netlink: 60 bytes leftover after parsing attributes in process `syz.2.41'. [ 81.766990][ T5992] netlink: 60 bytes leftover after parsing attributes in process `syz.2.41'. [ 81.817362][ T5996] netlink: 60 bytes leftover after parsing attributes in process `syz.2.41'. [ 81.918795][ T5992] netlink: 60 bytes leftover after parsing attributes in process `syz.2.41'. [ 81.964987][ T5965] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 82.554748][ T5965] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 83.954189][ T6006] syz.1.44 (6006) used greatest stack depth: 20808 bytes left [ 86.844162][ T8] cfg80211: failed to load regulatory.db [ 88.017449][ T6036] loop0: detected capacity change from 0 to 40427 [ 88.039077][ T6036] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 88.063267][ T6036] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 88.092019][ T6036] F2FS-fs (loop0): invalid crc value [ 88.112615][ T6065] hub 8-0:1.0: USB hub found [ 88.119320][ T6036] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.170987][ T6065] hub 8-0:1.0: 1 port detected [ 88.290781][ T6036] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 88.313962][ T6036] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 88.650943][ T11] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 88.681362][ T11] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 90.015095][ T6097] netlink: 144 bytes leftover after parsing attributes in process `syz.1.75'. [ 91.287569][ T6113] netlink: 'syz.2.81': attribute type 10 has an invalid length. [ 92.098964][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.820951][ T6113] bridge_slave_1: left allmulticast mode [ 92.833757][ T6113] bridge_slave_1: left promiscuous mode [ 92.841235][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.886996][ T6113] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 92.912684][ T6122] netlink: 184 bytes leftover after parsing attributes in process `syz.2.81'. [ 92.924712][ C0] Illegal XDP return value 16128 on prog (id 13) dev bridge_slave_1, expect packet loss! [ 93.016404][ T6137] hub 8-0:1.0: USB hub found [ 93.024807][ T6137] hub 8-0:1.0: 1 port detected [ 93.904636][ T6150] binder: 6141:6150 ioctl 4018620d 0 returned -22 [ 93.925107][ T6150] process 'syz.0.88' launched './file0' with NULL argv: empty string added [ 94.165330][ T6159] netlink: 140 bytes leftover after parsing attributes in process `syz.2.91'. [ 94.843770][ T6159] netlink: 10 bytes leftover after parsing attributes in process `syz.2.91'. [ 94.983674][ T6159] bond0: (slave bond_slave_0): Releasing backup interface [ 95.005829][ T6159] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 95.157634][ T6168] Zero length message leads to an empty skb [ 95.298657][ T6174] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99'. [ 95.310090][ T6174] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99'. [ 95.429748][ T6180] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99'. [ 95.598339][ T6182] netlink: 60 bytes leftover after parsing attributes in process `syz.0.99'. [ 96.240694][ T6190] ieee802154 phy0 wpan0: encryption failed: -22 [ 96.414503][ T6196] netlink: 'syz.1.106': attribute type 10 has an invalid length. [ 96.443649][ T6196] team0: Port device dummy0 added [ 97.959337][ T6196] syz.1.106 (6196) used greatest stack depth: 20552 bytes left [ 99.001102][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 99.033362][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.700731][ T6220] bridge_slave_1 (unregistering): left allmulticast mode [ 99.707929][ T6220] bridge_slave_1 (unregistering): left promiscuous mode [ 99.715095][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.273365][ T6225] sched: RT throttling activated [ 102.854976][ T6231] fuse: Bad value for 'fd' [ 103.429467][ T6242] loop3: detected capacity change from 0 to 512 [ 103.443605][ T5813] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 103.483726][ T6242] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 103.509221][ T6242] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 103.509434][ T5813] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.531384][ T6242] EXT4-fs (loop3): orphan cleanup on readonly fs [ 103.542534][ T6242] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.122: iget: bad i_size value: 12154761577498 [ 103.556689][ T6242] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.122: couldn't read orphan inode 13 (err -117) [ 103.571537][ T6242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 103.605597][ T6242] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.122: dx entry: limit 65535 != root limit 120 [ 103.625826][ T6242] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.122: Corrupt directory, running e2fsck is recommended [ 103.672574][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.783847][ T6249] fido_id[6249]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.900084][ T6255] fuse: Bad value for 'fd' [ 105.263953][ T6273] netlink: 'syz.1.132': attribute type 3 has an invalid length. [ 105.765132][ T6283] fuse: Bad value for 'fd' [ 107.873416][ T6296] tc action pedit 'at' offset 5 out of bounds [ 107.879713][ T6296] tc action pedit 'at' offset 5 out of bounds [ 107.885811][ T6296] tc action pedit 'at' offset 5 out of bounds [ 107.891860][ T6296] tc action pedit 'at' offset 5 out of bounds [ 107.897974][ T6296] tc action pedit 'at' offset 5 out of bounds [ 107.904061][ T6296] tc action pedit 'at' offset 5 out of bounds [ 107.910108][ T6296] tc action pedit 'at' offset 5 out of bounds [ 107.916196][ T6296] tc action pedit 'at' offset 5 out of bounds [ 107.922241][ T6296] tc action pedit 'at' offset 5 out of bounds [ 107.928318][ T6296] tc action pedit 'at' offset 5 out of bounds [ 107.934424][ T6296] 0: reclassify loop, rule prio 0, protocol 800 [ 108.747687][ T6313] loop0: detected capacity change from 0 to 256 [ 108.795988][ T6313] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 108.824686][ T6313] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 108.857572][ T6313] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 108.907948][ T27] audit: type=1800 audit(1787644965.577:2): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.143" name="file1" dev="loop0" ino=1048596 res=0 errno=0 [ 109.008280][ T6313] syz.0.143 (6313) used greatest stack depth: 20496 bytes left [ 110.899119][ T174] smpboot: CPU 1 is now offline [ 111.943456][ T6356] loop1: detected capacity change from 0 to 128 [ 111.987207][ T6356] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 112.052018][ T6356] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.123645][ T6356] ext2 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.166603][ T174] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.399289][ T174] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 113.421679][ T174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.446749][ T174] usb 4-1: Product: syz [ 113.456966][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.533521][ T6371] hub 8-0:1.0: USB hub found [ 114.538742][ T6371] hub 8-0:1.0: 1 port detected [ 114.551931][ T174] usb 4-1: Manufacturer: syz [ 114.586285][ T174] usb 4-1: SerialNumber: syz [ 114.628668][ T174] ums-karma 4-1:1.0: USB Mass Storage device detected [ 114.846768][ T174] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 114.846768][ T174] Please send a copy of this message to and [ 115.940535][ T174] ums-karma: probe of 4-1:1.0 failed with error -5 [ 115.997888][ T174] usb 4-1: USB disconnect, device number 2 [ 116.894152][ T6401] binder: 6397:6401 ioctl 4018620d 0 returned -22 [ 117.416863][ T6404] loop1: detected capacity change from 0 to 512 [ 117.503575][ T6404] EXT4-fs: Ignoring removed oldalloc option [ 117.716227][ T6404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.671015][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.724151][ T174] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.954587][ T174] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 118.973076][ T6394] loop0: detected capacity change from 0 to 40427 [ 118.996807][ T174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.031255][ T174] usb 4-1: Product: syz [ 119.063681][ T174] usb 4-1: Manufacturer: syz [ 119.094505][ T174] usb 4-1: SerialNumber: syz [ 119.172781][ T174] ums-karma 4-1:1.0: USB Mass Storage device detected [ 119.252194][ T174] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 119.252194][ T174] Please send a copy of this message to and [ 120.874177][ T174] ums-karma: probe of 4-1:1.0 failed with error -5 [ 120.942036][ T174] usb 4-1: USB disconnect, device number 3 [ 121.204270][ T6463] loop3: detected capacity change from 0 to 512 [ 121.350309][ T6463] EXT4-fs: Ignoring removed nobh option [ 121.592102][ T6463] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.657998][ T6463] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.728924][ T6463] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 121.787313][ T6463] EXT4-fs (loop3): 1 truncate cleaned up [ 121.811415][ T6463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.840414][ T6477] vlan2: entered promiscuous mode [ 121.887384][ T6477] bridge0: entered promiscuous mode [ 121.959280][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.104171][ T174] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.337433][ T174] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 123.374710][ T6487] hub 8-0:1.0: USB hub found [ 123.379490][ T6487] hub 8-0:1.0: 1 port detected [ 123.410461][ T174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.452498][ T174] usb 1-1: Product: syz [ 123.468446][ T174] usb 1-1: Manufacturer: syz [ 123.520727][ T174] usb 1-1: SerialNumber: syz [ 123.564260][ T174] ums-karma 1-1:1.0: USB Mass Storage device detected [ 123.611562][ T174] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 123.611562][ T174] Please send a copy of this message to and [ 124.979481][ T174] ums-karma: probe of 1-1:1.0 failed with error -5 [ 125.057160][ T174] usb 1-1: USB disconnect, device number 2 [ 125.459206][ T27] audit: type=1326 audit(1787644982.137:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.2.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff336f9e0d9 code=0x7ffc0000 [ 125.603020][ T27] audit: type=1326 audit(1787644982.167:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.2.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff336f9e0d9 code=0x7ffc0000 [ 125.750964][ T27] audit: type=1326 audit(1787644982.167:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.2.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff336f9e0d9 code=0x7ffc0000 [ 125.883935][ T27] audit: type=1326 audit(1787644982.167:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.2.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff336f9e0d9 code=0x7ffc0000 [ 126.115031][ T27] audit: type=1326 audit(1787644982.167:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.2.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff336f9e0d9 code=0x7ffc0000 [ 126.259518][ T27] audit: type=1326 audit(1787644982.217:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.2.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff336f9e0d9 code=0x7ffc0000 [ 126.365349][ T27] audit: type=1326 audit(1787644982.217:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.2.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff336f9e0d9 code=0x7ffc0000 [ 126.473400][ T27] audit: type=1326 audit(1787644982.217:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.2.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff336f9e0d9 code=0x7ffc0000 [ 126.629469][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.677413][ T27] audit: type=1326 audit(1787644982.217:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.2.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff336f9e0d9 code=0x7ffc0000 [ 127.846448][ T8] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 127.867126][ T27] audit: type=1326 audit(1787644982.217:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.2.207" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff336f9de42 code=0x7ffc0000 [ 127.895704][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.929730][ T6541] loop2: detected capacity change from 0 to 512 [ 127.941217][ T8] usb 1-1: Product: syz [ 127.952900][ T6541] EXT4-fs: Ignoring removed oldalloc option [ 127.962612][ T8] usb 1-1: Manufacturer: syz [ 128.001967][ T8] usb 1-1: SerialNumber: syz [ 128.020888][ T6541] EXT4-fs (loop2): 1 truncate cleaned up [ 128.048833][ T8] ums-karma 1-1:1.0: USB Mass Storage device detected [ 128.064913][ T6541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.086153][ T6545] loop1: detected capacity change from 0 to 128 [ 128.105001][ T8] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 128.105001][ T8] Please send a copy of this message to and [ 128.133903][ T6545] EXT4-fs: Ignoring removed bh option [ 128.221740][ T6545] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 128.270841][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.328838][ T6545] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.545947][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.595241][ T8] scsi host1: usb-storage 1-1:1.0 [ 128.848395][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.892732][ T6565] vlan2: entered promiscuous mode [ 128.901704][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.946350][ T6565] bridge0: entered promiscuous mode [ 129.001704][ T5813] usb 1-1: USB disconnect, device number 3 [ 133.274414][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.274464][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.469150][ T6581] tty tty25: ldisc open failed (-12), clearing slot 24 [ 134.516059][ T6584] tty tty25: ldisc open failed (-12), clearing slot 24 [ 136.104236][ T174] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.299740][ T174] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 136.333847][ T174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.378236][ T174] usb 1-1: Product: syz [ 136.393683][ T174] usb 1-1: Manufacturer: syz [ 136.411667][ T174] usb 1-1: SerialNumber: syz [ 136.443837][ T174] ums-karma 1-1:1.0: USB Mass Storage device detected [ 136.481397][ T174] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 136.481397][ T174] Please send a copy of this message to and [ 137.824956][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.833588][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.092978][ T174] ums-karma: probe of 1-1:1.0 failed with error -5 [ 139.142251][ T174] usb 1-1: USB disconnect, device number 4 [ 144.639393][ T6713] capability: warning: `syz.1.279' uses 32-bit capabilities (legacy support in use) [ 144.944250][ T6720] netlink: 76 bytes leftover after parsing attributes in process `syz.1.281'. [ 146.672642][ T6731] syz.3.285 uses obsolete (PF_INET,SOCK_PACKET) [ 148.394351][ T6752] 9pnet_fd: Insufficient options for proto=fd [ 148.903356][ T6762] netlink: 76 bytes leftover after parsing attributes in process `syz.0.295'. [ 149.829115][ T6779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.303'. [ 151.454577][ T6797] netlink: 76 bytes leftover after parsing attributes in process `syz.0.307'. [ 151.597286][ T6804] loop1: detected capacity change from 0 to 1024 [ 151.663348][ T6804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.847211][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.422356][ T6843] netlink: 76 bytes leftover after parsing attributes in process `syz.2.326'. [ 156.738914][ T6873] program syz.3.339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.132897][ T6886] netlink: 76 bytes leftover after parsing attributes in process `syz.2.343'. [ 162.293138][ T6924] netlink: 76 bytes leftover after parsing attributes in process `syz.1.356'. [ 170.296736][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 170.554341][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 172.023295][ T6979] loop0: detected capacity change from 0 to 512 [ 172.091687][ T6979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.184193][ T6979] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.271432][ T6979] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 172.487021][ T6979] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 172.610659][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.818805][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 177.847348][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 178.246662][ T7026] loop3: detected capacity change from 0 to 512 [ 178.290035][ T7026] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.403918][ T7026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.484304][ T7026] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.697218][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.911433][ T7041] loop3: detected capacity change from 0 to 512 [ 178.975636][ T7041] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.392: Unrecognised inode hash code 255 [ 179.047930][ T7041] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.392: Corrupt directory, running e2fsck is recommended [ 179.219186][ T7041] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 179.248391][ T7041] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.392: corrupted in-inode xattr: invalid ea_ino [ 180.284381][ T7041] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.392: couldn't read orphan inode 15 (err -117) [ 180.325076][ T7041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.447958][ T7025] loop0: detected capacity change from 0 to 40427 [ 180.504438][ T7025] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 180.547027][ T7041] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.392: Unrecognised inode hash code 255 [ 180.576053][ T7025] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 180.635397][ T7041] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.392: Corrupt directory, running e2fsck is recommended [ 180.651760][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 180.665709][ T7025] F2FS-fs (loop0): invalid crc value [ 180.709182][ T7025] F2FS-fs (loop0): Found nat_bits in checkpoint [ 180.752272][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 180.837844][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.945363][ T7025] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 181.003276][ T7025] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 181.269784][ T7025] syz.0.387: attempt to access beyond end of device [ 181.269784][ T7025] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 181.970229][ T3505] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 182.038088][ T3505] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 183.182638][ T7081] hub 8-0:1.0: USB hub found [ 183.187480][ T7081] hub 8-0:1.0: 1 port detected [ 183.720333][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 183.815453][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 183.928294][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.409'. [ 184.758154][ T7093] loop3: detected capacity change from 0 to 40427 [ 184.820166][ T7093] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 184.871637][ T7093] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 184.947975][ T7093] F2FS-fs (loop3): invalid crc value [ 185.020446][ T7093] F2FS-fs (loop3): Found nat_bits in checkpoint [ 185.343453][ T7128] hub 8-0:1.0: USB hub found [ 185.348259][ T7128] hub 8-0:1.0: 1 port detected [ 185.430229][ T7093] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 185.470912][ T7093] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 185.623643][ T7093] syz.3.411: attempt to access beyond end of device [ 185.623643][ T7093] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 185.768163][ T11] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 185.798254][ T11] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 187.771400][ T7149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.428'. [ 187.861491][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 187.934825][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 188.047060][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'. [ 189.548808][ T7167] syzkaller0: entered promiscuous mode [ 189.578054][ T7167] syzkaller0: entered allmulticast mode [ 189.616274][ T7167] tipc: Started in network mode [ 189.651225][ T7167] tipc: Node identity ea6c0e82b06d, cluster identity 4711 [ 189.701189][ T7167] tipc: Enabled bearer , priority 0 [ 189.735667][ T7171] tipc: Resetting bearer [ 190.929074][ T7171] tipc: Disabling bearer [ 190.959581][ T5812] tipc: Node number set to 1510018690 [ 191.982937][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 191.989021][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 191.995067][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 192.001075][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 192.338078][ T7190] xt_hashlimit: size too large, truncated to 1048576 [ 194.128099][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'. [ 194.226509][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'. [ 194.333798][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.442'. [ 194.561723][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.572602][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.825830][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 197.874353][ T7234] loop2: detected capacity change from 0 to 1024 [ 197.949499][ T7234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.028841][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 198.196367][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 199.225231][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.597565][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'. [ 199.629387][ T7254] loop1: detected capacity change from 0 to 512 [ 199.698638][ T7254] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.461: Unrecognised inode hash code 255 [ 199.774339][ T7254] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.461: Corrupt directory, running e2fsck is recommended [ 200.085979][ T7254] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 200.122207][ T7254] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.461: corrupted in-inode xattr: invalid ea_ino [ 200.173476][ T7254] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.461: couldn't read orphan inode 15 (err -117) [ 201.636661][ T7254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.728474][ T7254] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.461: Unrecognised inode hash code 255 [ 201.787633][ T7254] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.461: Corrupt directory, running e2fsck is recommended [ 201.943653][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.227973][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 