last executing test programs: 13.288733895s ago: executing program 1 (id=512): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '/dev/kvm\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000840}, 0x40010) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.181207568s ago: executing program 1 (id=514): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x7}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x63, &(0x7f0000000240)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65") 10.766168815s ago: executing program 1 (id=537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x143e00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="0f01cb36f08197ce000400660fc7b5c211baa000ed66b8010000000f01d9b8fd000f00d00f5d3383c21466b9800000c00f326635010000000f3066b80500000066b9003000000f01d9", 0x49}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000f80)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.575900359s ago: executing program 1 (id=539): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f00000002c0)='./proc\x00', &(0x7f0000000300), 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x8, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000200)='./bus\x00') mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) 10.525186591s ago: executing program 1 (id=541): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40187013, &(0x7f0000000080)={0x6, 0xc, 0x7, 0x13, 0x3, 0x5, 0x5, 0x13a, 0x1}) 10.009291683s ago: executing program 1 (id=544): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x61642, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) 9.930061914s ago: executing program 32 (id=544): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x61642, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) 7.922175172s ago: executing program 3 (id=560): r0 = getpid() mount$bpf(0x200000000000, 0x0, 0x0, 0x1081410, 0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x0, 0x686, 0x0, 0x9, 0x4085, 0x7ffffffe}) clock_gettime(0x6, &(0x7f0000000340)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000380)={{0x0, 0xea60}, {r1, r2/1000+10000}}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0x0, &(0x7f0000000400)={0x0, 0x4}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x800, 0x6) setns(0xc9, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000100)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x5004, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000001c0)=@x86={0xf4, 0xf, 0x0, 0x0, 0x8, 0x7, 0x8c, 0x9, 0x0, 0x1, 0xbc, 0x4, 0x0, 0x6, 0x8, 0x5, 0x7c, 0x5, 0x2, '\x00', 0x40, 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.721439497s ago: executing program 3 (id=562): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x80000) read$FUSE(r2, &(0x7f000000cc00)={0x2020}, 0x2020) 7.655331188s ago: executing program 3 (id=564): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './mnt'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x101000, 0x108) getdents64(r1, 0x0, 0x0) 7.605808689s ago: executing program 3 (id=565): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x8000, &(0x7f00000027c0)={0xf, 0x84, 0x100000}, 0x20) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000002800)='.\x00', &(0x7f0000002840)='proc\x00', 0xfffe, 0x0) 6.837869547s ago: executing program 3 (id=568): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @local}}}, 0x108) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0x0, 0xa}]}) setrlimit(0x6, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) 6.151901254s ago: executing program 2 (id=570): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 6.129963514s ago: executing program 2 (id=571): r0 = getpid() mount$bpf(0x200000000000, 0x0, 0x0, 0x1081410, 0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x0, 0x686, 0x0, 0x9, 0x4085, 0x7ffffffe}) clock_gettime(0x6, &(0x7f0000000340)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000380)={{0x0, 0xea60}, {r1, r2/1000+10000}}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0x0, &(0x7f0000000400)={0x0, 0x4}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x800, 0x6) setns(0xc9, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000100)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x5004, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000001c0)=@x86={0xf4, 0xf, 0x0, 0x0, 0x8, 0x7, 0x8c, 0x9, 0x0, 0x1, 0xbc, 0x4, 0x0, 0x6, 0x8, 0x5, 0x7c, 0x5, 0x2, '\x00', 0x40, 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.947944259s ago: executing program 3 (id=572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280"], 0x44}}, 0x0) 5.519635209s ago: executing program 2 (id=574): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x0) mount(&(0x7f0000000380)=@filename='./dev/sda1\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000400)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x2904c, 0x17, 0x10003, '\x00', [{0x0, 0x5, 0xcd, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x8001}]}) 5.395877342s ago: executing program 2 (id=575): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x14}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000580)={0x0, 0x0, 0x7, "d0a9f2a0bd7070"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xf8}, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x17, 0x6, @broadcast}, 0x0, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0xbb}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x9c}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x10}}) 4.327008517s ago: executing program 0 (id=583): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001a00e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/202, 0xca}, {&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f00000019c0)=""/4110, 0x100e}, {&(0x7f0000000880)=""/256, 0x100}, {&(0x7f0000000040)=""/137, 0x89}, {&(0x7f0000000180)=""/45, 0x2d}], 0x6}, 0x8001}, {{0x0, 0x0, 0x0}, 0x807}], 0x3, 0x12142, 0x0) 4.278014578s ago: executing program 4 (id=584): r0 = getpid() mount$bpf(0x200000000000, 0x0, 0x0, 0x1081410, 0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x0, 0x686, 0x0, 0x9, 0x4085, 0x7ffffffe}) clock_gettime(0x6, &(0x7f0000000340)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000380)={{0x0, 0xea60}, {r1, r2/1000+10000}}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0x0, &(0x7f0000000400)={0x0, 0x4}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x800, 0x6) setns(0xc9, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000100)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x5004, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000001c0)=@x86={0xf4, 0xf, 0x0, 0x0, 0x8, 0x7, 0x8c, 0x9, 0x0, 0x1, 0xbc, 0x4, 0x0, 0x6, 0x8, 0x5, 0x7c, 0x5, 0x2, '\x00', 0x40, 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.125894531s ago: executing program 4 (id=585): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x8000, 0x8001, 0x8a, 0x79, 0x2, 0x1007e, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0xf, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000005, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f000000000000000000000010000300766574683000", 0x2a}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x4000) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) mount$fuse(0x0, 0x0, &(0x7f00000002c0), 0x2400000, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) write$P9_RUNLINKAT(r3, &(0x7f00000003c0)={0x7, 0x4d, 0x1}, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.115595512s ago: executing program 0 (id=586): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000200)="76657468303a30000000000000000000020000000a") ioctl(r0, 0x8914, &(0x7f0000000000)="7665746830003d3e56077b8a0525b1c9f24545611286c02730c07f287a7bfd0364013267ed82d8a3272ebb0f6e151259ac9ef0e886bbcec954f480d5c23776ec93") 3.847840948s ago: executing program 4 (id=587): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1a8) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000100)='7', 0x1) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 3.810430919s ago: executing program 0 (id=588): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x2, 0x5}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r2, 0x0, 0x0) 3.383262779s ago: executing program 0 (id=589): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000009c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000900)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000980)="ff") socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0x3, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, 0x0, 0x4000000) setsockopt$packet_int(r2, 0x107, 0xc, 0x0, 0x0) 2.561809579s ago: executing program 2 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1100, 0x0, 0xff9e, 0x0, 0x0, 0x0) 2.323072025s ago: executing program 2 (id=591): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x88040, 0x12) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.026225061s ago: executing program 4 (id=592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0xfffffffffffffdf4}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x1000000000036, 0x40000000788, 0xffffffffffff5e1a, 0x185, 0x4, 0x707d336, 0xe6, 0x80000001, 0x3, 0x5, 0x2, 0xb, 0x200000000000000f, 0x6, 0x0, 0x2], 0x50000, 0x80c10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.042060575s ago: executing program 4 (id=593): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='27', 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) 475.860158ms ago: executing program 4 (id=594): openat$kvm(0xffffffffffffff9c, 0x0, 0x301001, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000206d044fc2000000000022090224000900001006090410ec010300030009218100ff0122280009058103000202c1e4"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x20, 0x23, 0x28, {0x28, 0x3, "c26313852642792c3cbdeace918d0fb74237cc4b44b73b5173c22fb0688881ceaa52973661d6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x1]}}, 0x5c) 277.395713ms ago: executing program 0 (id=595): r0 = getpid() mount$bpf(0x200000000000, 0x0, 0x0, 0x1081410, 0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x0, 0x686, 0x0, 0x9, 0x4085, 0x7ffffffe}) clock_gettime(0x6, &(0x7f0000000340)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000380)={{0x0, 0xea60}, {r1, r2/1000+10000}}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f00000003c0)) prlimit64(0x0, 0x0, &(0x7f0000000400)={0x0, 0x4}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x800, 0x6) setns(0xc9, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000100)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x5004, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xa000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x9, 0x6}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0xff}, {0x0, 0x0, 0xf, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x10, 0x0, 0xb, 0x1, 0x0, 0xca, 0x26, 0x0, 0x2}, {0xc000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x7, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 0 (id=596): landlock_create_ruleset(0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x181002, 0x0) write$binfmt_aout(r1, &(0x7f0000000900)=ANY=[], 0xff6b) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000940)={0x0, 0x9, 0x0, 0x2, 0x12, "1b28000440800037dd15b21f54c23003103000"}) r2 = syz_open_pts(r1, 0x20800) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000980)=0x44) write(r0, &(0x7f0000000440)='3', 0x4e) memfd_create(0x0, 0x2) kernel console output (not intermixed with test programs): limit=40427 [ 252.056200][ T5890] attempt to access beyond end of device [ 252.056200][ T5890] loop0: rw=2049, want=45144, limit=40427 [ 252.067599][ T5890] attempt to access beyond end of device [ 252.067599][ T5890] loop0: rw=2049, want=45104, limit=40427 [ 252.286151][ T5889] attempt to access beyond end of device [ 252.286151][ T5889] loop2: rw=2049, want=45144, limit=40427 [ 252.297555][ T5889] attempt to access beyond end of device [ 252.297555][ T5889] loop2: rw=2049, want=45104, limit=40427 [ 253.054271][ T5892] loop4: detected capacity change from 0 to 40427 [ 253.353776][ T4187] attempt to access beyond end of device [ 253.353776][ T4187] loop2: rw=2049, want=45152, limit=40427 [ 253.368465][ T4199] attempt to access beyond end of device [ 253.368465][ T4199] loop0: rw=2049, want=45152, limit=40427 [ 253.413692][ T5892] F2FS-fs (loop4): invalid crc value [ 253.436070][ T5892] F2FS-fs (loop4): Found nat_bits in checkpoint [ 253.499718][ T5892] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 254.009132][ T5898] loop0: detected capacity change from 0 to 40427 [ 254.044126][ T5903] attempt to access beyond end of device [ 254.044126][ T5903] loop4: rw=2049, want=45104, limit=40427 [ 254.785133][ T4186] attempt to access beyond end of device [ 254.785133][ T4186] loop4: rw=2049, want=45112, limit=40427 [ 254.805380][ T5898] F2FS-fs (loop0): invalid crc value [ 255.177495][ T5898] F2FS-fs (loop0): Found nat_bits in checkpoint [ 255.235490][ T5898] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 255.515828][ T5912] loop2: detected capacity change from 0 to 32768 [ 255.617708][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.624256][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.002892][ T5912] XFS (loop2): Mounting V5 Filesystem [ 256.661852][ T5925] attempt to access beyond end of device [ 256.661852][ T5925] loop0: rw=2049, want=45104, limit=40427 [ 257.621076][ T5925] attempt to access beyond end of device [ 257.621076][ T5925] loop0: rw=2049, want=45144, limit=40427 [ 257.633656][ T5925] attempt to access beyond end of device [ 257.633656][ T5925] loop0: rw=2049, want=45104, limit=40427 [ 258.337809][ T5912] XFS (loop2): AIL initialisation failed: error -12 [ 258.729370][ T5932] loop1: detected capacity change from 0 to 32768 [ 258.751425][ T5912] XFS (loop2): log mount failed [ 258.928167][ T5934] loop4: detected capacity change from 0 to 40427 [ 258.997325][ T4199] attempt to access beyond end of device [ 258.997325][ T4199] loop0: rw=2049, want=45152, limit=40427 [ 259.044187][ T5934] F2FS-fs (loop4): invalid crc value [ 259.276000][ T5932] XFS (loop1): Mounting V5 Filesystem [ 259.286339][ T5934] F2FS-fs (loop4): Found nat_bits in checkpoint [ 259.440700][ T5940] loop3: detected capacity change from 0 to 32768 [ 259.568333][ T5934] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 259.803881][ T5940] XFS (loop3): Mounting V5 Filesystem [ 260.273824][ T5932] XFS (loop1): Ending clean mount [ 260.282893][ T5940] XFS (loop3): Ending clean mount [ 260.283200][ T5932] XFS (loop1): Quotacheck needed: Please wait. [ 260.290825][ T5940] XFS (loop3): Quotacheck needed: Please wait. [ 260.510294][ T5932] XFS (loop1): Quotacheck: Done. [ 260.571965][ T5940] XFS (loop3): Quotacheck: Done. [ 260.847865][ T5967] attempt to access beyond end of device [ 260.847865][ T5967] loop4: rw=2049, want=45104, limit=40427 [ 260.865235][ T5967] attempt to access beyond end of device [ 260.865235][ T5967] loop4: rw=2049, want=45144, limit=40427 [ 260.876616][ T5967] attempt to access beyond end of device [ 260.876616][ T5967] loop4: rw=2049, want=45104, limit=40427 [ 262.067116][ T4186] attempt to access beyond end of device [ 262.067116][ T4186] loop4: rw=2049, want=45152, limit=40427 [ 262.822629][ T4185] XFS (loop1): Unmounting Filesystem [ 262.829518][ T4192] XFS (loop3): Unmounting Filesystem [ 263.178062][ T5975] loop2: detected capacity change from 0 to 40427 [ 263.231812][ T5975] F2FS-fs (loop2): invalid crc value [ 263.449920][ T5977] loop0: detected capacity change from 0 to 32768 [ 263.477971][ T5975] F2FS-fs (loop2): Found nat_bits in checkpoint [ 263.522667][ T5975] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 263.869438][ T5986] loop1: detected capacity change from 0 to 40427 [ 263.983524][ T5977] XFS (loop0): Mounting V5 Filesystem [ 264.026947][ T5986] F2FS-fs (loop1): invalid crc value [ 264.110731][ T5996] attempt to access beyond end of device [ 264.110731][ T5996] loop2: rw=2049, want=45104, limit=40427 [ 264.159676][ T5996] attempt to access beyond end of device [ 264.159676][ T5996] loop2: rw=2049, want=45144, limit=40427 [ 264.172172][ T5996] attempt to access beyond end of device [ 264.172172][ T5996] loop2: rw=2049, want=45104, limit=40427 [ 264.943145][ T4187] attempt to access beyond end of device [ 264.943145][ T4187] loop2: rw=2049, want=45152, limit=40427 [ 264.983445][ T5977] XFS (loop0): Ending clean mount [ 264.991269][ T5977] XFS (loop0): Quotacheck needed: Please wait. [ 265.105305][ T5993] loop4: detected capacity change from 0 to 32768 [ 265.148582][ T5986] F2FS-fs (loop1): Found nat_bits in checkpoint [ 265.222593][ T5986] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 265.247894][ T5977] XFS (loop0): Quotacheck: Done. [ 265.310386][ T6000] loop3: detected capacity change from 0 to 40427 [ 265.444496][ T6000] F2FS-fs (loop3): invalid crc value [ 266.175707][ T6012] attempt to access beyond end of device [ 266.175707][ T6012] loop1: rw=2049, want=45104, limit=40427 [ 266.462769][ T6012] attempt to access beyond end of device [ 266.462769][ T6012] loop1: rw=2049, want=45144, limit=40427 [ 266.474642][ T6012] attempt to access beyond end of device [ 266.474642][ T6012] loop1: rw=2049, want=45104, limit=40427 [ 266.938767][ T6000] F2FS-fs (loop3): Found nat_bits in checkpoint [ 266.973383][ T4185] attempt to access beyond end of device [ 266.973383][ T4185] loop1: rw=2049, want=45152, limit=40427 [ 266.998761][ T4199] XFS (loop0): Unmounting Filesystem [ 267.065539][ T5993] XFS (loop4): Mounting V5 Filesystem [ 267.090533][ T6000] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 267.124986][ T5993] XFS (loop4): log mount failed [ 267.548952][ T6019] attempt to access beyond end of device [ 267.548952][ T6019] loop3: rw=2049, want=45104, limit=40427 [ 267.594249][ T6019] attempt to access beyond end of device [ 267.594249][ T6019] loop3: rw=2049, want=45144, limit=40427 [ 269.878157][ T6028] loop4: detected capacity change from 0 to 40427 [ 269.965217][ T6028] F2FS-fs (loop4): invalid crc value [ 270.007879][ T6028] F2FS-fs (loop4): Found nat_bits in checkpoint [ 270.065849][ T6028] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 270.407815][ T6036] loop0: detected capacity change from 0 to 40427 [ 270.524007][ T6039] handle_bad_sector: 2 callbacks suppressed [ 270.524072][ T6039] attempt to access beyond end of device [ 270.524072][ T6039] loop4: rw=2049, want=45104, limit=40427 [ 270.582318][ T6039] attempt to access beyond end of device [ 270.582318][ T6039] loop4: rw=2049, want=45144, limit=40427 [ 270.594159][ T6039] attempt to access beyond end of device [ 270.594159][ T6039] loop4: rw=2049, want=45104, limit=40427 [ 270.639980][ T6036] F2FS-fs (loop0): invalid crc value [ 271.574499][ T6036] F2FS-fs (loop0): Found nat_bits in checkpoint [ 271.628311][ T4186] attempt to access beyond end of device [ 271.628311][ T4186] loop4: rw=2049, want=45152, limit=40427 [ 271.671939][ T6036] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 272.331622][ T6048] attempt to access beyond end of device [ 272.331622][ T6048] loop0: rw=2049, want=45104, limit=40427 [ 272.349012][ T6048] attempt to access beyond end of device [ 272.349012][ T6048] loop0: rw=2049, want=45144, limit=40427 [ 272.360390][ T6048] attempt to access beyond end of device [ 272.360390][ T6048] loop0: rw=2049, want=45104, limit=40427 [ 273.126757][ T4199] attempt to access beyond end of device [ 273.126757][ T4199] loop0: rw=2049, want=45152, limit=40427 [ 273.387278][ T6050] loop1: detected capacity change from 0 to 40427 [ 273.447021][ T6050] F2FS-fs (loop1): invalid crc value [ 273.504943][ T6050] F2FS-fs (loop1): Found nat_bits in checkpoint [ 273.749217][ T6056] loop4: detected capacity change from 0 to 40427 [ 273.768337][ T6050] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 273.842722][ T6056] F2FS-fs (loop4): invalid crc value [ 273.900729][ T6056] F2FS-fs (loop4): Found nat_bits in checkpoint [ 274.056051][ T6056] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 274.235454][ T6065] attempt to access beyond end of device [ 274.235454][ T6065] loop1: rw=2049, want=45104, limit=40427 [ 275.040393][ T4185] attempt to access beyond end of device [ 275.040393][ T4185] loop1: rw=2049, want=45112, limit=40427 [ 276.674640][ T4186] handle_bad_sector: 3 callbacks suppressed [ 276.674657][ T4186] attempt to access beyond end of device [ 276.674657][ T4186] loop4: rw=2049, want=45152, limit=40427 [ 277.286957][ T6076] loop2: detected capacity change from 0 to 32768 [ 277.530154][ T6076] XFS (loop2): Mounting V5 Filesystem [ 277.730409][ T6080] loop1: detected capacity change from 0 to 32768 [ 278.103085][ T6080] XFS (loop1): Mounting V5 Filesystem [ 278.118085][ T6076] XFS (loop2): Ending clean mount [ 278.125776][ T6076] XFS (loop2): Quotacheck needed: Please wait. [ 278.177961][ T6076] XFS (loop2): Quotacheck: Done. [ 278.198086][ T6098] loop3: detected capacity change from 0 to 40427 [ 278.289126][ T6080] XFS (loop1): Ending clean mount [ 278.310099][ T6080] XFS (loop1): Quotacheck needed: Please wait. [ 278.379809][ T6080] XFS (loop1): Quotacheck: Done. [ 278.428203][ T6098] F2FS-fs (loop3): invalid crc value [ 278.434200][ T4185] XFS (loop1): Unmounting Filesystem [ 278.489934][ T6098] F2FS-fs (loop3): Found nat_bits in checkpoint [ 278.767274][ T6098] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 279.167475][ T4187] XFS (loop2): Unmounting Filesystem [ 279.292520][ T6116] attempt to access beyond end of device [ 279.292520][ T6116] loop3: rw=2049, want=45104, limit=40427 [ 279.343478][ T6116] attempt to access beyond end of device [ 279.343478][ T6116] loop3: rw=2049, want=45144, limit=40427 [ 279.355522][ T6116] attempt to access beyond end of device [ 279.355522][ T6116] loop3: rw=2049, want=45104, limit=40427 [ 280.127971][ T4192] attempt to access beyond end of device [ 280.127971][ T4192] loop3: rw=2049, want=45152, limit=40427 [ 281.153994][ T6125] loop2: detected capacity change from 0 to 40427 [ 281.758043][ T6125] F2FS-fs (loop2): invalid crc value [ 282.200408][ T6125] F2FS-fs (loop2): Found nat_bits in checkpoint [ 282.248323][ T6125] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 282.719646][ T6148] loop4: detected capacity change from 0 to 40427 [ 282.863880][ T6148] F2FS-fs (loop4): invalid crc value [ 283.079013][ T6148] F2FS-fs (loop4): Found nat_bits in checkpoint [ 283.732482][ T6148] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 284.234727][ T6160] attempt to access beyond end of device [ 284.234727][ T6160] loop2: rw=2049, want=45104, limit=40427 [ 284.253596][ T6160] attempt to access beyond end of device [ 284.253596][ T6160] loop2: rw=2049, want=45144, limit=40427 [ 284.265027][ T6160] attempt to access beyond end of device [ 284.265027][ T6160] loop2: rw=2049, want=45104, limit=40427 [ 285.127550][ T4187] attempt to access beyond end of device [ 285.127550][ T4187] loop2: rw=2049, want=45152, limit=40427 [ 285.682596][ T6164] loop0: detected capacity change from 0 to 40427 [ 285.692353][ T6165] attempt to access beyond end of device [ 285.692353][ T6165] loop4: rw=2049, want=45104, limit=40427 [ 285.710668][ T6165] attempt to access beyond end of device [ 285.710668][ T6165] loop4: rw=2049, want=45144, limit=40427 [ 285.722093][ T6165] attempt to access beyond end of device [ 285.722093][ T6165] loop4: rw=2049, want=45104, limit=40427 [ 286.408996][ T6164] F2FS-fs (loop0): invalid crc value [ 286.488065][ T6164] F2FS-fs (loop0): Found nat_bits in checkpoint [ 286.535316][ T6164] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 286.570501][ T4186] attempt to access beyond end of device [ 286.570501][ T4186] loop4: rw=2049, want=45152, limit=40427 [ 286.982068][ T6173] attempt to access beyond end of device [ 286.982068][ T6173] loop0: rw=2049, want=45104, limit=40427 [ 287.920212][ T6172] loop2: detected capacity change from 0 to 32768 [ 287.929312][ T4199] attempt to access beyond end of device [ 287.929312][ T4199] loop0: rw=2049, want=45112, limit=40427 [ 288.041436][ T6172] XFS (loop2): Mounting V5 Filesystem [ 288.147400][ T6172] XFS (loop2): Ending clean mount [ 288.180859][ T6172] XFS (loop2): Quotacheck needed: Please wait. [ 288.244739][ T6172] XFS (loop2): Quotacheck: Done. [ 288.522984][ T6183] loop3: detected capacity change from 0 to 40427 [ 289.119162][ T6183] F2FS-fs (loop3): invalid crc value [ 289.138351][ T4187] XFS (loop2): Unmounting Filesystem [ 289.146751][ T6187] loop4: detected capacity change from 0 to 32768 [ 289.243473][ T6183] F2FS-fs (loop3): Found nat_bits in checkpoint [ 289.324452][ T6183] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 289.365364][ T6187] XFS (loop4): Mounting V5 Filesystem [ 289.555434][ T6187] XFS (loop4): Ending clean mount [ 289.564448][ T6187] XFS (loop4): Quotacheck needed: Please wait. [ 289.841586][ T6205] attempt to access beyond end of device [ 289.841586][ T6205] loop3: rw=2049, want=45104, limit=40427 [ 289.857300][ T6205] attempt to access beyond end of device [ 289.857300][ T6205] loop3: rw=2049, want=45144, limit=40427 [ 289.869498][ T6205] attempt to access beyond end of device [ 289.869498][ T6205] loop3: rw=2049, want=45104, limit=40427 [ 291.050788][ T6204] loop1: detected capacity change from 0 to 40427 [ 291.075256][ T6187] XFS (loop4): Quotacheck: Done. [ 291.246368][ T6207] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.252'. [ 291.288829][ T4192] attempt to access beyond end of device [ 291.288829][ T4192] loop3: rw=2049, want=45152, limit=40427 [ 291.968764][ T6204] F2FS-fs (loop1): invalid crc value [ 292.113921][ T4186] XFS (loop4): Unmounting Filesystem [ 292.232462][ T6204] F2FS-fs (loop1): Found nat_bits in checkpoint [ 292.308218][ T6204] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 292.840624][ T6218] loop0: detected capacity change from 0 to 40427 [ 292.886248][ T6218] F2FS-fs (loop0): invalid crc value [ 292.933237][ T6218] F2FS-fs (loop0): Found nat_bits in checkpoint [ 292.995324][ T6218] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 293.313002][ T6223] loop1: detected capacity change from 0 to 40427 [ 293.537125][ T6223] F2FS-fs (loop1): invalid crc value [ 293.643234][ T6229] attempt to access beyond end of device [ 293.643234][ T6229] loop0: rw=2049, want=45104, limit=40427 [ 293.691520][ T6229] attempt to access beyond end of device [ 293.691520][ T6229] loop0: rw=2049, want=45144, limit=40427 [ 293.703512][ T6229] attempt to access beyond end of device [ 293.703512][ T6229] loop0: rw=2049, want=45104, limit=40427 [ 294.463249][ T4199] attempt to access beyond end of device [ 294.463249][ T4199] loop0: rw=2049, want=45152, limit=40427 [ 294.521167][ T6223] F2FS-fs (loop1): Found nat_bits in checkpoint [ 294.587140][ T6223] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 295.347656][ T6241] loop3: detected capacity change from 0 to 40427 [ 295.358630][ T6243] loop4: detected capacity change from 0 to 40427 [ 295.431121][ T6241] F2FS-fs (loop3): invalid crc value [ 295.438227][ T6243] F2FS-fs (loop4): invalid crc value [ 295.481655][ T6241] F2FS-fs (loop3): Found nat_bits in checkpoint [ 295.529251][ T6243] F2FS-fs (loop4): Found nat_bits in checkpoint [ 295.575274][ T6241] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 295.593802][ T6243] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 295.707104][ T6253] attempt to access beyond end of device [ 295.707104][ T6253] loop1: rw=2049, want=45104, limit=40427 [ 295.767984][ T6253] attempt to access beyond end of device [ 295.767984][ T6253] loop1: rw=2049, want=45144, limit=40427 [ 295.779894][ T6253] attempt to access beyond end of device [ 295.779894][ T6253] loop1: rw=2049, want=45104, limit=40427 [ 296.814038][ T4185] attempt to access beyond end of device [ 296.814038][ T4185] loop1: rw=2049, want=45152, limit=40427 [ 297.527378][ T6261] attempt to access beyond end of device [ 297.527378][ T6261] loop4: rw=2049, want=45104, limit=40427 [ 297.541831][ T6262] attempt to access beyond end of device [ 297.541831][ T6262] loop3: rw=2049, want=45104, limit=40427 [ 298.329659][ T6261] attempt to access beyond end of device [ 298.329659][ T6261] loop4: rw=2049, want=45144, limit=40427 [ 298.341568][ T6261] attempt to access beyond end of device [ 298.341568][ T6261] loop4: rw=2049, want=45104, limit=40427 [ 298.653947][ T6262] attempt to access beyond end of device [ 298.653947][ T6262] loop3: rw=2049, want=45144, limit=40427 [ 298.666044][ T6262] attempt to access beyond end of device [ 298.666044][ T6262] loop3: rw=2049, want=45104, limit=40427 [ 299.611052][ T6264] loop2: detected capacity change from 0 to 40427 [ 299.710692][ T6264] F2FS-fs (loop2): invalid crc value [ 299.791672][ T6264] F2FS-fs (loop2): Found nat_bits in checkpoint [ 299.845397][ T6264] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 302.105625][ T6276] loop3: detected capacity change from 0 to 40427 [ 302.122831][ T4187] handle_bad_sector: 2 callbacks suppressed [ 302.122850][ T4187] attempt to access beyond end of device [ 302.122850][ T4187] loop2: rw=2049, want=45104, limit=40427 [ 302.131848][ T6278] loop1: detected capacity change from 0 to 40427 [ 302.163885][ T6276] F2FS-fs (loop3): invalid crc value [ 302.180763][ T6278] F2FS-fs (loop1): invalid crc value [ 302.207660][ T6276] F2FS-fs (loop3): Found nat_bits in checkpoint [ 302.259384][ T6278] F2FS-fs (loop1): Found nat_bits in checkpoint [ 302.308479][ T6276] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 302.313345][ T6278] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 302.745067][ T6289] attempt to access beyond end of device [ 302.745067][ T6289] loop1: rw=2049, want=45104, limit=40427 [ 302.798273][ T6289] attempt to access beyond end of device [ 302.798273][ T6289] loop1: rw=2049, want=45144, limit=40427 [ 302.810105][ T6289] attempt to access beyond end of device [ 302.810105][ T6289] loop1: rw=2049, want=45104, limit=40427 [ 303.205705][ T6290] attempt to access beyond end of device [ 303.205705][ T6290] loop3: rw=2049, want=45104, limit=40427 [ 304.369505][ T6290] attempt to access beyond end of device [ 304.369505][ T6290] loop3: rw=2049, want=45144, limit=40427 [ 304.381412][ T6290] attempt to access beyond end of device [ 304.381412][ T6290] loop3: rw=2049, want=45104, limit=40427 [ 304.469397][ T4185] attempt to access beyond end of device [ 304.469397][ T4185] loop1: rw=2049, want=45152, limit=40427 [ 304.739747][ T6292] loop4: detected capacity change from 0 to 32768 [ 304.748987][ T4192] attempt to access beyond end of device [ 304.748987][ T4192] loop3: rw=2049, want=45152, limit=40427 [ 304.872527][ T6292] XFS (loop4): Mounting V5 Filesystem [ 305.012577][ T6292] XFS (loop4): Ending clean mount [ 305.020829][ T6292] XFS (loop4): Quotacheck needed: Please wait. [ 305.136949][ T6292] XFS (loop4): Quotacheck: Done. [ 305.215420][ T6302] loop2: detected capacity change from 0 to 32768 [ 305.715486][ T6302] XFS (loop2): Mounting V5 Filesystem [ 305.843178][ T6302] XFS (loop2): Ending clean mount [ 305.850782][ T6302] XFS (loop2): Quotacheck needed: Please wait. [ 305.882840][ T6302] XFS (loop2): Quotacheck: Done. [ 306.122704][ T4186] XFS (loop4): Unmounting Filesystem [ 306.607289][ T4187] XFS (loop2): Unmounting Filesystem [ 306.802645][ T6317] loop0: detected capacity change from 0 to 40427 [ 306.888161][ T6317] F2FS-fs (loop0): invalid crc value [ 307.013110][ T6317] F2FS-fs (loop0): Found nat_bits in checkpoint [ 307.150902][ T6317] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 307.748312][ T6329] loop3: detected capacity change from 0 to 40427 [ 307.963082][ T6329] F2FS-fs (loop3): invalid crc value [ 308.396519][ T6338] attempt to access beyond end of device [ 308.396519][ T6338] loop0: rw=2049, want=45104, limit=40427 [ 308.414804][ T6338] attempt to access beyond end of device [ 308.414804][ T6338] loop0: rw=2049, want=45144, limit=40427 [ 308.426186][ T6338] attempt to access beyond end of device [ 308.426186][ T6338] loop0: rw=2049, want=45104, limit=40427 [ 309.320598][ T6329] F2FS-fs (loop3): Found nat_bits in checkpoint [ 309.377571][ T4199] attempt to access beyond end of device [ 309.377571][ T4199] loop0: rw=2049, want=45152, limit=40427 [ 309.400721][ T6329] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 309.428561][ T6341] loop2: detected capacity change from 0 to 40427 [ 309.696719][ T6341] F2FS-fs (loop2): invalid crc value [ 309.848748][ T6351] attempt to access beyond end of device [ 309.848748][ T6351] loop3: rw=2049, want=45104, limit=40427 [ 309.906437][ T6351] attempt to access beyond end of device [ 309.906437][ T6351] loop3: rw=2049, want=45144, limit=40427 [ 309.918577][ T6351] attempt to access beyond end of device [ 309.918577][ T6351] loop3: rw=2049, want=45104, limit=40427 [ 311.170852][ T4192] attempt to access beyond end of device [ 311.170852][ T4192] loop3: rw=2049, want=45152, limit=40427 [ 311.172985][ T6341] F2FS-fs (loop2): Found nat_bits in checkpoint [ 311.276473][ T6341] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 311.686199][ T6361] loop1: detected capacity change from 0 to 40427 [ 312.955630][ T6361] F2FS-fs (loop1): invalid crc value [ 312.980472][ T6361] F2FS-fs (loop1): Found nat_bits in checkpoint [ 313.148146][ T6361] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 313.186506][ T4187] attempt to access beyond end of device [ 313.186506][ T4187] loop2: rw=2049, want=45104, limit=40427 [ 313.570900][ T6372] attempt to access beyond end of device [ 313.570900][ T6372] loop1: rw=2049, want=45104, limit=40427 [ 313.624261][ T6372] attempt to access beyond end of device [ 313.624261][ T6372] loop1: rw=2049, want=45144, limit=40427 [ 313.636257][ T6372] attempt to access beyond end of device [ 313.636257][ T6372] loop1: rw=2049, want=45104, limit=40427 [ 314.426638][ T4185] attempt to access beyond end of device [ 314.426638][ T4185] loop1: rw=2049, want=45152, limit=40427 [ 316.106894][ T6388] loop1: detected capacity change from 0 to 40427 [ 316.226831][ T6388] F2FS-fs (loop1): invalid crc value [ 316.285823][ T6388] F2FS-fs (loop1): Found nat_bits in checkpoint [ 316.335537][ T6388] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 317.355315][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.361655][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.414298][ T4185] attempt to access beyond end of device [ 317.414298][ T4185] loop1: rw=2049, want=45104, limit=40427 [ 317.968495][ T6393] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6403] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6393] [ 318.021255][ T6400] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6401] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6400] [ 318.023581][ T6386] loop0: detected capacity change from 0 to 40427 [ 318.092317][ T6386] F2FS-fs (loop0): invalid crc value [ 318.140087][ T6386] F2FS-fs (loop0): Found nat_bits in checkpoint [ 318.323530][ T6410] loop1: detected capacity change from 0 to 32768 [ 319.183786][ T6410] XFS (loop1): Mounting V5 Filesystem [ 319.245600][ T6386] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 319.258588][ T6410] XFS (loop1): Ending clean mount [ 319.266836][ T6410] XFS (loop1): Quotacheck needed: Please wait. [ 319.317155][ T6410] XFS (loop1): Quotacheck: Done. [ 320.080607][ T4185] XFS (loop1): Unmounting Filesystem [ 320.110359][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 321.077950][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 321.504762][ T6447] loop1: detected capacity change from 0 to 40427 [ 321.596760][ T6447] F2FS-fs (loop1): invalid crc value [ 321.819541][ T6450] loop3: detected capacity change from 0 to 40427 [ 321.866556][ T6447] F2FS-fs (loop1): Found nat_bits in checkpoint [ 321.911009][ T6447] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 321.953791][ T6450] F2FS-fs (loop3): invalid crc value [ 322.030833][ T6450] F2FS-fs (loop3): Found nat_bits in checkpoint [ 322.077705][ T6450] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 322.923988][ T6466] attempt to access beyond end of device [ 322.923988][ T6466] loop1: rw=2049, want=45104, limit=40427 [ 322.986620][ T6466] attempt to access beyond end of device [ 322.986620][ T6466] loop1: rw=2049, want=45144, limit=40427 [ 322.998451][ T6466] attempt to access beyond end of device [ 322.998451][ T6466] loop1: rw=2049, want=45104, limit=40427 [ 323.662695][ T4185] attempt to access beyond end of device [ 323.662695][ T4185] loop1: rw=2049, want=45152, limit=40427 [ 324.191213][ T6463] loop2: detected capacity change from 0 to 32768 [ 325.025607][ T4192] attempt to access beyond end of device [ 325.025607][ T4192] loop3: rw=2049, want=45104, limit=40427 [ 325.136119][ T6463] XFS (loop2): Mounting V5 Filesystem [ 325.275523][ T6463] XFS (loop2): Ending clean mount [ 325.282734][ T6463] XFS (loop2): Quotacheck needed: Please wait. [ 325.318125][ T6463] XFS (loop2): Quotacheck: Done. [ 325.488000][ T6481] loop4: detected capacity change from 0 to 40427 [ 325.569735][ T6481] F2FS-fs (loop4): invalid crc value [ 325.618776][ T6481] F2FS-fs (loop4): Found nat_bits in checkpoint [ 325.678718][ T6481] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 326.515620][ T6491] attempt to access beyond end of device [ 326.515620][ T6491] loop4: rw=2049, want=45104, limit=40427 [ 327.003389][ T6490] loop0: detected capacity change from 0 to 32768 [ 327.021438][ T6489] attempt to access beyond end of device [ 327.021438][ T6489] loop4: rw=2049, want=45144, limit=40427 [ 327.032847][ T6489] attempt to access beyond end of device [ 327.032847][ T6489] loop4: rw=2049, want=45104, limit=40427 [ 327.223310][ T6490] XFS (loop0): Mounting V5 Filesystem [ 327.300032][ T4186] attempt to access beyond end of device [ 327.300032][ T4186] loop4: rw=2049, want=45152, limit=40427 [ 327.417692][ T6490] XFS (loop0): Ending clean mount [ 327.425526][ T6490] XFS (loop0): Quotacheck needed: Please wait. [ 327.997419][ T6506] loop1: detected capacity change from 0 to 40427 [ 328.066157][ T6506] F2FS-fs (loop1): invalid crc value [ 328.131113][ T6506] F2FS-fs (loop1): Found nat_bits in checkpoint [ 328.186966][ T6506] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 328.342323][ T6490] XFS (loop0): Quotacheck: Done. [ 329.594723][ T4187] XFS (loop2): Unmounting Filesystem [ 329.603667][ T4199] XFS (loop0): Unmounting Filesystem [ 330.736653][ T6521] loop3: detected capacity change from 0 to 32768 [ 330.888528][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 331.602503][ T6538] loop2: detected capacity change from 0 to 32768 [ 331.859783][ T6540] loop0: detected capacity change from 0 to 40427 [ 331.869065][ T6521] XFS (loop3): Mounting V5 Filesystem [ 331.972704][ T6540] F2FS-fs (loop0): invalid crc value [ 332.024371][ T6521] XFS (loop3): Ending clean mount [ 332.032275][ T6521] XFS (loop3): Quotacheck needed: Please wait. [ 332.170219][ T6540] F2FS-fs (loop0): Found nat_bits in checkpoint [ 332.193211][ T6521] XFS (loop3): Quotacheck: Done. [ 332.383297][ T6538] XFS (loop2): Mounting V5 Filesystem [ 332.681107][ T6560] loop4: detected capacity change from 0 to 40427 [ 332.852678][ T6540] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 332.941314][ T6560] F2FS-fs (loop4): invalid crc value [ 332.949885][ T4192] XFS (loop3): Unmounting Filesystem [ 332.974197][ T6560] F2FS-fs (loop4): Found nat_bits in checkpoint [ 333.022135][ T6560] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 333.024871][ T6538] XFS (loop2): Ending clean mount [ 333.042284][ T6538] XFS (loop2): Quotacheck needed: Please wait. [ 333.098314][ T6538] XFS (loop2): Quotacheck: Done. [ 334.252749][ T6573] attempt to access beyond end of device [ 334.252749][ T6573] loop4: rw=2049, want=45104, limit=40427 [ 335.270703][ T6573] attempt to access beyond end of device [ 335.270703][ T6573] loop4: rw=2049, want=45144, limit=40427 [ 335.282620][ T6573] attempt to access beyond end of device [ 335.282620][ T6573] loop4: rw=2049, want=45104, limit=40427 [ 336.346641][ T4199] attempt to access beyond end of device [ 336.346641][ T4199] loop0: rw=2049, want=45104, limit=40427 [ 336.362186][ T4187] XFS (loop2): Unmounting Filesystem [ 336.362229][ T4186] attempt to access beyond end of device [ 336.362229][ T4186] loop4: rw=2049, want=45152, limit=40427 [ 339.116864][ T6597] loop2: detected capacity change from 0 to 32768 [ 339.612780][ T6603] loop1: detected capacity change from 0 to 32768 [ 339.669973][ T6597] XFS (loop2): Mounting V5 Filesystem [ 339.955367][ T6597] XFS (loop2): Ending clean mount [ 339.966686][ T6597] XFS (loop2): Quotacheck needed: Please wait. [ 339.995053][ T6609] loop3: detected capacity change from 0 to 40427 [ 339.998372][ T6597] XFS (loop2): Quotacheck: Done. [ 340.017508][ T6603] XFS (loop1): Mounting V5 Filesystem [ 340.214743][ T6603] XFS (loop1): Ending clean mount [ 340.222045][ T6603] XFS (loop1): Quotacheck needed: Please wait. [ 340.262439][ T6609] F2FS-fs (loop3): invalid crc value [ 340.433933][ T6603] XFS (loop1): Quotacheck: Done. [ 340.894838][ T4187] XFS (loop2): Unmounting Filesystem [ 341.125312][ T6609] F2FS-fs (loop3): Found nat_bits in checkpoint [ 341.195241][ T6609] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 341.337341][ T4185] XFS (loop1): Unmounting Filesystem [ 341.683993][ T6633] attempt to access beyond end of device [ 341.683993][ T6633] loop3: rw=2049, want=45104, limit=40427 [ 341.741398][ T6633] attempt to access beyond end of device [ 341.741398][ T6633] loop3: rw=2049, want=45144, limit=40427 [ 341.753434][ T6633] attempt to access beyond end of device [ 341.753434][ T6633] loop3: rw=2049, want=45104, limit=40427 [ 342.609861][ T4192] attempt to access beyond end of device [ 342.609861][ T4192] loop3: rw=2049, want=45152, limit=40427 [ 344.536203][ T6652] loop0: detected capacity change from 0 to 32768 [ 344.585658][ T6656] loop1: detected capacity change from 0 to 40427 [ 344.813184][ T6656] F2FS-fs (loop1): invalid crc value [ 344.935347][ T6652] XFS (loop0): Mounting V5 Filesystem [ 344.955505][ T6656] F2FS-fs (loop1): Found nat_bits in checkpoint [ 345.069099][ T6656] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 345.208689][ T6652] XFS (loop0): Ending clean mount [ 345.221265][ T6652] XFS (loop0): Quotacheck needed: Please wait. [ 345.557956][ T6682] attempt to access beyond end of device [ 345.557956][ T6682] loop1: rw=2049, want=45104, limit=40427 [ 345.607979][ T6682] attempt to access beyond end of device [ 345.607979][ T6682] loop1: rw=2049, want=45144, limit=40427 [ 345.619911][ T6682] attempt to access beyond end of device [ 345.619911][ T6682] loop1: rw=2049, want=45104, limit=40427 [ 346.808688][ T6652] XFS (loop0): Quotacheck: Done. [ 346.984801][ T4185] attempt to access beyond end of device [ 346.984801][ T4185] loop1: rw=2049, want=45152, limit=40427 [ 347.470473][ T4199] XFS (loop0): Unmounting Filesystem [ 347.665648][ T6694] loop3: detected capacity change from 0 to 40427 [ 347.878634][ T6694] F2FS-fs (loop3): invalid crc value [ 347.921369][ T6696] loop4: detected capacity change from 0 to 32768 [ 348.007113][ T6694] F2FS-fs (loop3): Found nat_bits in checkpoint [ 348.054850][ T6694] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 348.379846][ T6696] XFS (loop4): Mounting V5 Filesystem [ 349.087394][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 349.087416][ T26] audit: type=1800 audit(1792635385.275:95): pid=6709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.317" name="file2" dev="loop3" ino=10 res=0 errno=0 [ 349.286747][ T4192] attempt to access beyond end of device [ 349.286747][ T4192] loop3: rw=2049, want=45104, limit=40427 [ 349.440605][ T6713] loop0: detected capacity change from 0 to 32768 [ 349.456792][ T6696] XFS (loop4): Ending clean mount [ 349.536431][ T6696] XFS (loop4): Quotacheck needed: Please wait. [ 349.689083][ T6717] loop1: detected capacity change from 0 to 32768 [ 349.833779][ T6713] XFS (loop0): Mounting V5 Filesystem [ 349.837063][ T6696] XFS (loop4): Quotacheck: Done. [ 349.853907][ T6717] XFS (loop1): Mounting V5 Filesystem [ 350.408013][ T6717] XFS (loop1): Ending clean mount [ 350.415769][ T6717] XFS (loop1): Quotacheck needed: Please wait. [ 350.430990][ T6713] XFS (loop0): Ending clean mount [ 350.438746][ T6713] XFS (loop0): Quotacheck needed: Please wait. [ 350.475478][ T6717] XFS (loop1): Quotacheck: Done. [ 350.731794][ T6713] XFS (loop0): Quotacheck: Done. [ 350.973533][ T6737] loop2: detected capacity change from 0 to 40427 [ 351.500068][ T4186] XFS (loop4): Unmounting Filesystem [ 351.550678][ T6737] F2FS-fs (loop2): invalid crc value [ 351.572404][ T6737] F2FS-fs (loop2): Found nat_bits in checkpoint [ 351.623703][ T4185] XFS (loop1): Unmounting Filesystem [ 351.641773][ T6737] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 351.692429][ T4199] XFS (loop0): Unmounting Filesystem [ 352.385660][ T6748] attempt to access beyond end of device [ 352.385660][ T6748] loop2: rw=2049, want=45104, limit=40427 [ 352.936594][ T6745] attempt to access beyond end of device [ 352.936594][ T6745] loop2: rw=2049, want=45144, limit=40427 [ 352.948917][ T6745] attempt to access beyond end of device [ 352.948917][ T6745] loop2: rw=2049, want=45104, limit=40427 [ 353.246826][ T4187] attempt to access beyond end of device [ 353.246826][ T4187] loop2: rw=2049, want=45152, limit=40427 [ 353.752968][ T6751] loop1: detected capacity change from 0 to 512 [ 354.092102][ T6753] loop2: detected capacity change from 0 to 32768 [ 354.200347][ T6757] loop4: detected capacity change from 0 to 40427 [ 354.340917][ T6751] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 354.363487][ T6751] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.404299][ T6756] loop0: detected capacity change from 0 to 40427 [ 354.450780][ T6757] F2FS-fs (loop4): invalid crc value [ 354.488716][ T6756] F2FS-fs (loop0): invalid crc value [ 354.522220][ T6757] F2FS-fs (loop4): Found nat_bits in checkpoint [ 354.570464][ T6753] XFS (loop2): Mounting V5 Filesystem [ 354.633579][ T6756] F2FS-fs (loop0): Found nat_bits in checkpoint [ 354.656381][ T6757] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 354.706825][ T6756] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 355.060074][ T6753] XFS (loop2): Ending clean mount [ 355.070249][ T6753] XFS (loop2): Quotacheck needed: Please wait. [ 355.134944][ T6753] XFS (loop2): Quotacheck: Done. [ 356.202187][ T6784] attempt to access beyond end of device [ 356.202187][ T6784] loop4: rw=2049, want=45104, limit=40427 [ 356.215893][ T6783] attempt to access beyond end of device [ 356.215893][ T6783] loop0: rw=2049, want=45104, limit=40427 [ 356.281002][ T6784] attempt to access beyond end of device [ 356.281002][ T6784] loop4: rw=2049, want=45144, limit=40427 [ 356.292891][ T6784] attempt to access beyond end of device [ 356.292891][ T6784] loop4: rw=2049, want=45104, limit=40427 [ 356.316589][ T6783] attempt to access beyond end of device [ 356.316589][ T6783] loop0: rw=2049, want=45144, limit=40427 [ 356.327954][ T6783] attempt to access beyond end of device [ 356.327954][ T6783] loop0: rw=2049, want=45104, limit=40427 [ 357.269605][ T4187] XFS (loop2): Unmounting Filesystem [ 357.384497][ T6785] loop3: detected capacity change from 0 to 40427 [ 357.491542][ T6785] F2FS-fs (loop3): invalid crc value [ 357.698841][ T6785] F2FS-fs (loop3): Found nat_bits in checkpoint [ 357.858034][ T6794] loop1: detected capacity change from 0 to 8 [ 358.112642][ T6785] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 359.203779][ T6805] handle_bad_sector: 2 callbacks suppressed [ 359.203827][ T6805] attempt to access beyond end of device [ 359.203827][ T6805] loop3: rw=2049, want=45104, limit=40427 [ 359.264188][ T6805] attempt to access beyond end of device [ 359.264188][ T6805] loop3: rw=2049, want=45144, limit=40427 [ 359.276077][ T6805] attempt to access beyond end of device [ 359.276077][ T6805] loop3: rw=2049, want=45104, limit=40427 [ 360.215463][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 360.566896][ T4192] attempt to access beyond end of device [ 360.566896][ T4192] loop3: rw=2049, want=45152, limit=40427 [ 360.831311][ T6815] loop2: detected capacity change from 0 to 32768 [ 361.596213][ T6823] loop4: detected capacity change from 0 to 32768 [ 361.699711][ T6823] XFS (loop4): Mounting V5 Filesystem [ 361.755305][ T6815] XFS (loop2): Mounting V5 Filesystem [ 361.859646][ T6823] XFS (loop4): Ending clean mount [ 361.867155][ T6823] XFS (loop4): Quotacheck needed: Please wait. [ 362.004387][ T6823] XFS (loop4): Quotacheck: Done. [ 362.916443][ T6815] XFS (loop2): Ending clean mount [ 362.923695][ T6815] XFS (loop2): Quotacheck needed: Please wait. [ 362.974985][ T4186] XFS (loop4): Unmounting Filesystem [ 363.014069][ T6815] XFS (loop2): Quotacheck: Done. [ 363.197611][ T6856] loop1: detected capacity change from 0 to 40427 [ 363.253857][ T6856] F2FS-fs (loop1): invalid crc value [ 363.585991][ T6856] F2FS-fs (loop1): Found nat_bits in checkpoint [ 363.645356][ T6856] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 364.880060][ T26] audit: type=1800 audit(1792635401.625:96): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.336" name="file2" dev="loop1" ino=10 res=0 errno=0 [ 365.498899][ T4187] XFS (loop2): Unmounting Filesystem [ 365.674201][ T4185] attempt to access beyond end of device [ 365.674201][ T4185] loop1: rw=2049, want=45104, limit=40427 [ 366.035734][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 366.478776][ T6877] loop4: detected capacity change from 0 to 40427 [ 366.515495][ T6879] loop1: detected capacity change from 0 to 40427 [ 366.549230][ T6877] F2FS-fs (loop4): invalid crc value [ 366.550706][ T6879] F2FS-fs (loop1): invalid crc value [ 366.571753][ T6877] F2FS-fs (loop4): Found nat_bits in checkpoint [ 366.642987][ T6877] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 366.681414][ T6879] F2FS-fs (loop1): Found nat_bits in checkpoint [ 366.804747][ T6879] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 366.957922][ T6887] loop0: detected capacity change from 0 to 40427 [ 367.234519][ T6887] F2FS-fs (loop0): invalid crc value [ 367.698102][ T6893] attempt to access beyond end of device [ 367.698102][ T6893] loop4: rw=2049, want=45104, limit=40427 [ 367.738196][ T6894] attempt to access beyond end of device [ 367.738196][ T6894] loop1: rw=2049, want=45104, limit=40427 [ 368.816786][ T6894] attempt to access beyond end of device [ 368.816786][ T6894] loop1: rw=2049, want=45144, limit=40427 [ 368.816977][ T6893] attempt to access beyond end of device [ 368.816977][ T6893] loop4: rw=2049, want=45144, limit=40427 [ 368.828188][ T6894] attempt to access beyond end of device [ 368.828188][ T6894] loop1: rw=2049, want=45104, limit=40427 [ 368.839451][ T6893] attempt to access beyond end of device [ 368.839451][ T6893] loop4: rw=2049, want=45104, limit=40427 [ 369.760774][ T6887] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 369.989536][ T4185] attempt to access beyond end of device [ 369.989536][ T4185] loop1: rw=2049, want=45152, limit=40427 [ 370.002790][ T4186] attempt to access beyond end of device [ 370.002790][ T4186] loop4: rw=2049, want=45152, limit=40427 [ 370.345532][ T6897] loop0: detected capacity change from 0 to 40427 [ 370.422346][ T6897] F2FS-fs (loop0): invalid crc value [ 370.496155][ T6897] F2FS-fs (loop0): Found nat_bits in checkpoint [ 370.552487][ T6897] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 371.637245][ T6911] loop2: detected capacity change from 0 to 32768 [ 371.698651][ T6913] attempt to access beyond end of device [ 371.698651][ T6913] loop0: rw=2049, want=45104, limit=40427 [ 371.754734][ T6913] attempt to access beyond end of device [ 371.754734][ T6913] loop0: rw=2049, want=45144, limit=40427 [ 371.766551][ T6913] attempt to access beyond end of device [ 371.766551][ T6913] loop0: rw=2049, want=45104, limit=40427 [ 372.542614][ T4199] attempt to access beyond end of device [ 372.542614][ T4199] loop0: rw=2049, want=45152, limit=40427 [ 372.651104][ T6911] XFS (loop2): Mounting V5 Filesystem [ 373.024409][ T6925] loop4: detected capacity change from 0 to 40427 [ 373.079256][ T6929] fuse: Bad value for 'fd' [ 374.168147][ T6925] F2FS-fs (loop4): invalid crc value [ 374.459294][ T6925] F2FS-fs (loop4): Found nat_bits in checkpoint [ 374.470520][ T6911] XFS (loop2): Ending clean mount [ 374.477984][ T6911] XFS (loop2): Quotacheck needed: Please wait. [ 374.775305][ T6937] loop3: detected capacity change from 0 to 32768 [ 374.800985][ T6938] loop1: detected capacity change from 0 to 40427 [ 374.822073][ T6925] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 374.895750][ T6911] XFS (loop2): Quotacheck: Done. [ 374.940721][ T4187] XFS (loop2): Unmounting Filesystem [ 375.028798][ T6938] F2FS-fs (loop1): invalid crc value [ 375.455178][ T6949] attempt to access beyond end of device [ 375.455178][ T6949] loop4: rw=2049, want=45104, limit=40427 [ 375.473790][ T6949] attempt to access beyond end of device [ 375.473790][ T6949] loop4: rw=2049, want=45144, limit=40427 [ 375.485207][ T6949] attempt to access beyond end of device [ 375.485207][ T6949] loop4: rw=2049, want=45104, limit=40427 [ 375.697758][ T6938] F2FS-fs (loop1): Found nat_bits in checkpoint [ 375.755954][ T6938] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 375.780640][ T6937] XFS (loop3): Mounting V5 Filesystem [ 375.811930][ T4186] attempt to access beyond end of device [ 375.811930][ T4186] loop4: rw=2049, want=45152, limit=40427 [ 375.909110][ T6937] XFS (loop3): Ending clean mount [ 375.917179][ T6937] XFS (loop3): Quotacheck needed: Please wait. [ 375.985589][ T6937] XFS (loop3): Quotacheck: Done. [ 376.099306][ T6959] attempt to access beyond end of device [ 376.099306][ T6959] loop1: rw=2049, want=45104, limit=40427 [ 376.115778][ T6959] attempt to access beyond end of device [ 376.115778][ T6959] loop1: rw=2049, want=45144, limit=40427 [ 376.714129][ T4185] handle_bad_sector: 1 callbacks suppressed [ 376.714150][ T4185] attempt to access beyond end of device [ 376.714150][ T4185] loop1: rw=2049, want=45152, limit=40427 [ 376.735035][ T4192] XFS (loop3): Unmounting Filesystem [ 377.755243][ T26] audit: type=1326 audit(1792635414.505:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.0.351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4783a559 code=0x7ffc0000 [ 378.497658][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.504092][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.548225][ T6969] overlayfs: failed to resolve './bus': -2 [ 378.687665][ T26] audit: type=1326 audit(1792635414.505:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.0.351" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4783a559 code=0x7ffc0000 [ 379.277031][ T6977] loop2: detected capacity change from 0 to 32768 [ 379.591428][ T6979] loop3: detected capacity change from 0 to 40427 [ 379.597313][ T6981] loop1: detected capacity change from 0 to 40427 [ 379.651080][ T6981] F2FS-fs (loop1): invalid crc value [ 379.687667][ T6979] F2FS-fs (loop3): invalid crc value [ 379.709362][ T6981] F2FS-fs (loop1): Found nat_bits in checkpoint [ 379.723087][ T6977] XFS (loop2): Mounting V5 Filesystem [ 379.751364][ T6979] F2FS-fs (loop3): Found nat_bits in checkpoint [ 379.912227][ T6979] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 380.028364][ T6981] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 380.076559][ T6977] XFS (loop2): Ending clean mount [ 380.084474][ T6977] XFS (loop2): Quotacheck needed: Please wait. [ 381.618581][ T6977] XFS (loop2): Quotacheck: Done. [ 381.692005][ T4192] attempt to access beyond end of device [ 381.692005][ T4192] loop3: rw=2049, want=45104, limit=40427 [ 381.823000][ T4187] XFS (loop2): Unmounting Filesystem [ 381.975571][ T7006] attempt to access beyond end of device [ 381.975571][ T7006] loop1: rw=2049, want=45104, limit=40427 [ 382.008642][ T7006] attempt to access beyond end of device [ 382.008642][ T7006] loop1: rw=2049, want=45144, limit=40427 [ 382.020113][ T7006] attempt to access beyond end of device [ 382.020113][ T7006] loop1: rw=2049, want=45104, limit=40427 [ 382.246704][ T4185] attempt to access beyond end of device [ 382.246704][ T4185] loop1: rw=2049, want=45152, limit=40427 [ 385.612897][ T7035] loop1: detected capacity change from 0 to 40427 [ 385.651147][ T7035] F2FS-fs (loop1): invalid crc value [ 386.811770][ T7035] F2FS-fs (loop1): Found nat_bits in checkpoint [ 386.866079][ T7035] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 387.370082][ T26] audit: type=1800 audit(1792635424.145:99): pid=7051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.360" name="file2" dev="loop1" ino=10 res=0 errno=0 [ 388.159187][ T4185] attempt to access beyond end of device [ 388.159187][ T4185] loop1: rw=2049, want=45104, limit=40427 [ 389.411718][ T7057] loop0: detected capacity change from 0 to 40427 [ 389.499128][ T7057] F2FS-fs (loop0): invalid crc value [ 389.596989][ T7057] F2FS-fs (loop0): Found nat_bits in checkpoint [ 389.713697][ T7057] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 390.133909][ T7067] loop4: detected capacity change from 0 to 40427 [ 390.145252][ T7069] attempt to access beyond end of device [ 390.145252][ T7069] loop0: rw=2049, want=45104, limit=40427 [ 390.161603][ T7069] attempt to access beyond end of device [ 390.161603][ T7069] loop0: rw=2049, want=45144, limit=40427 [ 390.173000][ T7069] attempt to access beyond end of device [ 390.173000][ T7069] loop0: rw=2049, want=45104, limit=40427 [ 390.679699][ T7067] F2FS-fs (loop4): invalid crc value [ 390.702112][ T4199] attempt to access beyond end of device [ 390.702112][ T4199] loop0: rw=2049, want=45152, limit=40427 [ 391.610292][ T7067] F2FS-fs (loop4): Found nat_bits in checkpoint [ 391.645461][ T7067] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 391.923147][ T7083] attempt to access beyond end of device [ 391.923147][ T7083] loop4: rw=2049, want=45104, limit=40427 [ 391.941525][ T7083] attempt to access beyond end of device [ 391.941525][ T7083] loop4: rw=2049, want=45144, limit=40427 [ 391.952865][ T7083] attempt to access beyond end of device [ 391.952865][ T7083] loop4: rw=2049, want=45104, limit=40427 [ 392.269228][ T4186] attempt to access beyond end of device [ 392.269228][ T4186] loop4: rw=2049, want=45152, limit=40427 [ 393.358653][ T7088] loop1: detected capacity change from 0 to 32768 [ 393.560300][ T7088] XFS (loop1): Mounting V5 Filesystem [ 393.740504][ T7088] XFS (loop1): Ending clean mount [ 393.747921][ T7088] XFS (loop1): Quotacheck needed: Please wait. [ 394.003450][ T7088] XFS (loop1): Quotacheck: Done. [ 394.959309][ T4185] XFS (loop1): Unmounting Filesystem [ 396.148168][ T7129] loop3: detected capacity change from 0 to 32768 [ 396.424506][ T7133] fuse: Bad value for 'fd' [ 397.436369][ T7129] XFS (loop3): Mounting V5 Filesystem [ 397.628591][ T7129] XFS (loop3): Ending clean mount [ 398.966836][ T7129] XFS (loop3): Quotacheck needed: Please wait. [ 399.025750][ T7129] XFS (loop3): Quotacheck: Done. [ 399.069179][ T4192] XFS (loop3): Unmounting Filesystem [ 399.396774][ T7153] loop1: detected capacity change from 0 to 32768 [ 400.152404][ T7153] XFS (loop1): Mounting V5 Filesystem [ 400.521756][ T7173] loop0: detected capacity change from 0 to 32768 [ 401.499741][ T7180] loop3: detected capacity change from 0 to 32768 [ 401.513006][ T7173] XFS (loop0): Mounting V5 Filesystem [ 401.513473][ T7153] XFS (loop1): Ending clean mount [ 401.528800][ T7153] XFS (loop1): Quotacheck needed: Please wait. [ 401.595476][ T7153] XFS (loop1): Quotacheck: Done. [ 402.777895][ T4185] XFS (loop1): Unmounting Filesystem [ 402.811628][ T7180] XFS (loop3): Mounting V5 Filesystem [ 402.829621][ T7173] XFS (loop0): Ending clean mount [ 402.837118][ T7173] XFS (loop0): Quotacheck needed: Please wait. [ 402.864592][ T7173] XFS (loop0): Quotacheck: Done. [ 403.014129][ T7200] loop2: detected capacity change from 0 to 32768 [ 403.376969][ T4199] XFS (loop0): Unmounting Filesystem [ 403.405387][ T7180] XFS (loop3): Ending clean mount [ 403.413001][ T7180] XFS (loop3): Quotacheck needed: Please wait. [ 403.556427][ T7180] XFS (loop3): Quotacheck: Done. [ 403.726039][ T7200] XFS (loop2): Mounting V5 Filesystem [ 403.809890][ T7200] XFS (loop2): Ending clean mount [ 403.820226][ T7200] XFS (loop2): Quotacheck needed: Please wait. [ 404.016488][ T4192] XFS (loop3): Unmounting Filesystem [ 404.054650][ T7200] XFS (loop2): Quotacheck: Done. [ 404.309644][ T4187] XFS (loop2): Unmounting Filesystem [ 404.534022][ T7221] loop1: detected capacity change from 0 to 32768 [ 404.892783][ T7221] XFS (loop1): Mounting V5 Filesystem [ 405.796969][ T7221] XFS (loop1): Ending clean mount [ 405.804132][ T7221] XFS (loop1): Quotacheck needed: Please wait. [ 405.850644][ T7221] XFS (loop1): Quotacheck: Done. [ 405.932344][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 406.374624][ T7242] loop3: detected capacity change from 0 to 40427 [ 406.677037][ T7242] F2FS-fs (loop3): invalid crc value [ 406.691280][ T4185] XFS (loop1): Unmounting Filesystem [ 406.840645][ T7242] F2FS-fs (loop3): Found nat_bits in checkpoint [ 406.949531][ T7242] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 408.552509][ T7264] attempt to access beyond end of device [ 408.552509][ T7264] loop3: rw=2049, want=45104, limit=40427 [ 408.569893][ T7264] attempt to access beyond end of device [ 408.569893][ T7264] loop3: rw=2049, want=45144, limit=40427 [ 408.581261][ T7264] attempt to access beyond end of device [ 408.581261][ T7264] loop3: rw=2049, want=45104, limit=40427 [ 410.754175][ T4192] attempt to access beyond end of device [ 410.754175][ T4192] loop3: rw=2049, want=45152, limit=40427 [ 411.260618][ T7275] loop0: detected capacity change from 0 to 32768 [ 411.476193][ T7275] XFS (loop0): Mounting V5 Filesystem [ 411.691833][ T7275] XFS (loop0): Ending clean mount [ 411.700147][ T7275] XFS (loop0): Quotacheck needed: Please wait. [ 412.133852][ T7275] XFS (loop0): Quotacheck: Done. [ 412.825995][ T7293] Zero length message leads to an empty skb [ 412.958757][ T4199] XFS (loop0): Unmounting Filesystem [ 415.975559][ T7312] loop4: detected capacity change from 0 to 40427 [ 416.051897][ T7312] F2FS-fs (loop4): invalid crc value [ 416.099539][ T7312] F2FS-fs (loop4): Found nat_bits in checkpoint [ 416.165988][ T7312] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 416.815646][ T7323] attempt to access beyond end of device [ 416.815646][ T7323] loop4: rw=2049, want=45104, limit=40427 [ 417.008213][ T7323] attempt to access beyond end of device [ 417.008213][ T7323] loop4: rw=2049, want=45144, limit=40427 [ 417.020129][ T7323] attempt to access beyond end of device [ 417.020129][ T7323] loop4: rw=2049, want=45104, limit=40427 [ 417.726357][ T4186] attempt to access beyond end of device [ 417.726357][ T4186] loop4: rw=2049, want=45152, limit=40427 [ 418.887338][ T7335] loop1: detected capacity change from 0 to 32768 [ 419.572763][ T7335] XFS (loop1): Mounting V5 Filesystem [ 420.374932][ T7335] XFS (loop1): Ending clean mount [ 420.382246][ T7335] XFS (loop1): Quotacheck needed: Please wait. [ 420.409719][ T7335] XFS (loop1): Quotacheck: Done. [ 420.562331][ T7349] loop3: detected capacity change from 0 to 32768 [ 421.046907][ T4185] XFS (loop1): Unmounting Filesystem [ 421.098478][ T7354] loop0: detected capacity change from 0 to 40427 [ 421.155842][ T7354] F2FS-fs (loop0): invalid crc value [ 421.227365][ T7349] XFS (loop3): Mounting V5 Filesystem [ 421.230919][ T7354] F2FS-fs (loop0): Found nat_bits in checkpoint [ 421.281411][ T7354] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 421.547496][ T7349] XFS (loop3): Ending clean mount [ 421.557243][ T7349] XFS (loop3): Quotacheck needed: Please wait. [ 421.864797][ T7349] XFS (loop3): Quotacheck: Done. [ 422.296118][ T7378] attempt to access beyond end of device [ 422.296118][ T7378] loop0: rw=2049, want=45104, limit=40427 [ 422.421346][ T4199] attempt to access beyond end of device [ 422.421346][ T4199] loop0: rw=2049, want=45112, limit=40427 [ 422.564960][ T4192] XFS (loop3): Unmounting Filesystem [ 422.717524][ T7382] loop1: detected capacity change from 0 to 40427 [ 422.845206][ T7382] F2FS-fs (loop1): invalid crc value [ 422.901669][ T26] audit: type=1326 audit(1792635459.695:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.4.413" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd036bee559 code=0x7ffc0000 [ 422.928747][ T7383] IPVS: ip_vs_add_dest(): server weight less than zero [ 422.999318][ T7382] F2FS-fs (loop1): Found nat_bits in checkpoint [ 423.005186][ T26] audit: type=1326 audit(1792635459.695:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.4.413" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd036bee559 code=0x7ffc0000 [ 423.055059][ T7382] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 423.155167][ T26] audit: type=1326 audit(1792635459.725:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.4.413" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd036baed8e code=0x7ffc0000 [ 423.251140][ T26] audit: type=1326 audit(1792635459.725:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.4.413" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd036bee559 code=0x7ffc0000 [ 423.319386][ T7389] attempt to access beyond end of device [ 423.319386][ T7389] loop1: rw=2049, want=45104, limit=40427 [ 423.368207][ T7389] attempt to access beyond end of device [ 423.368207][ T7389] loop1: rw=2049, want=45144, limit=40427 [ 423.380048][ T7389] attempt to access beyond end of device [ 423.380048][ T7389] loop1: rw=2049, want=45104, limit=40427 [ 424.092583][ T26] audit: type=1326 audit(1792635459.725:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.4.413" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd036bee559 code=0x7ffc0000 [ 424.124564][ T4185] attempt to access beyond end of device [ 424.124564][ T4185] loop1: rw=2049, want=45152, limit=40427 [ 424.212035][ T26] audit: type=1326 audit(1792635459.725:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.4.413" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd036bee559 code=0x7ffc0000 [ 424.306502][ T26] audit: type=1326 audit(1792635459.725:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.4.413" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd036bee559 code=0x7ffc0000 [ 425.365178][ T26] audit: type=1326 audit(1792635459.725:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.4.413" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd036bee559 code=0x7ffc0000 [ 425.556848][ T7401] loop2: detected capacity change from 0 to 40427 [ 425.576053][ T26] audit: type=1326 audit(1792635459.725:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.4.413" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd036bee559 code=0x7ffc0000 [ 425.606603][ T26] audit: type=1326 audit(1792635459.725:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.4.413" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd036bee559 code=0x7ffc0000 [ 425.657737][ T7401] F2FS-fs (loop2): invalid crc value [ 425.728388][ T7401] F2FS-fs (loop2): Found nat_bits in checkpoint [ 425.795311][ T7401] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 426.204000][ T7408] attempt to access beyond end of device [ 426.204000][ T7408] loop2: rw=2049, want=45104, limit=40427 [ 426.221155][ T7408] attempt to access beyond end of device [ 426.221155][ T7408] loop2: rw=2049, want=45144, limit=40427 [ 426.232629][ T7408] attempt to access beyond end of device [ 426.232629][ T7408] loop2: rw=2049, want=45104, limit=40427 [ 427.516358][ T4187] attempt to access beyond end of device [ 427.516358][ T4187] loop2: rw=2049, want=45152, limit=40427 [ 427.916449][ T7417] loop1: detected capacity change from 0 to 40427 [ 427.959561][ T7417] F2FS-fs (loop1): invalid crc value [ 428.015298][ T7417] F2FS-fs (loop1): Found nat_bits in checkpoint [ 429.485431][ T7417] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 429.721418][ T7433] attempt to access beyond end of device [ 429.721418][ T7433] loop1: rw=2049, want=45104, limit=40427 [ 429.772629][ T7433] attempt to access beyond end of device [ 429.772629][ T7433] loop1: rw=2049, want=45144, limit=40427 [ 429.784553][ T7433] attempt to access beyond end of device [ 429.784553][ T7433] loop1: rw=2049, want=45104, limit=40427 [ 430.546607][ T4185] attempt to access beyond end of device [ 430.546607][ T4185] loop1: rw=2049, want=45152, limit=40427 [ 432.163253][ T7444] loop3: detected capacity change from 0 to 32768 [ 432.207641][ T7445] loop2: detected capacity change from 0 to 40427 [ 432.321624][ T7445] F2FS-fs (loop2): invalid crc value [ 432.363829][ T7445] F2FS-fs (loop2): Found nat_bits in checkpoint [ 432.413079][ T7445] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 433.140189][ T7444] XFS (loop3): Mounting V5 Filesystem [ 433.845743][ T7471] attempt to access beyond end of device [ 433.845743][ T7471] loop2: rw=2049, want=45104, limit=40427 [ 435.946845][ T7444] XFS (loop3): log mount failed [ 436.099476][ T4187] attempt to access beyond end of device [ 436.099476][ T4187] loop2: rw=2049, want=45112, limit=40427 [ 436.386744][ T7481] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 436.413253][ T7481] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 436.537427][ T5167] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 436.553303][ T4293] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 436.589993][ T4293] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 436.755230][ T3159] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 436.795816][ T5167] usb 5-1: Using ep0 maxpacket: 16 [ 436.915440][ T5167] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.935193][ T5167] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.949231][ T5167] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.962926][ T5167] usb 5-1: config 0 interface 0 has no altsetting 0 [ 436.970164][ T5167] usb 5-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 436.980050][ T5167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.000683][ T7504] loop7: detected capacity change from 0 to 7 [ 437.006681][ T5167] usb 5-1: config 0 descriptor?? [ 437.023405][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.034583][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 437.043140][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.054121][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 437.062488][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.073442][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 437.081567][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.092552][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 437.125309][ T3159] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 437.125546][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.136853][ T3159] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.147199][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 437.155991][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.160564][ T3159] usb 2-1: config 0 interface 0 has no altsetting 0 [ 437.167868][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 437.169697][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.179418][ T3159] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 437.185422][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 437.185567][ T7504] ldm_validate_partition_table(): Disk read failed. [ 437.193793][ T3159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.210031][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.217760][ T3159] usb 2-1: config 0 descriptor?? [ 437.221333][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 437.225949][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.271102][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 437.288057][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.298994][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 437.307233][ T7513] process 'syz.2.450' launched './file0' with NULL argv: empty string added [ 437.307521][ T7504] Dev loop7: unable to read RDB block 0 [ 437.329106][ T7504] loop7: unable to read partition table [ 437.334981][ T7504] loop7: partition table beyond EOD, truncated [ 437.347342][ T7504] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 437.357606][ T7313] ldm_validate_partition_table(): Disk read failed. [ 437.377331][ T7313] Dev loop7: unable to read RDB block 0 [ 437.383753][ T7313] loop7: unable to read partition table [ 437.395263][ T4264] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 437.399376][ T7313] loop7: partition table beyond EOD, truncated [ 437.493073][ T5167] logitech 0003:046D:C215.0002: unknown main item tag 0x0 [ 437.527155][ T5167] logitech 0003:046D:C215.0002: unknown main item tag 0x0 [ 437.543504][ T5167] logitech 0003:046D:C215.0002: unknown main item tag 0x0 [ 437.551783][ T5167] logitech 0003:046D:C215.0002: item 0 1 0 8 parsing failed [ 437.559934][ T5167] logitech 0003:046D:C215.0002: parse failed [ 437.566411][ T5167] logitech: probe of 0003:046D:C215.0002 failed with error -22 [ 437.707786][ T3159] zeroplus 0003:0C12:0030.0003: unknown global tag 0xc [ 437.719431][ T3159] zeroplus 0003:0C12:0030.0003: item 0 2 1 12 parsing failed [ 437.728221][ T5167] usb 5-1: USB disconnect, device number 2 [ 437.735501][ T3159] zeroplus 0003:0C12:0030.0003: parse failed [ 437.735529][ T4293] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 437.741538][ T3159] zeroplus: probe of 0003:0C12:0030.0003 failed with error -22 [ 437.835316][ T4263] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 437.914047][ T4297] usb 2-1: USB disconnect, device number 2 [ 437.995356][ T4264] usb 4-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 438.004537][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.013619][ T4293] usb 3-1: Using ep0 maxpacket: 16 [ 438.019101][ T4264] usb 