202.309820][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 205.615066][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 205.692314][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 209.251203][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 209.293447][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.398119][ T7354] bridge_slave_1 (unregistering): left allmulticast mode [ 209.406759][ T7354] bridge_slave_1 (unregistering): left promiscuous mode [ 209.413724][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.506809][ T7359] loop0: detected capacity change from 0 to 512 [ 209.576985][ T7359] EXT4-fs: Ignoring removed oldalloc option [ 209.641271][ T7359] EXT4-fs (loop0): 1 truncate cleaned up [ 209.677693][ T7359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.730608][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 209.829612][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.177846][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 214.232842][ T7395] loop1: detected capacity change from 0 to 512 [ 214.263819][ T7395] EXT4-fs: Ignoring removed oldalloc option [ 214.400784][ T7395] EXT4-fs (loop1): 1 truncate cleaned up [ 214.447888][ T7395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.673862][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.692151][ T7407] loop0: detected capacity change from 0 to 1024 [ 214.709746][ T7409] loop3: detected capacity change from 0 to 512 [ 214.877125][ T7409] EXT4-fs: Ignoring removed nobh option [ 215.879219][ T7407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.898666][ T7409] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 216.041907][ T7409] EXT4-fs (loop3): 1 truncate cleaned up [ 216.099254][ T7409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.250437][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.267382][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.381081][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 217.444388][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 217.770149][ T7438] loop1: detected capacity change from 0 to 512 [ 217.808839][ T8] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 217.821775][ T7438] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.518: Unrecognised inode hash code 255 [ 217.853582][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.883864][ T7438] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.518: Corrupt directory, running e2fsck is recommended [ 217.908508][ T8] usb 3-1: Product: syz [ 217.923533][ T8] usb 3-1: Manufacturer: syz [ 217.939921][ T8] usb 3-1: SerialNumber: syz [ 217.951638][ T7438] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 217.979542][ T8] ums-karma 3-1:1.0: USB Mass Storage device detected [ 217.994929][ T7438] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.518: corrupted in-inode xattr: invalid ea_ino [ 218.038905][ T8] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 218.038905][ T8] Please send a copy of this message to and [ 218.093682][ T7438] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.518: couldn't read orphan inode 15 (err -117) [ 218.130265][ T7438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.294885][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.748563][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.773611][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.046109][ T8] ums-karma: probe of 3-1:1.0 failed with error -5 [ 220.117324][ T8] usb 3-1: USB disconnect, device number 2 [ 220.192086][ T7457] loop2: detected capacity change from 0 to 1024 [ 220.338743][ T7457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.507894][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 221.553511][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.194138][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 223.391143][ T7492] loop3: detected capacity change from 0 to 1024 [ 223.424325][ T8] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 223.450135][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.477578][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 224.492214][ T7492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.546277][ T8] usb 1-1: Product: syz [ 224.568083][ T8] usb 1-1: Manufacturer: syz [ 224.620059][ T7500] bond0: (slave bridge_slave_1): Releasing backup interface [ 224.646033][ T8] usb 1-1: SerialNumber: syz [ 224.741488][ T8] ums-karma 1-1:1.0: USB Mass Storage device detected [ 224.789906][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.815421][ T8] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 224.815421][ T8] Please send a copy of this message to and [ 226.475945][ T8] ums-karma: probe of 1-1:1.0 failed with error -5 [ 226.627142][ T8] usb 1-1: USB disconnect, device number 5 [ 227.799722][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'. [ 228.092343][ T7547] loop3: detected capacity change from 0 to 512 [ 228.137368][ T7547] EXT4-fs: Ignoring removed nobh option [ 228.181675][ T7547] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 228.257830][ T7547] EXT4-fs (loop3): 1 truncate cleaned up [ 228.286731][ T7547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.510605][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 229.540035][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.739428][ T8] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 229.768957][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.828200][ T8] usb 2-1: Product: syz [ 229.849740][ T8] usb 2-1: Manufacturer: syz [ 229.884946][ T8] usb 2-1: SerialNumber: syz [ 229.901353][ T8] ums-karma 2-1:1.0: USB Mass Storage device detected [ 229.938395][ T8] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 229.938395][ T8] Please send a copy of this message to and [ 231.035091][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'. [ 231.717277][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.782395][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.814547][ T7587] loop2: detected capacity change from 0 to 512 [ 231.821581][ T7587] EXT4-fs: Ignoring removed nobh option [ 231.869739][ T8] ums-karma: probe of 2-1:1.0 failed with error -5 [ 231.916833][ T7587] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 231.940887][ T8] usb 2-1: USB disconnect, device number 3 [ 232.042169][ T7587] EXT4-fs (loop2): 1 truncate cleaned up [ 232.185503][ T7587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.478978][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.741749][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 235.219285][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 235.241894][ T7624] loop1: detected capacity change from 0 to 512 [ 236.301640][ T7624] EXT4-fs: Ignoring removed nobh option [ 236.477486][ T7624] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 236.570900][ T7624] EXT4-fs (loop1): 1 truncate cleaned up [ 236.616958][ T7624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.857414][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.517310][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.586'. [ 240.030882][ T7664] loop2: detected capacity change from 0 to 512 [ 240.040901][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 240.091707][ T7664] EXT4-fs: Ignoring removed nobh option [ 240.158250][ T7664] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 240.287847][ T7664] EXT4-fs (loop2): 1 truncate cleaned up [ 240.322114][ T7664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.859353][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.198407][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 243.987158][ T7702] loop0: detected capacity change from 0 to 512 [ 244.043445][ T7702] EXT4-fs: Ignoring removed nobh option [ 244.113152][ T7702] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 244.233181][ T7702] EXT4-fs (loop0): 1 truncate cleaned up [ 244.283454][ T7702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.637874][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.649841][ T7734] loop1: detected capacity change from 0 to 512 [ 247.709477][ T7734] EXT4-fs: Ignoring removed nobh option [ 247.770750][ T7734] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 247.856769][ T7734] EXT4-fs (loop1): 1 truncate cleaned up [ 247.863107][ T7734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.051470][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.712900][ T7753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.623'. [ 249.828843][ T7753] netlink: 24 bytes leftover after parsing attributes in process `syz.3.623'. [ 250.051265][ T7760] loop3: detected capacity change from 0 to 512 [ 250.104768][ T7760] EXT4-fs: Ignoring removed nobh option [ 250.264986][ T7760] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 251.341441][ T7760] EXT4-fs (loop3): 1 truncate cleaned up [ 251.377768][ T7760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.647402][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.613373][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.620833][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.796123][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 256.931482][ T7816] netlink: 60 bytes leftover after parsing attributes in process `syz.3.645'. [ 256.970710][ T7816] netlink: 60 bytes leftover after parsing attributes in process `syz.3.645'. [ 257.024998][ T7819] netlink: 60 bytes leftover after parsing attributes in process `syz.3.645'. [ 257.161921][ T9] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 257.205265][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.256636][ T9] usb 2-1: Product: syz [ 257.277952][ T9] usb 2-1: Manufacturer: syz [ 257.310674][ T9] usb 2-1: SerialNumber: syz [ 257.388981][ T9] ums-karma 2-1:1.0: USB Mass Storage device detected [ 257.410207][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 257.446821][ T9] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 257.446821][ T9] Please send a copy of this message to and [ 261.931074][ T7848] netlink: 60 bytes leftover after parsing attributes in process `syz.3.654'. [ 261.981324][ T7848] netlink: 60 bytes leftover after parsing attributes in process `syz.3.654'. [ 262.032386][ T7848] netlink: 60 bytes leftover after parsing attributes in process `syz.3.654'. [ 262.384027][ T9] ums-karma: probe of 2-1:1.0 failed with error -5 [ 262.392095][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'. [ 263.466635][ T7857] hub 8-0:1.0: USB hub found [ 263.471461][ T7857] hub 8-0:1.0: 1 port detected [ 263.487357][ T9] usb 2-1: USB disconnect, device number 4 [ 266.464212][ T7882] netlink: 60 bytes leftover after parsing attributes in process `syz.0.665'. [ 266.507766][ T7882] netlink: 60 bytes leftover after parsing attributes in process `syz.0.665'. [ 266.564392][ T7882] netlink: 60 bytes leftover after parsing attributes in process `syz.0.665'. [ 266.645858][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 266.840472][ T8] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 266.881682][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.966456][ T8] usb 4-1: Product: syz [ 267.003298][ T8] usb 4-1: Manufacturer: syz [ 267.037762][ T8] usb 4-1: SerialNumber: syz [ 267.096926][ T8] ums-karma 4-1:1.0: USB Mass Storage device detected [ 267.206764][ T8] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 267.206764][ T8] Please send a copy of this message to and [ 267.388809][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'. [ 268.864215][ T7896] hub 8-0:1.0: USB hub found [ 268.869036][ T7896] hub 8-0:1.0: 1 port detected [ 268.879683][ T7879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.933925][ T7879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.111751][ T8] ums-karma: probe of 4-1:1.0 failed with error -5 [ 269.159544][ T8] usb 4-1: USB disconnect, device number 4 [ 270.722580][ T7911] netlink: 60 bytes leftover after parsing attributes in process `syz.3.674'. [ 270.766301][ T7911] netlink: 60 bytes leftover after parsing attributes in process `syz.3.674'. [ 270.816467][ T7911] netlink: 60 bytes leftover after parsing attributes in process `syz.3.674'. [ 270.854631][ T7911] netlink: 60 bytes leftover after parsing attributes in process `syz.3.674'. [ 272.332564][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 273.993885][ T7948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.685'. [ 274.194807][ T7948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.685'. [ 274.281016][ T7951] netlink: 60 bytes leftover after parsing attributes in process `syz.0.685'. [ 274.371629][ T7954] netlink: 60 bytes leftover after parsing attributes in process `syz.0.685'. [ 274.569547][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 277.689372][ T7989] netlink: 60 bytes leftover after parsing attributes in process `syz.0.701'. [ 277.706025][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 277.805885][ T7989] netlink: 60 bytes leftover after parsing attributes in process `syz.0.701'. [ 277.881813][ T7997] loop3: detected capacity change from 0 to 512 [ 278.016277][ T7993] netlink: 60 bytes leftover after parsing attributes in process `syz.0.701'. [ 278.027075][ T7997] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 279.342365][ T8006] loop2: detected capacity change from 0 to 2048 [ 280.409453][ T8006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 280.608538][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 280.786785][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 283.690102][ T8053] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 284.965882][ T8057] loop1: detected capacity change from 0 to 2048 [ 285.334266][ T8069] netlink: 60 bytes leftover after parsing attributes in process `syz.2.731'. [ 286.279064][ T8069] netlink: 60 bytes leftover after parsing attributes in process `syz.2.731'. [ 286.325540][ T8069] netlink: 60 bytes leftover after parsing attributes in process `syz.2.731'. [ 286.334829][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'. [ 286.385153][ T8077] netlink: 60 bytes leftover after parsing attributes in process `syz.2.731'. [ 286.411700][ T8057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 286.759563][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 289.282918][ T8100] loop3: detected capacity change from 0 to 128 [ 289.571193][ T8106] netlink: 60 bytes leftover after parsing attributes in process `syz.0.743'. [ 289.694307][ T8106] netlink: 60 bytes leftover after parsing attributes in process `syz.0.743'. [ 289.793149][ T8109] netlink: 60 bytes leftover after parsing attributes in process `syz.0.743'. [ 289.856694][ T8110] netlink: 60 bytes leftover after parsing attributes in process `syz.0.743'. [ 292.521883][ T8131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.753'. [ 296.434428][ T5813] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 296.717028][ T5813] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 296.943270][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.991928][ T5813] usb 2-1: Product: syz [ 297.012949][ T5813] usb 2-1: Manufacturer: syz [ 297.144304][ T5813] usb 2-1: SerialNumber: syz [ 297.167117][ T5813] ums-karma 2-1:1.0: USB Mass Storage device detected [ 298.251264][ T5813] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 298.251264][ T5813] Please send a copy of this message to and [ 298.481353][ T8206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.780'. [ 298.518846][ T8208] program syz.0.781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.967263][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.013283][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.558705][ T5813] ums-karma: probe of 2-1:1.0 failed with error -5 [ 301.625054][ T5813] usb 2-1: USB disconnect, device number 5 [ 301.681146][ T8241] program syz.2.792 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.883693][ T8248] program syz.0.794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.091787][ T8252] program syz.0.794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.564103][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 305.756138][ T8275] program syz.3.803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.798624][ T8] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 305.834936][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.866771][ T8] usb 2-1: Product: syz [ 305.870987][ T8] usb 2-1: Manufacturer: syz [ 305.911420][ T8] usb 2-1: SerialNumber: syz [ 305.955375][ T8] ums-karma 2-1:1.0: USB Mass Storage device detected [ 306.005158][ T8] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 306.005158][ T8] Please send a copy of this message to and [ 306.415998][ T8] ums-karma: probe of 2-1:1.0 failed with error -5 [ 307.527228][ T8] usb 2-1: USB disconnect, device number 6 [ 308.889486][ T8304] program syz.1.813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.158451][ T8314] program syz.3.818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.214887][ T8315] program syz.3.818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.253052][ T8317] loop1: detected capacity change from 0 to 512 [ 309.382808][ T8317] EXT4-fs: Ignoring removed i_version option [ 309.413337][ T8317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.397762][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 310.457426][ T8317] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 310.660904][ T8] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 310.711557][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.760336][ T8] usb 3-1: Product: syz [ 310.886699][ T8] usb 3-1: Manufacturer: syz [ 310.891332][ T8] usb 3-1: SerialNumber: syz [ 311.917658][ T8] ums-karma 3-1:1.0: USB Mass Storage device detected [ 311.950072][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.975132][ T8] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 311.975132][ T8] Please send a copy of this message to and [ 312.006700][ T8337] program syz.0.824 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.275132][ T8] ums-karma: probe of 3-1:1.0 failed with error -5 [ 312.348501][ T8] usb 3-1: USB disconnect, device number 3 [ 313.060303][ T8348] ip_tables: iptables: counters copy to user failed while replacing table [ 315.668657][ T8371] program syz.0.836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.717042][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 316.522181][ T8] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 316.563192][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.624081][ T8] usb 4-1: Product: syz [ 316.628288][ T8] usb 4-1: Manufacturer: syz [ 316.656033][ T8380] loop2: detected capacity change from 0 to 164 [ 316.669461][ T8] usb 4-1: SerialNumber: syz [ 316.697770][ T8] ums-karma 4-1:1.0: USB Mass Storage device detected [ 316.746897][ T8380] Unable to read rock-ridge attributes [ 316.764724][ T8] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 316.764724][ T8] Please send a copy of this message to and [ 316.836050][ T8380] Unable to read rock-ridge attributes [ 317.219451][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.225951][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.263244][ T8387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.327957][ T8387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.547893][ T8398] program syz.0.847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.577601][ T8] ums-karma: probe of 4-1:1.0 failed with error -5 [ 318.641041][ T8] usb 4-1: USB disconnect, device number 5 [ 319.058997][ T8406] netlink: 'syz.1.843': attribute type 5 has an invalid length. [ 320.908102][ T8420] program syz.3.858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.734232][ T5812] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 323.565289][ T5812] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 323.594870][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.642918][ T5812] usb 4-1: Product: syz [ 323.664739][ T5812] usb 4-1: Manufacturer: syz [ 323.669354][ T5812] usb 4-1: SerialNumber: syz [ 323.720788][ T8447] loop2: detected capacity change from 0 to 512 [ 323.742687][ T5812] ums-karma 4-1:1.0: USB Mass Storage device detected [ 323.784870][ T8447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.803019][ T5812] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 323.803019][ T5812] Please send a copy of this message to and [ 323.847382][ T8447] ext2: Unknown parameter 'obj_role' [ 325.192353][ T5812] ums-karma: probe of 4-1:1.0 failed with error -5 [ 325.264712][ T5812] usb 4-1: USB disconnect, device number 6 [ 327.675401][ T8474] program syz.1.867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.160493][ T8491] loop0: detected capacity change from 0 to 1024 [ 329.174236][ T8491] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 329.232175][ T8491] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.882: lblock 2 mapped to illegal pblock 2 (length 1) [ 329.248902][ T8491] __quota_error: 17 callbacks suppressed [ 329.248912][ T8491] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 329.263851][ T8491] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.882: lblock 0 mapped to illegal pblock 48 (length 1) [ 329.280824][ T8491] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 329.289910][ T8491] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.882: Failed to acquire dquot type 0 [ 329.305876][ T8491] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 329.318135][ T8491] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.882: mark_inode_dirty error [ 329.336957][ T8491] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 329.347402][ T8491] EXT4-fs (loop0): 1 orphan inode deleted [ 329.353795][ T8491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.393845][ T12] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 329.497302][ T12] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 330.243115][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 0 [ 330.307079][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.365322][ T5772] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 330.455228][ T5772] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 330.509346][ T5772] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 330.723318][ T8506] netlink: 256 bytes leftover after parsing attributes in process `syz.0.886'. [ 330.754977][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 330.770150][ T8506] unsupported nlmsg_type 40 [ 330.944138][ T8] usb 2-1: device descriptor read/64, error -71 [ 331.264154][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 332.030503][ T8] usb 2-1: device descriptor read/64, error -71 [ 332.168635][ T8] usb usb2-port1: attempt power cycle [ 332.624094][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 332.696017][ T8] usb 2-1: device descriptor read/8, error -71 [ 332.987496][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 333.054716][ T8] usb 2-1: device descriptor read/8, error -71 [ 333.214262][ T8] usb usb2-port1: unable to enumerate USB device [ 333.249208][ T8535] loop2: detected capacity change from 0 to 2048 [ 333.300595][ T8535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 333.396538][ T8535] EXT4-fs error (device loop2): ext4_lookup:1858: inode #16: comm syz.2.899: iget: bad i_size value: 8796093031208 [ 333.562000][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 334.892816][ T8568] loop3: detected capacity change from 0 to 1024 [ 334.943288][ T8568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 334.973222][ T8568] EXT4-fs: inline encryption not supported [ 335.019246][ T8568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 335.052098][ T8568] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 335.215586][ T8568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 335.244210][ T8568] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.205203][ T8568] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.911: lblock 0 mapped to illegal pblock 0 (length 3) [ 336.277756][ T8568] EXT4-fs (loop3): Remounting filesystem read-only [ 336.343421][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 338.425554][ T8606] loop3: detected capacity change from 0 to 512 [ 338.467489][ T8606] EXT4-fs: Ignoring removed i_version option [ 338.558691][ T8606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.624881][ T8606] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.797004][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.460680][ T8629] netlink: 'syz.1.933': attribute type 10 has an invalid length. [ 339.493247][ T8629] netlink: 'syz.1.933': attribute type 19 has an invalid length. [ 339.522936][ T8629] netlink: 156 bytes leftover after parsing attributes in process `syz.1.933'. [ 345.879914][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 345.900924][ T8746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.983'. [ 345.928631][ T8746] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.938161][ T8746] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.946909][ T8746] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.956516][ T8746] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.019225][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 346.040048][ T8746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.983'. [ 346.327462][ T8754] program syz.2.987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.973653][ T8777] program syz.1.998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.024141][ T5813] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 347.239518][ T5813] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 347.275529][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.320891][ T5813] usb 4-1: Product: syz [ 347.342860][ T5813] usb 4-1: Manufacturer: syz [ 347.359067][ T5813] usb 4-1: SerialNumber: syz [ 347.386260][ T5813] ums-karma 4-1:1.0: USB Mass Storage device detected [ 347.430316][ T5813] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 347.430316][ T5813] Please send a copy of this message to and [ 347.692130][ T5813] ums-karma: probe of 4-1:1.0 failed with error -5 [ 347.720527][ T8802] program syz.0.1008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.038388][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.101661][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.369201][ T8823] program syz.2.1020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.988829][ T8845] program syz.2.1030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.392903][ T8860] loop1: detected capacity change from 0 to 512 [ 349.422998][ T8860] EXT4-fs (loop1): orphan cleanup on readonly fs [ 349.457849][ T8860] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144). [ 349.507056][ T8860] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 349.560100][ T8860] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 349.575544][ T8860] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1038: couldn't read orphan inode 26 (err -116) [ 349.603945][ T8860] EXT4-fs (loop1): Remounting filesystem read-only [ 349.628570][ T8860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 349.743844][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.769007][ T174] usb 4-1: USB disconnect, device number 7 [ 349.962008][ T8872] loop1: detected capacity change from 0 to 256 [ 350.014654][ T8872] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 350.754305][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 350.882056][ T8904] mmap: syz.0.1056 (8904) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 350.967915][ T9] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 351.000646][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.045992][ T9] usb 2-1: Product: syz [ 351.060990][ T9] usb 2-1: Manufacturer: syz [ 351.079809][ T9] usb 2-1: SerialNumber: syz [ 351.105984][ T9] ums-karma 2-1:1.0: USB Mass Storage device detected [ 351.141793][ T9] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 351.141793][ T9] Please send a copy of this message to and [ 465.704124][ C0] ------------[ cut here ]------------ [ 465.710506][ C0] WARNING: CPU: 0 PID: 8913 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 465.721032][ C0] Modules linked in: [ 465.724920][ C0] CPU: 0 PID: 8913 Comm: syz.2.1060 Not tainted syzkaller #0 [ 465.732268][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.742312][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 465.748637][ C0] Code: ff ff ff 48 c7 c7 a0 84 33 97 be 04 00 00 00 e8 ea 20 6e 00 48 89 df b8 01 00 00 00 87 05 ac b3 c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 70 13 8d 74 47 48 c7 c0 2c bb 8c 8e 48 c1 e8 03 [ 465.768225][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 465.774292][ C0] RAX: 0000000000000000 RBX: ffffffff8d137000 RCX: ffffffff8171d0e6 [ 465.782245][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137000 [ 465.790213][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 465.798178][ C0] R10: dffffc0000000000 R11: fffffbfff2e67094 R12: 0000000000002904 [ 465.806130][ C0] R13: 1ffff92000000f94 R14: 0000000000000a02 R15: dffffc0000000000 [ 465.814094][ C0] FS: 00007ff337e286c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 465.823004][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.829568][ C0] CR2: 0000200000000000 CR3: 000000003148a000 CR4: 00000000003506f0 [ 465.837525][ C0] Call Trace: [ 465.840787][ C0] [ 465.843615][ C0] rcu_core+0x5ec/0x17f0 [ 465.847842][ C0] ? ktime_get+0x7f/0x280 [ 465.852156][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 465.857182][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 465.862358][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 465.868318][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 465.873325][ C0] ? lock_chain_count+0x20/0x20 [ 465.878174][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 465.884051][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 465.889231][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 465.895102][ C0] ? _raw_spin_unlock+0x40/0x40 [ 465.899931][ C0] ? clockevents_program_event+0x230/0x310 [ 465.905725][ C0] handle_softirqs+0x27d/0x820 [ 465.910474][ C0] ? read_tsc+0x9/0x20 [ 465.914524][ C0] ? ktime_get+0x24b/0x280 [ 465.918923][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 465.923752][ C0] ? do_softirq+0x1a0/0x1a0 [ 465.928237][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 465.933417][ C0] __irq_exit_rcu+0xd3/0x190 [ 465.937991][ C0] ? irq_exit_rcu+0x20/0x20 [ 465.942476][ C0] irq_exit_rcu+0x9/0x20 [ 