4-1: Product: syz [ 438.023281][ T4264] usb 4-1: Manufacturer: syz [ 438.028134][ T4264] usb 4-1: SerialNumber: syz [ 438.185416][ T4293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.196502][ T4293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.207265][ T4293] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 438.220347][ T4293] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 438.230447][ T4293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.248495][ T4293] usb 3-1: config 0 descriptor?? [ 438.253136][ T7527] FAULT_INJECTION: forcing a failure. [ 438.253136][ T7527] name failslab, interval 1, probability 0, space 0, times 1 [ 438.256176][ T4263] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 438.273016][ T7527] CPU: 1 PID: 7527 Comm: syz.4.456 Not tainted syzkaller #0 [ 438.281895][ T4263] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.284315][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 438.297551][ T4263] usb 1-1: config 0 interface 0 has no altsetting 0 [ 438.307126][ T7527] Call Trace: [ 438.307139][ T7527] [ 438.307147][ T7527] dump_stack_lvl+0x188/0x250 [ 438.314030][ T4263] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 438.317045][ T7527] ? show_regs_print_info+0x20/0x20 [ 438.317075][ T7527] ? load_image+0x410/0x410 [ 438.320011][ T4263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.324698][ T7527] should_fail+0x383/0x4b0 [ 438.344036][ T4264] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 438.351362][ T7527] should_failslab+0x5/0x20 [ 438.351449][ T7527] slab_pre_alloc_hook+0x51/0xc0 [ 438.351496][ T7527] kmem_cache_alloc_trace+0x47/0x290 [ 438.351516][ T7527] ? tipc_sub_subscribe+0x110/0x750 [ 438.351570][ T7527] tipc_sub_subscribe+0x110/0x750 [ 438.351597][ T7527] tipc_conn_rcv_sub+0x14f/0x370 [ 438.351646][ T7527] tipc_topsrv_kern_subscr+0x185/0x250 [ 438.351671][ T7527] ? conn_put+0x320/0x320 [ 438.351705][ T7527] tipc_group_create+0x357/0x4e0 [ 438.351735][ T7527] tipc_sk_join+0x256/0x6a0 [ 438.351761][ T7527] ? __tipc_sendstream+0x1280/0x1280 [ 438.351793][ T7527] tipc_setsockopt+0x6b8/0x960 [ 438.351820][ T7527] ? tipc_shutdown+0x4d0/0x4d0 [ 438.351842][ T7527] ? aa_sock_opt_perm+0x74/0x100 [ 438.363761][ T4263] usb 1-1: config 0 descriptor?? [ 438.366709][ T7527] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 438.374924][ T4264] usb 4-1: USB disconnect, device number 2 [ 438.376984][ T7527] ? security_socket_setsockopt+0x7a/0xa0 [ 438.386345][ T7525] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 438.387276][ T7527] ? tipc_shutdown+0x4d0/0x4d0 [ 438.387305][ T7527] __sys_setsockopt+0x2bf/0x3d0 [ 438.469741][ T7527] __x64_sys_setsockopt+0xb1/0xc0 [ 438.474778][ T7527] do_syscall_64+0x4c/0xa0 [ 438.479206][ T7527] ? clear_bhb_loop+0x30/0x80 [ 438.483937][ T7527] ? clear_bhb_loop+0x30/0x80 [ 438.488651][ T7527] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 438.494590][ T7527] RIP: 0033:0x7fd036bee559 [ 438.499013][ T7527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.518774][ T7527] RSP: 002b:00007fd034e45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 438.527336][ T7527] RAX: ffffffffffffffda RBX: 00007fd036e74fa0 RCX: 00007fd036bee559 [ 438.535319][ T7527] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 438.543337][ T7527] RBP: 00007fd036c85b20 R08: 0000000000000010 R09: 0000000000000000 [ 438.551326][ T7527] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 438.559307][ T7527] R13: 00007fd036e75038 R14: 00007fd036e74fa0 R15: 00007ffc947530a8 [ 438.567304][ T7527] [ 438.574148][ T7527] tipc: Subscription rejected, no memory [ 438.658441][ T7529] kvm: emulating exchange as write [ 438.751380][ T7536] netlink: 'syz.4.459': attribute type 4 has an invalid length. [ 438.793400][ T7536] netlink: 'syz.4.459': attribute type 4 has an invalid length. [ 438.809356][ T4293] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 438.832777][ T4293] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 438.849128][ T4293] microsoft 0003:045E:07DA.0004: no inputs found [ 438.863117][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 438.874774][ T4293] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 438.886368][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 438.893442][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 438.915212][ T4264] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 438.928612][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 438.936455][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 438.943538][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 438.951162][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 438.959217][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 438.969982][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 438.983411][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 438.993928][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 439.012119][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 439.040598][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 439.070508][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 439.086201][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 439.093531][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 439.106307][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 439.113375][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 439.126243][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 439.133530][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 439.146583][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 439.153727][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 439.166866][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 439.174146][ T4263] uclogic 0003:28BD:0094.0005: unknown main item tag 0x0 [ 439.187382][ T4263] uclogic 0003:28BD:0094.0005: No inputs registered, leaving [ 439.201391][ T4263] uclogic 0003:28BD:0094.0005: hidraw1: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input0 [ 439.241912][ T4263] usb 1-1: USB disconnect, device number 2 [ 439.271461][ T4293] usb 3-1: USB disconnect, device number 2 [ 439.348590][ T7549] fido_id[7549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 439.486764][ T4264] usb 4-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 439.496133][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.504114][ T4264] usb 4-1: Product: syz [ 439.508761][ T4264] usb 4-1: Manufacturer: syz [ 439.513367][ T4264] usb 4-1: SerialNumber: syz [ 439.621597][ T7564] WARNING! power/level is deprecated; use power/control instead [ 439.763558][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 439.763575][ T26] audit: type=1800 audit(1792635476.555:126): pid=7576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.473" name="file2" dev="sda1" ino=2048 res=0 errno=0 [ 439.781376][ T7163] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 439.819838][ T4264] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 439.937233][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.943594][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.155211][ T5167] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 440.162843][ T3159] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 440.225302][ T7163] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 440.236254][ T7163] usb 5-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.249424][ T7163] usb 5-1: config 0 interface 0 has no altsetting 0 [ 440.256629][ T7163] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 440.265940][ T7163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.277753][ T7163] usb 5-1: config 0 descriptor?? [ 440.297004][ T7562] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 440.325221][ T4264] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 440.405312][ T5167] usb 3-1: Using ep0 maxpacket: 16 [ 440.525312][ T3159] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 440.533531][ T5167] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.544492][ T3159] usb 1-1: config 0 has no interface number 0 [ 440.550689][ T5167] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.563581][ T3159] usb 1-1: config 0 interface 41 has no altsetting 0 [ 440.570436][ T5167] usb 3-1: config 0 interface 0 has no altsetting 0 [ 440.577097][ T5167] usb 3-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 440.586322][ T5167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.598546][ T5167] usb 3-1: config 0 descriptor?? [ 440.725293][ T3159] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 440.734480][ T3159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.742585][ T3159] usb 1-1: Product: syz [ 440.746807][ T3159] usb 1-1: Manufacturer: syz [ 440.751452][ T3159] usb 1-1: SerialNumber: syz [ 440.758427][ T4264] usb 2-1: config 0 interface 0 has no altsetting 0 [ 440.766778][ T7163] kye 0003:0458:5013.0006: ignoring exceeding usage max [ 440.767809][ T3159] usb 1-1: config 0 descriptor?? [ 440.775536][ T4264] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 440.789774][ T7163] kye 0003:0458:5013.0006: No inputs registered, leaving [ 440.796850][ T4264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.806603][ T7163] kye 0003:0458:5013.0006: hidraw0: USB HID v0.10 Joystick [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 440.819431][ T7163] kye 0003:0458:5013.0006: tablet-enabling feature report not found [ 440.828875][ T4264] usb 2-1: config 0 descriptor?? [ 440.834258][ T7163] kye 0003:0458:5013.0006: tablet enabling failed [ 441.000643][ T7163] usb 5-1: USB disconnect, device number 3 [ 441.078795][ T5167] waltop 0003:172F:0502.0007: unknown main item tag 0x0 [ 441.086018][ T5167] waltop 0003:172F:0502.0007: unknown main item tag 0x0 [ 441.092988][ T5167] waltop 0003:172F:0502.0007: unbalanced collection at end of report description [ 441.102756][ T5167] waltop: probe of 0003:172F:0502.0007 failed with error -22 [ 441.277945][ T4252] usb 3-1: USB disconnect, device number 3 [ 441.305783][ T4264] hid (null): unknown global tag 0xfd [ 441.312141][ T4264] hid (null): unknown global tag 0xe [ 441.318560][ T4264] hid (null): global environment stack underflow [ 441.330209][ T4264] waltop 0003:172F:0034.0008: unexpected long global item [ 441.338319][ T4264] waltop: probe of 0003:172F:0034.0008 failed with error -22 [ 441.511110][ T4264] usb 2-1: USB disconnect, device number 3 [ 441.610413][ T5167] usb 4-1: USB disconnect, device number 3 [ 441.697415][ T3159] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 441.856252][ T7163] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 442.205316][ T4264] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 442.245384][ T7163] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 442.256628][ T7163] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 442.270044][ T7163] usb 5-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 442.279192][ T7163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.295367][ T7163] usb 5-1: config 0 descriptor?? [ 442.585888][ T4264] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 442.597751][ T4264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.608912][ T4264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.618740][ T4264] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 442.707841][ T4264] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 442.719736][ T4264] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 442.731728][ T4264] usb 3-1: Manufacturer: syz [ 442.743094][ T4264] usb 3-1: config 0 descriptor?? [ 442.780184][ T7163] wacom 0003:056A:037A.0009: unknown main item tag 0x3 [ 442.792893][ T7163] wacom 0003:056A:037A.0009: Unknown device_type for 'HID 056a:037a'. Assuming pen. [ 442.811856][ T7163] wacom 0003:056A:037A.0009: hidraw0: USB HID vf.ff Device [HID 056a:037a] on usb-dummy_hcd.4-1/input0 [ 442.832659][ T7163] input: Wacom One by Wacom S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:037A.0009/input/input7 [ 443.063397][ T5167] usb 5-1: USB disconnect, device number 4 [ 443.070157][ T3159] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 443.097006][ T3159] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 443.123317][ T3159] CoreChips: probe of 1-1:0.41 failed with error -71 [ 443.128848][ T7638] fido_id[7638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 443.140839][ T3159] usb 1-1: USB disconnect, device number 3 [ 443.228870][ T4264] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 443.237939][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 443.247795][ T4264] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 443.270714][ T4264] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 443.550181][ T7163] usb 3-1: USB disconnect, device number 4 [ 443.728964][ T7667] netlink: 'syz.1.510': attribute type 12 has an invalid length. [ 444.128232][ T26] audit: type=1800 audit(1792635480.925:127): pid=7696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.521" name="file2" dev="sda1" ino=2048 res=0 errno=0 [ 444.145221][ T7163] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 444.173080][ T7698] netlink: 'syz.3.522': attribute type 4 has an invalid length. [ 444.230944][ T5167] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 444.259557][ T7704] capability: warning: `syz.2.525' uses 32-bit capabilities (legacy support in use) [ 444.314184][ T7704] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 444.315208][ T3159] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 444.331011][ T26] audit: type=1800 audit(1792635481.125:128): pid=7709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.527" name="file2" dev="sda1" ino=2048 res=0 errno=0 [ 444.515405][ T7163] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.533126][ T7163] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 444.542296][ T7163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.559612][ T7163] usb 2-1: config 0 descriptor?? [ 444.625578][ T5167] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 444.637313][ T5167] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.651837][ T5167] usb 1-1: config 0 interface 0 has no altsetting 0 [ 444.658736][ T5167] usb 1-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 444.668286][ T5167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.680730][ T5167] usb 1-1: config 0 descriptor?? [ 444.735431][ T3159] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.749689][ T3159] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 444.762674][ T3159] usb 5-1: config 0 interface 0 has no altsetting 0 [ 444.769372][ T3159] usb 5-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00 [ 444.778656][ T3159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.795858][ T3159] usb 5-1: config 0 descriptor?? [ 445.046719][ T7163] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 445.073496][ T7163] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000B/input/input11 [ 445.193714][ T5167] itetech 0003:06CB:2968.000C: unknown main item tag 0x0 [ 445.195908][ T7163] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 445.203196][ T5167] itetech 0003:06CB:2968.000C: unknown main item tag 0x0 [ 445.221759][ T5167] itetech 0003:06CB:2968.000C: unknown main item tag 0x0 [ 445.228895][ T5167] itetech 0003:06CB:2968.000C: unknown main item tag 0x0 [ 445.249973][ T5167] itetech 0003:06CB:2968.000C: unknown main item tag 0x0 [ 445.295396][ T5167] itetech 0003:06CB:2968.000C: unknown main item tag 0x0 [ 445.302497][ T5167] itetech 0003:06CB:2968.000C: unknown main item tag 0x0 [ 445.314284][ T3159] ntrig 0003:1B96:0006.000D: unknown main item tag 0x0 [ 445.335173][ T3159] ntrig 0003:1B96:0006.000D: unknown main item tag 0x0 [ 445.342101][ T3159] ntrig 0003:1B96:0006.000D: unknown main item tag 0x0 [ 445.353738][ T5167] itetech 0003:06CB:2968.000C: unknown main item tag 0x0 [ 445.375148][ T3159] ntrig 0003:1B96:0006.000D: unknown main item tag 0x0 [ 445.382084][ T3159] ntrig 0003:1B96:0006.000D: unknown main item tag 0x0 [ 445.392478][ T5167] itetech 0003:06CB:2968.000C: unknown main item tag 0x0 [ 445.406274][ T5167] itetech 0003:06CB:2968.000C: unknown main item tag 0x0 [ 445.421391][ T3159] ntrig 0003:1B96:0006.000D: unknown main item tag 0x0 [ 445.426290][ T7163] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 445.429576][ T5167] itetech 0003:06CB:2968.000C: unknown main item tag 0x0 [ 445.442896][ T3159] ntrig 0003:1B96:0006.000D: unknown main item tag 0x0 [ 445.450672][ T3159] ntrig 0003:1B96:0006.000D: unknown main item tag 0x0 [ 445.458004][ T5167] itetech 0003:06CB:2968.000C: unknown main item tag 0x0 [ 445.465461][ T3159] ntrig 0003:1B96:0006.000D: unknown main item tag 0x0 [ 445.473417][ T5167] itetech 0003:06CB:2968.000C: unknown main item tag 0x0 [ 445.481302][ T3159] ntrig 0003:1B96:0006.000D: unknown main item tag 0x0 [ 445.490357][ T5167] itetech 0003:06CB:2968.000C: unknown main item tag 0x0 [ 445.497542][ T3159] ntrig 0003:1B96:0006.000D: unknown main item tag 0x0 [ 445.504420][ T3159] ntrig 0003:1B96:0006.000D: unknown main item tag 0x0 [ 445.505361][ C0] keytouch 0003:0926:3333.000B: Event data for report 0 was too short (8 vs 3) [ 445.511361][ T5167] itetech 0003:06CB:2968.000C: unbalanced collection at end of report description [ 445.532152][ T3159] ntrig 0003:1B96:0006.000D: unknown main item tag 0x0 [ 445.539149][ T3159] ntrig 0003:1B96:0006.000D: unknown main item tag 0x0 [ 445.546601][ T5167] itetech: probe of 0003:06CB:2968.000C failed with error -22 [ 445.555061][ T3159] ntrig 0003:1B96:0006.000D: unbalanced collection at end of report description [ 445.564516][ T3159] ntrig 0003:1B96:0006.000D: parse failed [ 445.573352][ T5167] usb 1-1: USB disconnect, device number 4 [ 445.580680][ T3159] ntrig: probe of 0003:1B96:0006.000D failed with error -22 [ 445.614527][ T3159] usb 5-1: USB disconnect, device number 5 [ 445.743978][ T4264] usb 2-1: USB disconnect, device number 4 [ 445.805369][ T7163] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.818361][ T7163] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.832976][ T7163] usb 3-1: config 0 interface 0 has no altsetting 0 [ 445.839893][ T7163] usb 3-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 445.849527][ T7163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.866716][ T7163] usb 3-1: config 0 descriptor?? [ 446.350401][ T7163] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:06A3:0CD0.000E/input/input12 [ 446.470527][ T7163] saitek 0003:06A3:0CD0.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.2-1/input0 [ 446.525215][ T3159] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 446.622742][ T7163] usb 3-1: USB disconnect, device number 5 [ 446.678529][ T7745] fido_id[7745]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 446.775199][ T5167] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 446.785615][ T3159] usb 1-1: Using ep0 maxpacket: 32 [ 446.885634][ T7749] kvm: pic: single mode not supported [ 446.885835][ T7749] kvm: pic: non byte read [ 446.935415][ T3159] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.954534][ T3159] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 446.974481][ T3159] usb 1-1: config 0 interface 0 has no altsetting 0 [ 446.986912][ T3159] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 447.002854][ T3159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.023964][ T3159] usb 1-1: config 0 descriptor?? [ 447.095076][ T4340] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.145690][ T7754] netlink: 72 bytes leftover after parsing attributes in process `syz.3.546'. [ 447.189312][ T4340] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.230433][ T5167] usb 5-1: unable to get BOS descriptor or descriptor too short [ 447.301754][ T7758] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 447.303169][ T4340] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.360058][ T5167] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 447.392343][ T4340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.411874][ T7762] rxe_eth0 speed is unknown, defaulting to 1000 [ 447.420671][ T7762] rxe_eth0 speed is unknown, defaulting to 1000 [ 447.431347][ T7762] rxe_eth0 speed is unknown, defaulting to 1000 [ 447.511682][ T3159] input: HID 17ef:60a4 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:17EF:60A4.000F/input/input13 [ 447.549811][ T7163] rxe_eth0 speed is unknown, defaulting to 1000 [ 447.549789][ T7762] infiniband rxe0: set active [ 447.565363][ T5167] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 447.579108][ T7762] infiniband rxe0: added rxe_eth0 [ 447.590396][ T5167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.609747][ T5167] usb 5-1: Product: syz [ 447.614524][ T5167] usb 5-1: Manufacturer: syz [ 447.633786][ T5167] usb 5-1: SerialNumber: syz [ 447.650102][ T3159] lenovo 0003:17EF:60A4.000F: input,hiddev0,hidraw0: USB HID v0.07 Device [HID 17ef:60a4] on usb-dummy_hcd.0-1/input0 [ 447.688312][ T7762] RDS/IB: rxe0: added [ 447.692438][ T7762] smc: adding ib device rxe0 with port count 1 [ 447.698987][ T7744] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 447.706334][ T4907] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 447.742768][ T21] usb 1-1: USB disconnect, device number 5 [ 447.748417][ T7762] smc: ib device rxe0 port 1 has pnetid [ 447.824090][ T4264] rxe_eth0 speed is unknown, defaulting to 1000 [ 447.844581][ T7762] rxe_eth0 speed is unknown, defaulting to 1000 [ 447.881938][ T7772] fido_id[7772]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 448.085794][ T5167] usb 5-1: MIDIStreaming interface descriptor not found [ 448.122930][ T7762] rxe_eth0 speed is unknown, defaulting to 1000 [ 448.135412][ T4907] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 448.184984][ T5167] usb 5-1: USB disconnect, device number 6 [ 448.191116][ T4907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.214724][ T4907] usb 3-1: config 0 descriptor?? [ 448.250779][ T7306] udevd[7306]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.365270][ T7787] syz.0.552 uses obsolete (PF_INET,SOCK_PACKET) [ 448.418162][ T7789] FAULT_INJECTION: forcing a failure. [ 448.418162][ T7789] name failslab, interval 1, probability 0, space 0, times 0 [ 448.453850][ T7789] CPU: 0 PID: 7789 Comm: syz.3.553 Not tainted syzkaller #0 [ 448.461207][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 448.471291][ T7789] Call Trace: [ 448.474595][ T7789] [ 448.477564][ T7789] dump_stack_lvl+0x188/0x250 [ 448.482287][ T7789] ? show_regs_print_info+0x20/0x20 [ 448.487521][ T7789] ? load_image+0x410/0x410 [ 448.492041][ T7789] ? __lock_acquire+0x7d40/0x7d40 [ 448.497139][ T7789] ? stack_trace_save+0xf0/0xf0 [ 448.502034][ T7789] should_fail+0x383/0x4b0 [ 448.506458][ T7789] should_failslab+0x5/0x20 [ 448.510958][ T7789] slab_pre_alloc_hook+0x51/0xc0 [ 448.515893][ T7789] ? sockfs_init_fs_context+0xa0/0xa0 [ 448.521265][ T7789] ? sock_alloc_inode+0x17/0xb0 [ 448.526116][ T7789] kmem_cache_alloc+0x3d/0x280 [ 448.530983][ T7789] ? sockfs_init_fs_context+0xa0/0xa0 [ 448.536454][ T7789] sock_alloc_inode+0x17/0xb0 [ 448.541136][ T7789] ? sockfs_init_fs_context+0xa0/0xa0 [ 448.546768][ T7789] new_inode_pseudo+0x5f/0x210 [ 448.551574][ T7789] sock_create_lite+0x87/0x500 [ 448.556341][ T7789] __netlink_kernel_create+0xfa/0x7d0 [ 448.561785][ T7789] ? __lock_acquire+0x7d40/0x7d40 [ 448.566822][ T7789] ? netlink_set_err+0x3c0/0x3c0 [ 448.571768][ T7789] audit_net_init+0xc7/0x1f0 [ 448.576409][ T7789] ? kauditd_thread+0xb20/0xb20 [ 448.581346][ T7789] ? audit_net_exit+0x40/0x40 [ 448.586018][ T7789] ? audit_receive+0x2d20/0x2d20 [ 448.590959][ T7789] ? audit_multicast_bind+0x30/0x30 [ 448.596167][ T7789] ops_init+0x360/0x5f0 [ 448.600374][ T7789] setup_net+0x39e/0xa10 [ 448.604716][ T7789] ? copy_net_ns+0x5b0/0x5b0 [ 448.609325][ T7789] ? copy_net_ns+0x324/0x5b0 [ 448.613925][ T7789] ? down_read_killable+0x1ce/0x340 [ 448.619124][ T7789] copy_net_ns+0x33e/0x5b0 [ 448.623547][ T7789] create_new_namespaces+0x3ce/0x700 [ 448.628899][ T7789] unshare_nsproxy_namespaces+0x116/0x160 [ 448.634630][ T7789] ksys_unshare+0x4f6/0x8e0 [ 448.639159][ T7789] ? __lock_acquire+0x7d40/0x7d40 [ 448.644211][ T7789] ? sighand_ctor+0x40/0x40 [ 448.648711][ T7789] ? lock_chain_count+0x20/0x20 [ 448.653568][ T7789] ? syscall_enter_from_user_mode+0x21/0x70 [ 448.659496][ T7789] __x64_sys_unshare+0x34/0x40 [ 448.664261][ T7789] do_syscall_64+0x4c/0xa0 [ 448.668750][ T7789] ? clear_bhb_loop+0x30/0x80 [ 448.673429][ T7789] ? clear_bhb_loop+0x30/0x80 [ 448.678104][ T7789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 448.684102][ T7789] RIP: 0033:0x7fc6b2897559 [ 448.688531][ T7789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.708142][ T7789] RSP: 002b:00007fc6b0aee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 448.716571][ T7789] RAX: ffffffffffffffda RBX: 00007fc6b2b1dfa0 RCX: 00007fc6b2897559 [ 448.724549][ T7789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 448.732529][ T7789] RBP: 00007fc6b292eb20 R08: 0000000000000000 R09: 0000000000000000 [ 448.740515][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.748498][ T7789] R13: 00007fc6b2b1e038 R14: 00007fc6b2b1dfa0 R15: 00007ffd359a9288 [ 448.756497][ T7789] [ 448.808541][ T7762] rxe_eth0 speed is unknown, defaulting to 1000 [ 448.896585][ T7789] audit: cannot initialize netlink socket in namespace [ 449.086362][ T7762] rxe_eth0 speed is unknown, defaulting to 1000 [ 449.245278][ T4264] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 449.317417][ T7762] rxe_eth0 speed is unknown, defaulting to 1000 [ 449.455332][ T7163] Bluetooth: hci1: command 0x0409 tx timeout [ 449.485168][ T4264] usb 1-1: Using ep0 maxpacket: 16 [ 449.582700][ T7832] ======================================================= [ 449.582700][ T7832] WARNING: The mand mount option has been deprecated and [ 449.582700][ T7832] and is ignored by this kernel. Remove the mand [ 449.582700][ T7832] option from the mount to silence this warning. [ 449.582700][ T7832] ======================================================= [ 449.605346][ T4264] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 449.634426][ T4264] usb 1-1: config 0 has no interface number 0 [ 449.642195][ T4264] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 449.650620][ T7762] rxe_eth0 speed is unknown, defaulting to 1000 [ 449.695287][ T4264] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 449.772186][ T4340] device hsr_slave_0 left promiscuous mode [ 449.787891][ T4340] device hsr_slave_1 left promiscuous mode [ 449.816360][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.823872][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.856479][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.875375][ T4264] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 449.884361][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.894511][ T4907] usb 3-1: Cannot set autoneg [ 449.895177][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.903147][ T4907] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 449.917588][ T4264] usb 1-1: Product: syz [ 449.921779][ T4264] usb 1-1: Manufacturer: syz [ 449.939452][ T4907] usb 3-1: USB disconnect, device number 6 [ 449.946610][ T4264] usb 1-1: SerialNumber: syz [ 449.956019][ T4340] device bridge_slave_1 left promiscuous mode [ 449.963955][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.972116][ T4264] usb 1-1: config 0 descriptor?? [ 449.987064][ T4340] device bridge_slave_0 left promiscuous mode [ 449.993444][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.001378][ T7803] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 450.011577][ T7803] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 450.038926][ T4340] device veth1_macvtap left promiscuous mode [ 450.045773][ T4340] device veth0_macvtap left promiscuous mode [ 450.051864][ T4340] device veth1_vlan left promiscuous mode [ 450.058536][ T4340] device veth0_vlan left promiscuous mode [ 450.105175][ T4293] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 450.242284][ T7803] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 450.255336][ T7803] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 450.478716][ T4293] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.504672][ T4340] team0 (unregistering): Port device team_slave_1 removed [ 450.525682][ T4340] team0 (unregistering): Port device team_slave_0 removed [ 450.547738][ T4340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.571366][ T4340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.665324][ T4293] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 450.679532][ T4293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.704280][ T4293] usb 5-1: Product: syz [ 450.708750][ T4293] usb 5-1: Manufacturer: syz [ 450.713440][ T4293] usb 5-1: SerialNumber: syz [ 450.733600][ T4340] bond0 (unregistering): Released all slaves [ 450.924403][ T4264] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 450.982102][ T4264] asix: probe of 1-1:0.34 failed with error -71 [ 450.986644][ T7762] chnl_net:caif_netlink_parms(): no params data found [ 451.014083][ T4264] usb 1-1: USB disconnect, device number 6 [ 451.105341][ T7762] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.112664][ T7762] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.120888][ T7762] device bridge_slave_0 entered promiscuous mode [ 451.156146][ T7762] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.173594][ T7762] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.181961][ T7762] device bridge_slave_1 entered promiscuous mode [ 451.213762][ T7762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.226180][ T7762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.270599][ T7762] team0: Port device team_slave_0 added [ 451.287517][ T7762] team0: Port device team_slave_1 added [ 451.319879][ T7762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.335138][ T7762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.380151][ T7762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.397159][ T7762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.414419][ T7762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.461036][ T7762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.540665][ T7163] Bluetooth: hci1: command 0x041b tx timeout [ 451.589698][ T7877] netlink: 'syz.0.573': attribute type 4 has an invalid length. [ 451.693169][ T7762] device hsr_slave_0 entered promiscuous mode [ 451.710564][ T7762] device hsr_slave_1 entered promiscuous mode [ 451.730538][ T7762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.761281][ T7762] Cannot create hsr debugfs directory [ 451.886559][ T4293] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 451.893046][ T4293] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 451.911160][ T4293] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 451.965281][ T7163] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 451.979846][ T7885] rxe_eth0 speed is unknown, defaulting to 1000 [ 452.105277][ T4293] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 452.135353][ T4293] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 452.185327][ T4293] usb 5-1: USB disconnect, device number 7 [ 452.216793][ T7762] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 452.246377][ T4293] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 452.273988][ T7762] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 452.344863][ T7762] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 452.365645][ T7163] usb 3-1: unable to get BOS descriptor or descriptor too short [ 452.382972][ T7762] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 452.445337][ T7163] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.464557][ T7163] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.669755][ T7762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.735433][ T7163] usb 3-1: string descriptor 0 read error: -22 [ 452.741715][ T7163] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 452.758691][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 452.777715][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 452.801834][ T7163] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.821680][ T7762] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.847342][ T7885] chnl_net:caif_netlink_parms(): no params data found [ 452.905442][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 452.914267][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 452.927730][ T7163] usb 3-1: selecting invalid altsetting 1 [ 452.933946][ T7163] usb 3-1: unit 6 not found! [ 452.962690][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.969953][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.004479][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 453.020910][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 453.051547][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.058696][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.095416][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 453.139972][ T7930] device veth0 entered promiscuous mode [ 453.225331][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 453.246172][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 453.259626][ T7935] FAULT_INJECTION: forcing a failure. [ 453.259626][ T7935] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 453.282368][ T7935] CPU: 0 PID: 7935 Comm: syz.4.587 Not tainted syzkaller #0 [ 453.289803][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 453.299879][ T7935] Call Trace: [ 453.303177][ T7935] [ 453.306129][ T7935] dump_stack_lvl+0x188/0x250 [ 453.310838][ T7935] ? show_regs_print_info+0x20/0x20 [ 453.316060][ T7935] ? load_image+0x410/0x410 [ 453.320592][ T7935] ? __lock_acquire+0x7d40/0x7d40 [ 453.325654][ T7935] should_fail+0x383/0x4b0 [ 453.330117][ T7935] prepare_alloc_pages+0x1e3/0x5b0 [ 453.335340][ T7935] __alloc_pages+0x11b/0x480 [ 453.339965][ T7935] ? zone_statistics+0x170/0x170 [ 453.344950][ T7935] ? __rwlock_init+0x140/0x140 [ 453.349867][ T7935] ? alloc_pages+0x452/0x560 [ 453.354533][ T7935] __get_free_pages+0x8/0x30 [ 453.359233][ T7935] kasan_populate_vmalloc_pte+0x21/0xc0 [ 453.364830][ T7935] __apply_to_page_range+0x987/0xd10 [ 453.370142][ T7935] ? kasan_populate_vmalloc+0x70/0x70 [ 453.375538][ T7935] alloc_vmap_area+0x19e8/0x1b30 [ 453.380523][ T7935] ? vm_map_ram+0xba0/0xba0 [ 453.385051][ T7935] __get_vm_area_node+0x14f/0x2d0 [ 453.390100][ T7935] __vmalloc_node_range+0xef/0x8b0 [ 453.395230][ T7935] ? copy_process+0x61f/0x3e70 [ 453.400013][ T7935] ? rcu_is_watching+0x11/0xa0 [ 453.404848][ T7935] ? kmem_cache_alloc_node+0x1b2/0x2c0 [ 453.410331][ T7935] dup_task_struct+0x41a/0xbc0 [ 453.415110][ T7935] ? copy_process+0x61f/0x3e70 [ 453.419890][ T7935] ? _raw_spin_unlock_irq+0x1f/0x40 [ 453.425109][ T7935] ? lockdep_hardirqs_on+0x94/0x140 [ 453.430328][ T7935] copy_process+0x61f/0x3e70 [ 453.434982][ T7935] ? __pidfd_prepare+0x140/0x140 [ 453.439942][ T7935] ? verify_lock_unused+0x140/0x140 [ 453.445178][ T7935] kernel_clone+0x23f/0x990 [ 453.449705][ T7935] ? create_io_thread+0x180/0x180 [ 453.454766][ T7935] __x64_sys_clone+0x19a/0x210 [ 453.459555][ T7935] ? __ia32_sys_vfork+0x130/0x130 [ 453.464611][ T7935] ? lockdep_hardirqs_on+0x94/0x140 [ 453.469837][ T7935] do_syscall_64+0x4c/0xa0 [ 453.474269][ T7935] ? clear_bhb_loop+0x30/0x80 [ 453.478962][ T7935] ? clear_bhb_loop+0x30/0x80 [ 453.483669][ T7935] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 453.489587][ T7935] RIP: 0033:0x7fd036bee559 [ 453.494018][ T7935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.513642][ T7935] RSP: 002b:00007fd034e44fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 453.522086][ T7935] RAX: ffffffffffffffda RBX: 00007fd036e74fa0 RCX: 00007fd036bee559 [ 453.530073][ T7935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100411 [ 453.538060][ T7935] RBP: 00007fd036c85b20 R08: 0000000000000000 R09: 0000000000000000 [ 453.546053][ T7935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 453.554043][ T7935] R13: 00007fd036e75038 R14: 00007fd036e74fa0 R15: 00007ffc947530a8 [ 453.562052][ T7935] [ 453.571498][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 453.581815][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 453.590863][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 453.600388][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 453.610458][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 453.618434][ T4297] Bluetooth: hci1: command 0x040f tx timeout [ 453.625561][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 453.653183][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 453.663825][ T7935] syz.4.587: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 453.692458][ T7935] CPU: 0 PID: 7935 Comm: syz.4.587 Not tainted syzkaller #0 [ 453.699791][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 453.709864][ T7935] Call Trace: [ 453.713158][ T7935] [ 453.716100][ T7935] dump_stack_lvl+0x188/0x250 [ 453.720801][ T7935] ? rcu_lock_release+0x5/0x20 [ 453.725717][ T7935] ? show_regs_print_info+0x20/0x20 [ 453.730950][ T7935] ? load_image+0x410/0x410 [ 453.735473][ T7935] ? __rcu_read_unlock+0x78/0xd0 [ 453.740444][ T7935] warn_alloc+0x245/0x320 [ 453.744809][ T7935] ? zone_watermark_ok_safe+0x250/0x250 [ 453.750386][ T7935] ? __get_vm_area_node+0x164/0x2d0 [ 453.755788][ T7935] ? kfree+0xef/0x2a0 [ 453.759810][ T7935] __vmalloc_node_range+0x2b1/0x8b0 [ 453.760173][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 453.765028][ T7935] ? rcu_is_watching+0x11/0xa0 [ 453.765054][ T7935] ? kmem_cache_alloc_node+0x1b2/0x2c0 [ 453.783113][ T7935] dup_task_struct+0x41a/0xbc0 [ 453.784403][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 453.787901][ T7935] ? copy_process+0x61f/0x3e70 [ 453.787925][ T7935] ? _raw_spin_unlock_irq+0x1f/0x40 [ 453.787948][ T7935] ? lockdep_hardirqs_on+0x94/0x140 [ 453.810817][ T7935] copy_process+0x61f/0x3e70 [ 453.815466][ T7935] ? __pidfd_prepare+0x140/0x140 [ 453.820438][ T7935] ? verify_lock_unused+0x140/0x140 [ 453.825676][ T7935] kernel_clone+0x23f/0x990 [ 453.830210][ T7935] ? create_io_thread+0x180/0x180 [ 453.835271][ T7935] __x64_sys_clone+0x19a/0x210 [ 453.840205][ T7935] ? __ia32_sys_vfork+0x130/0x130 [ 453.845290][ T7935] ? lockdep_hardirqs_on+0x94/0x140 [ 453.850519][ T7935] do_syscall_64+0x4c/0xa0 [ 453.854962][ T7935] ? clear_bhb_loop+0x30/0x80 [ 453.859651][ T7935] ? clear_bhb_loop+0x30/0x80 [ 453.864346][ T7935] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 453.870256][ T7935] RIP: 0033:0x7fd036bee559 [ 453.874689][ T7935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.894310][ T7935] RSP: 002b:00007fd034e44fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 453.902745][ T7935] RAX: ffffffffffffffda RBX: 00007fd036e74fa0 RCX: 00007fd036bee559 [ 453.910827][ T7935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100411 [ 453.918824][ T7935] RBP: 00007fd036c85b20 R08: 0000000000000000 R09: 0000000000000000 [ 453.926819][ T7935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 453.934808][ T7935] R13: 00007fd036e75038 R14: 00007fd036e74fa0 R15: 00007ffc947530a8 [ 453.942818][ T7935] [ 453.949937][ T7163] usb 3-1: cannot get ctl value: req = 0x84, wValue = 0x100, wIndex = 0x200, type = 3 [ 453.962987][ T4297] Bluetooth: hci3: command 0x0409 tx timeout [ 453.970657][ T7935] Mem-Info: [ 453.973862][ T7935] active_anon:286 inactive_anon:6324 isolated_anon:0 [ 453.973862][ T7935] active_file:22949 inactive_file:35837 isolated_file:0 [ 453.973862][ T7935] unevictable:768 dirty:208 writeback:0 [ 453.973862][ T7935] slab_reclaimable:21543 slab_unreclaimable:97310 [ 453.973862][ T7935] mapped:30342 shmem:1648 pagetables:659 bounce:0 [ 453.973862][ T7935] kernel_misc_reclaimable:0 [ 453.973862][ T7935] free:1360891 free_pcp:6512 free_cma:0 [ 454.025667][ T7163] usb 3-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 454.035643][ T7935] Node 0 active_anon:1112kB inactive_anon:24984kB active_file:91592kB inactive_file:143348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121368kB dirty:824kB writeback:0kB shmem:4512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10856kB pagetables:2636kB all_unreclaimable? no [ 454.048484][ T7163] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 454.078284][ T7885] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.086339][ T7163] usb 3-1: USB disconnect, device number 7 [ 454.105788][ T7642] udevd[7642]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.135291][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.152733][ T7935] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 454.178684][ T7885] device bridge_slave_0 entered promiscuous mode [ 454.205943][ T7935] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 454.218401][ T7885] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.241398][ T7935] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 454.245134][ T4907] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 454.247546][ T7935] Node 0 DMA32 free:1507116kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1112kB inactive_anon:24884kB active_file:91592kB inactive_file:143348kB unevictable:1536kB writepending:824kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:21308kB local_pcp:6628kB free_cma:0kB [ 454.256950][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.285399][ T7935] lowmem_reserve[]: 0 0 0 0 0 [ 454.296937][ T7935] Node 0 Normal free:12kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 454.301542][ T7885] device bridge_slave_1 entered promiscuous mode [ 454.323935][ T7935] lowmem_reserve[]: 0 0 0 0 0 [ 454.343847][ T7935] Node 1 Normal free:3921076kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3868kB local_pcp:988kB free_cma:0kB [ 454.416697][ T7885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.422351][ T7935] lowmem_reserve[]: 0 0 0 0 0 [ 454.450506][ T7885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.465441][ T7935] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 454.495497][ T7935] Node 0 DMA32: 1877*4kB (ME) 1219*8kB (UME) 1145*16kB (UME) 868*32kB (UME) 627*64kB (UME) 356*128kB (UME) 146*256kB (UM) 53*512kB (UME) 19*1024kB (UM) 4*2048kB (UM) 309*4096kB (M) = 1506876kB [ 454.555877][ T7885] team0: Port device team_slave_0 added [ 454.563862][ T7885] team0: Port device team_slave_1 added [ 454.585289][ T7935] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 454.629047][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.636275][ T7935] Node 1 Normal: 111*4kB (UME) 31*8kB (UE) 24*16kB (UME) 134*32kB (UE) 57*64kB (UME) 27*128kB (UME) 10*256kB (UM) 3*512kB (UE) 1*1024kB (U) 2*2048kB (ME) 952*4096kB (M) = 3921076kB [ 454.659909][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.691940][ T7935] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.701630][ T7885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.712535][ T7935] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 454.724485][ T7957] x86/PAT: syz.2.590:7957 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 454.734152][ T4907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.756465][ T7885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.763454][ T7885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.789819][ T4907] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 454.805150][ T7935] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.814854][ T7935] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 454.830526][ T4907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.842699][ T7935] 60433 total pagecache pages [ 454.856233][ T4907] usb 1-1: config 0 descriptor?? [ 454.861637][ T7935] 0 pages in swap cache [ 454.873448][ T7885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.884484][ T7935] Swap cache stats: add 146, delete 146, find 34/77 [ 454.898617][ T7935] Free swap = 124472kB [ 454.902804][ T7935] Total swap = 124996kB [ 454.931510][ T7935] 2097051 pages RAM [ 454.938136][ T7935] 0 pages HighMem/MovableOnly [ 454.942986][ T7935] 415313 pages reserved [ 454.955544][ T7935] 0 pages cma reserved [ 454.986439][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 454.994040][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 455.030015][ T7762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.140500][ T7885] device hsr_slave_0 entered promiscuous mode [ 455.183383][ T7885] device hsr_slave_1 entered promiscuous mode [ 455.215405][ T4907] usbhid 1-1:0.0: can't add hid device: -71 [ 455.221427][ T4907] usbhid: probe of 1-1:0.0 failed with error -71 [ 455.254613][ T7972] kvm: pic: non byte read [ 455.267110][ T4907] usb 1-1: USB disconnect, device number 7 [ 455.278670][ T7972] kvm: pic: level sensitive irq not supported [ 455.278764][ T7972] kvm: pic: non byte read [ 455.289638][ T7885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.305768][ T7972] kvm: pic: single mode not supported [ 455.305786][ T7972] kvm: pic: level sensitive irq not supported [ 455.311626][ T7972] kvm: pic: non byte read [ 455.339307][ T7885] Cannot create hsr debugfs directory [ 455.400191][ T4340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.421156][ T7972] kvm: pic: non byte read [ 455.436454][ T7972] kvm: pic: non byte read [ 455.441259][ T7972] kvm: pic: non byte read [ 455.475970][ T7972] kvm: pic: single mode not supported [ 455.475991][ T7972] kvm: pic: level sensitive irq not supported [ 455.498377][ T7972] kvm: pic: non byte read [ 455.518880][ T4340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.537624][ T7972] kvm: pic: non byte read [ 455.542401][ T7972] kvm: pic: non byte read [ 455.570690][ T7972] kvm: pic: non byte read [ 455.601098][ T7972] kvm: pic: level sensitive irq not supported [ 455.601514][ T7972] kvm: pic: single mode not supported [ 455.607815][ T7972] kvm: pic: level sensitive irq not supported [ 455.644851][ T7972] kvm: pic: single mode not supported [ 455.657029][ T4340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.680800][ T7972] kvm: pic: level sensitive irq not supported [ 455.682823][ T7972] kvm: pic: single mode not supported [ 455.689210][ T7972] kvm: pic: level sensitive irq not supported [ 455.698874][ T4293] Bluetooth: hci1: command 0x0419 tx timeout [ 455.728954][ T7972] kvm: pic: single mode not supported [ 455.729754][ T7972] kvm: pic: level sensitive irq not supported [ 455.738931][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 455.747729][ T7972] kvm: pic: single mode not supported [ 455.763117][ T7972] kvm: pic: single mode not supported [ 455.763643][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 455.769256][ T7972] kvm: pic: level sensitive irq not supported [ 455.795569][ T4907] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 455.820198][ T4340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.857063][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 455.875774][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 455.897720][ T7762] device veth0_vlan entered promiscuous mode [ 455.934080][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 455.956509][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 455.991470][ T7762] device veth1_vlan entered promiscuous mode [ 456.015397][ T4293] Bluetooth: hci3: command 0x041b tx timeout [ 456.051651][ T7987] FAULT_INJECTION: forcing a failure. [ 456.051651][ T7987] name failslab, interval 1, probability 0, space 0, times 0 [ 456.082226][ T7762] device veth0_macvtap entered promiscuous mode [ 456.092907][ T7987] CPU: 0 PID: 7987 Comm: syz.4.593 Not tainted syzkaller #0 [ 456.100240][ T7987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 456.110328][ T7987] Call Trace: [ 456.113640][ T7987] [ 456.116730][ T7987] dump_stack_lvl+0x188/0x250 [ 456.121451][ T7987] ? show_regs_print_info+0x20/0x20 [ 456.126693][ T7987] ? load_image+0x410/0x410 [ 456.131229][ T7987] ? __might_sleep+0xf0/0xf0 [ 456.135908][ T7987] ? __lock_acquire+0x7d40/0x7d40 [ 456.140967][ T7987] should_fail+0x383/0x4b0 [ 456.145417][ T7987] should_failslab+0x5/0x20 [ 456.149950][ T7987] slab_pre_alloc_hook+0x51/0xc0 [ 456.154916][ T7987] kmem_cache_alloc_trace+0x47/0x290 [ 456.160237][ T7987] ? __list_lru_init+0x535/0xac0 [ 456.165215][ T7987] __list_lru_init+0x535/0xac0 [ 456.170031][ T7987] alloc_super+0x787/0x970 [ 456.174601][ T7987] ? kill_litter_super+0xa0/0xa0 [ 456.179568][ T7987] sget_fc+0x2d4/0x6f0 [ 456.183719][ T7987] ? kill_litter_super+0xa0/0xa0 [ 456.188680][ T7987] ? proc_reconfigure+0x370/0x370 [ 456.193796][ T7987] get_tree_nodev+0x26/0x160 [ 456.198425][ T7987] vfs_get_tree+0x88/0x270 [ 456.202885][ T7987] do_new_mount+0x247/0xa40 [ 456.207480][ T7987] __se_sys_mount+0x2e3/0x3d0 [ 456.212226][ T7987] ? __x64_sys_mount+0xc0/0xc0 [ 456.217025][ T7987] ? lockdep_hardirqs_on+0x94/0x140 [ 456.222259][ T7987] ? __x64_sys_mount+0x1c/0xc0 [ 456.227062][ T7987] do_syscall_64+0x4c/0xa0 [ 456.231502][ T7987] ? clear_bhb_loop+0x30/0x80 [ 456.236215][ T7987] ? clear_bhb_loop+0x30/0x80 [ 456.240919][ T7987] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 456.246842][ T7987] RIP: 0033:0x7fd036bee559 [ 456.251287][ T7987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.262310][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 456.270914][ T7987] RSP: 002b:00007fd034e45028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 456.270988][ T7987] RAX: ffffffffffffffda RBX: 00007fd036e74fa0 RCX: 00007fd036bee559 [ 456.271004][ T7987] RDX: 0000200000000340 RSI: 0000200000000300 RDI: 0000000000000000 [ 456.271019][ T7987] RBP: 00007fd036c85b20 R08: 0000000000000000 R09: 0000000000000000 [ 456.271032][ T7987] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 456.271046][ T7987] R13: 00007fd036e75038 R14: 00007fd036e74fa0 R15: 00007ffc947530a8 [ 456.271081][ T7987] [ 456.336693][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 456.348107][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 456.375236][ T4907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.400811][ T7762] device veth1_macvtap entered promiscuous mode [ 456.448556][ T4907] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 456.464103][ T4907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.501210][ T4907] usb 1-1: config 0 descriptor?? [ 456.551728][ T7762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.595122][ T7762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.621957][ T7762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.642588][ T7762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.652651][ T7762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.668345][ T7762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.695132][ T7762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.715149][ T7762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.758981][ T7762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.771362][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 456.783380][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 456.801625][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 456.830844][ T7762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.852459][ T7762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.855332][ T4297] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 456.862990][ T4907] usbhid 1-1:0.0: can't add hid device: -71 [ 456.895262][ T4907] usbhid: probe of 1-1:0.0 failed with error -71 [ 456.902316][ T7762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.931466][ T4907] usb 1-1: USB disconnect, device number 8 [ 456.945121][ T7762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.960433][ T7762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.971277][ T7762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.995572][ T7762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.006111][ T7762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.017291][ T7762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.125402][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 457.133631][ T4297] usb 5-1: Using ep0 maxpacket: 32 [ 457.149636][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 457.178557][ T7762] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.185601][ T4297] usb 5-1: too many configurations: 34, using maximum allowed: 8 [ 457.204769][ T7762] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.246303][ T7762] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.265433][ T7762] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.285512][ T4297] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 457.300540][ T8006] FAULT_INJECTION: forcing a failure. [ 457.300540][ T8006] name failslab, interval 1, probability 0, space 0, times 0 [ 457.300840][ T8006] [ 457.300845][ T8006] ====================================================== [ 457.300850][ T8006] WARNING: possible circular locking dependency detected [ 457.300857][ T8006] syzkaller #0 Not tainted [ 457.300865][ T8006] ------------------------------------------------------ [ 457.300871][ T8006] syz.0.596/8006 is trying to acquire lock: [ 457.300887][ T8006] ffffffff8d113a00 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 457.300948][ T8006] [ 457.300948][ T8006] but task is already holding lock: [ 457.300953][ T8006] ffff888025123158 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x39/0x380 [ 457.301072][ T8006] [ 457.301072][ T8006] which lock already depends on the new lock. [ 457.301072][ T8006] [ 457.301078][ T8006] [ 457.301078][ T8006] the existing dependency chain (in reverse order) is: [ 457.301083][ T8006] [ 457.301083][ T8006] -> #2 (&port->lock){-.-.}-{2:2}: [ 457.301106][ T8006] _raw_spin_lock_irqsave+0xb0/0x100 [ 457.301127][ T8006] tty_port_default_wakeup+0x1f/0xf0 [ 457.301144][ T8006] serial8250_tx_chars+0x615/0x800 [ 457.301190][ T8006] serial8250_handle_irq+0x648/0x780 [ 457.301208][ T8006] serial8250_default_handle_irq+0xb4/0x1a0 [ 457.301228][ T8006] serial8250_interrupt+0x9b/0x1c0 [ 457.301245][ T8006] __handle_irq_event_percpu+0x299/0x9d0 [ 457.301286][ T8006] handle_irq_event+0xa5/0x220 [ 457.301302][ T8006] handle_edge_irq+0x242/0xb20 [ 457.301318][ T8006] __common_interrupt+0xd7/0x1e0 [ 457.301361][ T8006] common_interrupt+0xb0/0xd0 [ 457.301379][ T8006] asm_common_interrupt+0x22/0x40 [ 457.301396][ T8006] default_idle+0xb/0x10 [ 457.301411][ T8006] default_idle_call+0x81/0xc0 [ 457.301426][ T8006] do_idle+0x3a1/0x650 [ 457.301465][ T8006] cpu_startup_entry+0x14/0x20 [ 457.301482][ T8006] start_secondary+0x32f/0x430 [ 457.301526][ T8006] secondary_startup_64_no_verify+0xb1/0xbb [ 457.301551][ T8006] [ 457.301551][ T8006] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 457.301574][ T8006] _raw_spin_lock_irqsave+0xb0/0x100 [ 457.301592][ T8006] serial8250_console_write+0x16c/0xf50 [ 457.301610][ T8006] console_unlock+0xb47/0x10f0 [ 457.301623][ T8006] vprintk_emit+0xc0/0x150 [ 457.301636][ T8006] _printk+0xda/0x130 [ 457.301649][ T8006] register_console+0x693/0x970 [ 457.301663][ T8006] univ8250_console_init+0x41/0x50 [ 457.301725][ T8006] console_init+0x177/0x5d0 [ 457.301749][ T8006] start_kernel+0x2fc/0x540 [ 457.301766][ T8006] secondary_startup_64_no_verify+0xb1/0xbb [ 457.301784][ T8006] [ 457.301784][ T8006] -> #0 (console_owner){-.-.