465.946697][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 465.952321][ C0] [ 465.955234][ C0] [ 465.958145][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 465.964104][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 465.969901][ C0] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 da c5 cf f6 48 89 df e8 82 99 d0 f6 e8 1d a1 f4 f6 fb bf 01 00 00 00 92 a7 c3 f6 65 8b 05 f3 75 6a 75 85 c0 74 02 5b c3 e8 a0 5a 67 [ 465.989489][ C0] RSP: 0018:ffffc90004f27c78 EFLAGS: 00000286 [ 465.995540][ C0] RAX: 243d2de0f8fe4600 RBX: ffff888024cf9280 RCX: 243d2de0f8fe4600 [ 466.003490][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 466.011443][ C0] RBP: 0000000000000000 R08: ffffffff8e8c866f R09: 1ffffffff1d190cd [ 466.019395][ C0] R10: dffffc0000000000 R11: fffffbfff1d190ce R12: 0000000000000021 [ 466.027359][ C0] R13: ffff888024cf9718 R14: dffffc0000000000 R15: 000000001c000004 [ 466.035321][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.040499][ C0] get_signal+0x1197/0x1390 [ 466.045017][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 466.050546][ C0] ? get_sigframe_size+0x20/0x20 [ 466.055475][ C0] ? __se_sys_sendfile64+0x145/0x1a0 [ 466.060769][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 466.066213][ C0] exit_to_user_mode_loop+0x70/0x110 [ 466.071493][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 466.077022][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 466.082467][ C0] do_syscall_64+0x61/0xb0 [ 466.086865][ C0] ? clear_bhb_loop+0x40/0x90 [ 466.091535][ C0] ? clear_bhb_loop+0x40/0x90 [ 466.096195][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.102081][ C0] RIP: 0033:0x7ff336f9e0d9 [ 466.106489][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.126076][ C0] RSP: 002b:00007ff337e28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 466.134467][ C0] RAX: fffffffffffffe00 RBX: 00007ff337226090 RCX: 00007ff336f9e0d9 [ 466.142422][ C0] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 466.150387][ C0] RBP: 00007ff337035024 R08: 0000000000000000 R09: 0000000000000000 [ 466.158338][ C0] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000000 [ 466.166289][ C0] R13: 00007ff337226128 R14: 00007ff337226090 R15: 00007fffecccd698 [ 466.174253][ C0] [ 466.177264][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 466.184529][ C0] CPU: 0 PID: 8913 Comm: syz.2.1060 Not tainted syzkaller #0 [ 466.191912][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.201972][ C0] Call Trace: [ 466.205242][ C0] [ 466.208077][ C0] dump_stack_lvl+0x18c/0x250 [ 466.212743][ C0] ? show_regs_print_info+0x20/0x20 [ 466.217926][ C0] ? load_image+0x420/0x420 [ 466.222412][ C0] panic+0x2ca/0x720 [ 466.226300][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 466.230795][ C0] __warn+0x2e0/0x470 [ 466.234760][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 466.240482][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 466.246205][ C0] report_bug+0x2be/0x4f0 [ 466.250529][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 466.256241][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 466.261944][ C0] ? rcu_check_gp_start_stall+0x2de/0x460 [ 466.267645][ C0] handle_bug+0xcf/0x120 [ 466.271903][ C0] exc_invalid_op+0x1a/0x50 [ 466.276388][ C0] asm_exc_invalid_op+0x1a/0x20 [ 466.281220][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 466.287529][ C0] Code: ff ff ff 48 c7 c7 a0 84 33 97 be 04 00 00 00 e8 ea 20 6e 00 48 89 df b8 01 00 00 00 87 05 ac b3 c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 70 13 8d 74 47 48 c7 c0 2c bb 8c 8e 48 c1 e8 03 [ 466.307130][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 466.313177][ C0] RAX: 0000000000000000 RBX: ffffffff8d137000 RCX: ffffffff8171d0e6 [ 466.321127][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137000 [ 466.329075][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 466.337039][ C0] R10: dffffc0000000000 R11: fffffbfff2e67094 R12: 0000000000002904 [ 466.344987][ C0] R13: 1ffff92000000f94 R14: 0000000000000a02 R15: dffffc0000000000 [ 466.352941][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 466.358650][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 466.364351][ C0] rcu_core+0x5ec/0x17f0 [ 466.368577][ C0] ? ktime_get+0x7f/0x280 [ 466.372887][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 466.377895][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 466.383071][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 466.389028][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 466.394030][ C0] ? lock_chain_count+0x20/0x20 [ 466.398860][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 466.404730][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 466.409911][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 466.415782][ C0] ? _raw_spin_unlock+0x40/0x40 [ 466.420605][ C0] ? clockevents_program_event+0x230/0x310 [ 466.426398][ C0] handle_softirqs+0x27d/0x820 [ 466.431140][ C0] ? read_tsc+0x9/0x20 [ 466.435189][ C0] ? ktime_get+0x24b/0x280 [ 466.439586][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 466.444327][ C0] ? do_softirq+0x1a0/0x1a0 [ 466.448816][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 466.453996][ C0] __irq_exit_rcu+0xd3/0x190 [ 466.458566][ C0] ? irq_exit_rcu+0x20/0x20 [ 466.463048][ C0] irq_exit_rcu+0x9/0x20 [ 466.467267][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 466.472882][ C0] [ 466.475795][ C0] [ 466.478719][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.484678][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 466.490461][ C0] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 da c5 cf f6 48 89 df e8 82 99 d0 f6 e8 1d a1 f4 f6 fb bf 01 00 00 00 92 a7 c3 f6 65 8b 05 f3 75 6a 75 85 c0 74 02 5b c3 e8 a0 5a 67 [ 466.510040][ C0] RSP: 0018:ffffc90004f27c78 EFLAGS: 00000286 [ 466.516086][ C0] RAX: 243d2de0f8fe4600 RBX: ffff888024cf9280 RCX: 243d2de0f8fe4600 [ 466.524035][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 466.531985][ C0] RBP: 0000000000000000 R08: ffffffff8e8c866f R09: 1ffffffff1d190cd [ 466.539942][ C0] R10: dffffc0000000000 R11: fffffbfff1d190ce R12: 0000000000000021 [ 466.547892][ C0] R13: ffff888024cf9718 R14: dffffc0000000000 R15: 000000001c000004 [ 466.555868][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.561065][ C0] get_signal+0x1197/0x1390 [ 466.565573][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 466.571103][ C0] ? get_sigframe_size+0x20/0x20 [ 466.576045][ C0] ? __se_sys_sendfile64+0x145/0x1a0 [ 466.581334][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 466.586786][ C0] exit_to_user_mode_loop+0x70/0x110 [ 466.592069][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 466.597606][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 466.603058][ C0] do_syscall_64+0x61/0xb0 [ 466.607453][ C0] ? clear_bhb_loop+0x40/0x90 [ 466.612108][ C0] ? clear_bhb_loop+0x40/0x90 [ 466.616763][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.622632][ C0] RIP: 0033:0x7ff336f9e0d9 [ 466.627035][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.646617][ C0] RSP: 002b:00007ff337e28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 466.655008][ C0] RAX: fffffffffffffe00 RBX: 00007ff337226090 RCX: 00007ff336f9e0d9 [ 466.662957][ C0] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 466.670909][ C0] RBP: 00007ff337035024 R08: 0000000000000000 R09: 0000000000000000 [ 466.678858][ C0] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000000 [ 466.686808][ C0] R13: 00007ff337226128 R14: 00007ff337226090 R15: 00007fffecccd698 [ 466.694765][ C0] [ 466.697828][ C0] Kernel Offset: disabled [ 466.702557][ C0] Rebooting in 86400 seconds..