}-{0:0}: [ 457.301809][ T8006] __lock_acquire+0x38f7/0x7d40 [ 457.301825][ T8006] lock_acquire+0x19f/0x400 [ 457.301838][ T8006] console_lock_spinning_enable+0x51/0x60 [ 457.301850][ T8006] console_unlock+0x8b5/0x10f0 [ 457.301863][ T8006] vprintk_emit+0xc0/0x150 [ 457.301877][ T8006] _printk+0xda/0x130 [ 457.301891][ T8006] should_fail+0x364/0x4b0 [ 457.301907][ T8006] should_failslab+0x5/0x20 [ 457.301921][ T8006] slab_pre_alloc_hook+0x51/0xc0 [ 457.301936][ T8006] __kmalloc+0x6b/0x340 [ 457.301950][ T8006] __tty_buffer_request_room+0x1db/0x500 [ 457.301965][ T8006] tty_insert_flip_string_and_push_buffer+0x7e/0x380 [ 457.301983][ T8006] n_tty_write+0x5dc/0x1220 [ 457.302037][ T8006] file_tty_write+0x50c/0x8a0 [ 457.302053][ T8006] vfs_write+0x748/0xd70 [ 457.302068][ T8006] ksys_write+0x153/0x260 [ 457.302083][ T8006] do_syscall_64+0x4c/0xa0 [ 457.302100][ T8006] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 457.302120][ T8006] [ 457.302120][ T8006] other info that might help us debug this: [ 457.302120][ T8006] [ 457.302125][ T8006] Chain exists of: [ 457.302125][ T8006] console_owner --> &port_lock_key --> &port->lock [ 457.302125][ T8006] [ 457.302151][ T8006] Possible unsafe locking scenario: [ 457.302151][ T8006] [ 457.302155][ T8006] CPU0 CPU1 [ 457.302159][ T8006] ---- ---- [ 457.302163][ T8006] lock(&port->lock); [ 457.302172][ T8006] lock(&port_lock_key); [ 457.302183][ T8006] lock(&port->lock); [ 457.302195][ T8006] lock(console_owner); [ 457.302204][ T8006] [ 457.302204][ T8006] *** DEADLOCK *** [ 457.302204][ T8006] [ 457.302209][ T8006] 6 locks held by syz.0.596/8006: [ 457.302219][ T8006] #0: ffff888060eaf098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 457.302261][ T8006] #1: ffff888060eaf130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write+0x23c/0x8a0 [ 457.302305][ T8006] #2: ffff888060eaf2e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x1ec/0x1220 [ 457.302330][ T4297] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 457.302348][ T8006] #3: ffffc90001248378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0x592/0x1220 [ 457.302384][ T8006] #4: ffff888025123158 (&port->lock){-.-.}-{2:2}, at: tty_insert_flip_string_and_push_buffer+0x39/0x380 [ 457.302419][ T8006] #5: ffffffff8d113ae0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 457.302449][ T8006] [ 457.302449][ T8006] stack backtrace: [ 457.302453][ T8006] CPU: 1 PID: 8006 Comm: syz.0.596 Not tainted syzkaller #0 [ 457.302467][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 457.302475][ T8006] Call Trace: [ 457.302479][ T8006] [ 457.302485][ T8006] dump_stack_lvl+0x188/0x250 [ 457.302499][ T8006] ? load_image+0x410/0x410 [ 457.302513][ T8006] ? show_regs_print_info+0x20/0x20 [ 457.302528][ T8006] ? print_circular_bug+0x12b/0x1a0 [ 457.302543][ T8006] check_noncircular+0x2f8/0x400 [ 457.302557][ T8006] ? print_deadlock_bug+0x5d0/0x5d0 [ 457.302570][ T8006] ? lockdep_lock+0xf1/0x1f0 [ 457.302586][ T8006] ? lockdep_unlock+0x143/0x2e0 [ 457.302603][ T8006] __lock_acquire+0x38f7/0x7d40 [ 457.302619][ T8006] ? put_dec_trunc8+0x1fd/0x340 [ 457.302666][ T8006] ? format_decode+0x19b/0x1330 [ 457.302682][ T8006] ? verify_lock_unused+0x140/0x140 [ 457.302702][ T8006] ? sprintf+0xe4/0x140 [ 457.302718][ T8006] lock_acquire+0x19f/0x400 [ 457.302733][ T8006] ? console_lock_spinning_enable+0x2c/0x60 [ 457.302747][ T8006] ? prb_read_valid+0x60/0x60 [ 457.302762][ T8006] ? read_lock_is_recursive+0x10/0x10 [ 457.302777][ T8006] ? do_raw_spin_lock+0x128/0x2f0 [ 457.302790][ T8006] ? __rwlock_init+0x140/0x140 [ 457.302803][ T8006] ? do_raw_spin_unlock+0x11d/0x230 [ 457.302817][ T8006] console_lock_spinning_enable+0x51/0x60 [ 457.302830][ T8006] ? console_lock_spinning_enable+0x2c/0x60 [ 457.302844][ T8006] console_unlock+0x8b5/0x10f0 [ 457.302856][ T8006] ? read_lock_is_recursive+0x10/0x10 [ 457.302874][ T8006] ? console_trylock_spinning+0x370/0x370 [ 457.302888][ T8006] ? __down_trylock_console_sem+0x19f/0x1f0 [ 457.302901][ T8006] ? vprintk_emit+0xa7/0x150 [ 457.302914][ T8006] ? printk_parse_prefix+0x310/0x310 [ 457.302926][ T8006] ? vprintk_emit+0xa7/0x150 [ 457.302938][ T8006] ? console_trylock+0x70/0x70 [ 457.302953][ T8006] ? vprintk_emit+0x150/0x150 [ 457.302966][ T8006] ? verify_lock_unused+0x140/0x140 [ 457.302981][ T8006] ? __lock_acquire+0x13b3/0x7d40 [ 457.302997][ T8006] vprintk_emit+0xc0/0x150 [ 457.303017][ T8006] _printk+0xda/0x130 [ 457.303031][ T8006] ? load_image+0x410/0x410 [ 457.303046][ T8006] should_fail+0x364/0x4b0 [ 457.303061][ T8006] should_failslab+0x5/0x20 [ 457.303074][ T8006] slab_pre_alloc_hook+0x51/0xc0 [ 457.303087][ T8006] __kmalloc+0x6b/0x340 [ 457.303099][ T8006] ? __tty_buffer_request_room+0x1db/0x500 [ 457.303115][ T8006] __tty_buffer_request_room+0x1db/0x500 [ 457.303130][ T8006] tty_insert_flip_string_and_push_buffer+0x7e/0x380 [ 457.303148][ T8006] n_tty_write+0x5dc/0x1220 [ 457.303170][ T8006] ? n_tty_read+0x1a50/0x1a50 [ 457.303184][ T8006] ? wait_woken+0x1b0/0x1b0 [ 457.303200][ T8006] ? __virt_addr_valid+0x3c6/0x470 [ 457.303233][ T8006] ? __phys_addr_symbol+0x2b/0x70 [ 457.303245][ T8006] ? __check_object_size+0x30c/0x410 [ 457.303263][ T8006] file_tty_write+0x50c/0x8a0 [ 457.303279][ T8006] ? n_tty_read+0x1a50/0x1a50 [ 457.303294][ T8006] vfs_write+0x748/0xd70 [ 457.303310][ T8006] ? file_end_write+0x250/0x250 [ 457.303325][ T8006] ? __fget_files+0x402/0x470 [ 457.303341][ T8006] ? __fdget_pos+0x1e2/0x370 [ 457.303353][ T8006] ? ksys_write+0x70/0x260 [ 457.303366][ T8006] ksys_write+0x153/0x260 [ 457.303379][ T8006] ? __ia32_sys_read+0x80/0x80 [ 457.303393][ T8006] ? lockdep_hardirqs_on+0x94/0x140 [ 457.303410][ T8006] do_syscall_64+0x4c/0xa0 [ 457.303423][ T8006] ? clear_bhb_loop+0x30/0x80 [ 457.303436][ T8006] ? clear_bhb_loop+0x30/0x80 [ 457.303451][ T8006] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 457.303466][ T8006] RIP: 0033:0x7fed4783a559 [ 457.303480][ T8006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.303492][ T8006] RSP: 002b:00007fed45a91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 457.303508][ T8006] RAX: ffffffffffffffda RBX: 00007fed47ac0fa0 RCX: 00007fed4783a559 [ 457.303518][ T8006] RDX: 000000000000ff6b RSI: 0000200000000900 RDI: 0000000000000004 [ 457.303527][ T8006] RBP: 00007fed478d1b20 R08: 0000000000000000 R09: 0000000000000000 [ 457.303535][ T8006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.303544][ T8006] R13: 00007fed47ac1038 R14: 00007fed47ac0fa0 R15: 00007ffc68c35818 [ 457.303557][ T8006] [ 457.316230][ T8006] CPU: 1 PID: 8006 Comm: syz.0.596 Not tainted syzkaller #0 [ 457.316253][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 457.316261][ T8006] Call Trace: [ 457.316268][ T8006] [ 457.316275][ T8006] dump_stack_lvl+0x188/0x250 [ 457.316299][ T8006] ? show_regs_print_info+0x20/0x20 [ 457.316316][ T8006] ? load_image+0x410/0x410 [ 457.316339][ T8006] should_fail+0x383/0x4b0 [ 457.316360][ T8006] should_failslab+0x5/0x20 [ 457.316378][ T8006] slab_pre_alloc_hook+0x51/0xc0 [ 457.316396][ T8006] __kmalloc+0x6b/0x340 [ 457.316412][ T8006] ? __tty_buffer_request_room+0x1db/0x500 [ 457.316435][ T8006] __tty_buffer_request_room+0x1db/0x500 [ 457.316457][ T8006] tty_insert_flip_string_and_push_buffer+0x7e/0x380 [ 457.316482][ T8006] n_tty_write+0x5dc/0x1220 [ 457.349590][ T4297] usb 5-1: config 0 has no interface number 0 [ 457.350282][ T8006] ? n_tty_read+0x1a50/0x1a50 [ 457.370693][ T4297] usb 5-1: config 0 interface 16 has no altsetting 0 [ 457.378371][ T8006] ? wait_woken+0x1b0/0x1b0 [ 457.378403][ T8006] ? __virt_addr_valid+0x3c6/0x470 [ 457.378421][ T8006] ? __phys_addr_symbol+0x2b/0x70 [ 457.378438][ T8006] ? __check_object_size+0x30c/0x410 [ 457.378459][ T8006] file_tty_write+0x50c/0x8a0 [ 457.378484][ T8006] ? n_tty_read+0x1a50/0x1a50 [ 457.378504][ T8006] vfs_write+0x748/0xd70 [ 457.378524][ T8006] ? file_end_write+0x250/0x250 [ 457.486921][ T4297] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 457.487848][ T8006] ? __fget_files+0x402/0x470 [ 457.494113][ T4297] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 457.498414][ T8006] ? __fdget_pos+0x1e2/0x370 [ 457.498439][ T8006] ? ksys_write+0x70/0x260 [ 457.498459][ T8006] ksys_write+0x153/0x260 [ 457.535222][ T4297] usb 5-1: config 0 has no interface number 0 [ 457.538997][ T8006] ? __ia32_sys_read+0x80/0x80 [ 457.546993][ T4297] usb 5-1: config 0 interface 16 has no altsetting 0 [ 457.550009][ T8006] ? lockdep_hardirqs_on+0x94/0x140 [ 457.666913][ T4297] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 457.669977][ T8006] do_syscall_64+0x4c/0xa0 [ 457.692155][ T4297] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 457.692626][ T8006] ? clear_bhb_loop+0x30/0x80 [ 457.720933][ T4297] usb 5-1: config 0 has no interface number 0 [ 457.721838][ T8006] ? clear_bhb_loop+0x30/0x80 [ 457.746818][ T4297] usb 5-1: config 0 interface 16 has no altsetting 0 [ 457.755550][ T8006] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 457.755579][ T8006] RIP: 0033:0x7fed4783a559 [ 457.755598][ T8006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.755614][ T8006] RSP: 002b:00007fed45a91028 EFLAGS: 00000246 [ 457.887629][ T4297] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 457.887865][ T8006] ORIG_RAX: 0000000000000001 [ 457.892809][ T4297] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 457.897558][ T8006] RAX: ffffffffffffffda RBX: 00007fed47ac0fa0 RCX: 00007fed4783a559 [ 457.897574][ T8006] RDX: 000000000000ff6b RSI: 0000200000000900 RDI: 0000000000000004 [ 457.897587][ T8006] RBP: 00007fed478d1b20 R08: 0000000000000000 R09: 0000000000000000 [ 457.897599][ T8006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.897611][ T8006] R13: 00007fed47ac1038 R14: 00007fed47ac0fa0 R15: 00007ffc68c35818 [ 457.897629][ T8006] [ 458.570664][ T4297] usb 5-1: config 0 has no interface number 0 [ 458.576830][ T4297] usb 5-1: config 0 interface 16 has no altsetting 0 [ 458.585501][ T7163] Bluetooth: hci3: command 0x040f tx timeout [ 458.655478][ T4297] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 458.664623][ T4297] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 458.673567][ T4297] usb 5-1: config 0 has no interface number 0 [ 458.679778][ T4297] usb 5-1: config 0 interface 16 has no altsetting 0 [ 458.724758][ T7762] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 458.753593][ T5714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.765273][ T4297] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 458.775990][ T4297] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 458.777264][ T7762] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 458.792896][ T4297] usb 5-1: config 0 has no interface number 0 [ 458.799168][ T4297] usb 5-1: config 0 interface 16 has no altsetting 0 [ 458.806100][ T5714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.823736][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 458.871043][ T1186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.885502][ T4297] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 458.893835][ T1186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.897033][ T4297] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 458.910078][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 458.937716][ T4297] usb 5-1: config 0 has no interface number 0 [ 458.944367][ T4297] usb 5-1: config 0 interface 16 has no altsetting 0 [ 458.969523][ T7885] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 458.982393][ T7885] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 459.002118][ T7885] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 459.012012][ T7885] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 459.045340][ T4297] usb 5-1: config 0 has an invalid interface number: 16 but max is 8 [ 459.061656][ T4297] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 459.071378][ T4297] usb 5-1: config 0 has no interface number 0 [ 459.078564][ T4297] usb 5-1: config 0 interface 16 has no altsetting 0 [ 459.105406][ T4297] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 459.122376][ T7885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.124641][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.155487][ T4297] usb 5-1: config 0 descriptor?? [ 459.174599][ T7885] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.192396][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 459.202578][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 459.231348][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 459.241445][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.251970][ T5714] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.260389][ T5714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.277333][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 459.287009][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 459.295690][ T5714] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.302778][ T5714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.312796][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 459.321779][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 459.349004][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 459.363260][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 459.386439][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 459.409501][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 459.425909][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 459.446084][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 459.455610][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 459.475725][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 459.484323][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 459.498164][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 459.518917][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 459.699286][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 459.715571][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 459.727978][ T7885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.745705][ T4340] device hsr_slave_0 left promiscuous mode [ 459.752744][ T4340] device hsr_slave_1 left promiscuous mode [ 459.761775][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.769775][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.778361][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.786113][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.793753][ T4340] device bridge_slave_1 left promiscuous mode [ 459.800579][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.809185][ T4340] device bridge_slave_0 left promiscuous mode [ 459.815479][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.827536][ T4340] device veth1_macvtap left promiscuous mode [ 459.833622][ T4340] device veth0_macvtap left promiscuous mode [ 459.840106][ T4340] device veth1_vlan left promiscuous mode [ 459.846131][ T4340] device veth0_vlan left promiscuous mode [ 459.935408][ T4264] usb 5-1: USB disconnect, device number 8 [ 460.030108][ T4340] team0 (unregistering): Port device team_slave_1 removed [ 460.044429][ T4340] team0 (unregistering): Port device team_slave_0 removed [ 460.060086][ T4340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.074749][ T4340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.137587][ T4340] bond0 (unregistering): Released all slaves [ 460.168643][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 460.180983][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 460.193888][ T7885] device veth0_vlan entered promiscuous mode [ 460.202056][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 460.210752][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.235581][ T7885] device veth1_vlan entered promiscuous mode [ 460.242439][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.261054][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 460.270038][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 460.291149][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 460.299610][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 460.310409][ T5714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 460.321595][ T7885] device veth0_macvtap entered promiscuous mode [ 460.342254][ T7885] device veth1_macvtap entered promiscuous mode [ 460.379236][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.390210][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.402505][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.413168][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.425428][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.437700][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.448099][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.471616][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.482463][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.491211][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 460.501507][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 460.525782][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 460.534308][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 460.544813][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.555682][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.566789][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.579656][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.590005][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.603152][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.613308][ T7885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.624090][ T7885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.635365][ T7885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.645996][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 460.655702][ T4293] Bluetooth: hci3: command 0x0419 tx timeout [ 460.667409][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 460.678263][ T7885] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.689302][ T7885] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.698572][ T7885] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.707780][ T7885] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.759958][ T7885] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 460.799132][ T1186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.808254][ T7885] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 460.818756][ T1186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.829458][ T7021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 460.848919][ T7021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.858939][ T7021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.867596][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready