last executing test programs: 44.700495941s ago: executing program 1 (id=571): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 43.00560995s ago: executing program 1 (id=581): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xbb, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b5b85990747c7e37312f7eb8286ea199ecd22221ad7dade9e2b670d2dce18dd851fe6b48b3188c3764958b51a9aafc271972b28397406e611e1c0d1a8ecafe2e82d1df01e507e1c0c7f8093da6e376297d1c18eecdde56d5eb156d7ddf449d9e50010acfa620c4d7f6ee20c8cadb1094f58bbb471a8af09665d236f14", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 42.733805623s ago: executing program 1 (id=584): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a008000", @ANYRES32, @ANYBLOB="f9ffffff080002000b000000140001feff000000000000000000ffff00000000140001"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x855) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 42.578495166s ago: executing program 1 (id=587): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$eJzs3E9rE08YwPGnaZOmKW1y+PEDBfFBL3pZ2vgKgrQgBpTaiHoQpnajIWtSsjESEdubV19H8ehNsL6BXrx5Fy9FELz0IF3pbrfZ1qW2te3W5vuBstOdeTKzfxKeXZhZu/fmab3qWlXTllRWJSXZJVkXKUhKQgNb25RfzkjUklwd/fH5wp37D26WyuWpGdXp0uy1oqqOX/zw/OXbSx/bo3ffjb8fltXCw7XvxS+r/6+eW9uYDT+92Vajc81m28w5ts7X3LqletuxjWtrreHarR31Vae5sNBV05gfyy20bNdV0+hq3e5qu6ntVlfNY1NrqGVZOpaTOJnYvWfD4IEjKsszM6Z0LINBEkbidrZaJTMYW1lZPolBAQCA0+X3/F9OJP9/UnO15mrjT/l/So42/0eUn/9vxCaNOBvSmw8AJZPb+v7uRP4PAAAAAAAAAAAAAAAAAAAAAMC/YN3z8p7n5cNt+DcsIlkRCf9Pepw4Hoe4/gMJDhdHLDJxLyvivO5UOpVgG9SXqlITR2yZSPtzibxtQXn6RnlqQn0FWXEWt+L9SYLDYXyoEB8/GcRrJH6xU0lLLtp/UfLyX3x8cVd8WkQ6lYxcuRyJtyQvnx5JUxyZ9+/rXvyrSdXrt8q7+h/x2wEAAAAAcBZYuq2w8/k3WE3SsjRcNmRXfbCz935A8vJzz/cDKisZ6cUPyfmh5I4bAAAAAIB+4nZf1I3j2K1+LozIwaP68dRZ2eCm2bOx53mLm43+vtOUiCR0pN9E5BSc8KMufH0WXMD9NE7yVwkAAADAcegl/UmPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/rXfxcPC9odZeyzS3WAyRwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcDr8CAAD//4DOGY4=") openat(0xffffffffffffff9c, 0x0, 0x42, 0x10) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 41.576006387s ago: executing program 1 (id=598): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1808000, &(0x7f0000001600)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRES8, @ANYRES64, @ANYRES64, @ANYRESDEC, @ANYRES16], 0x1, 0x5e7, &(0x7f0000000680)="$eJzs3cFvHFcdB/DvbBxnHaTUcZM2oEpYRaoQFsl6LZGUC1AKslCFKnHgbBEnsbJJK3uL3B4gIA4Vp/4JRcj/AOJYpBxoDxzg1LNRj0jcfdtqZmfX62TrJrab3TSfjzT73ps38/b3fjM7mVkr2gDPrNWlzNxPkdWlN7bL9u7OSmd3Z+XOoJ7kTJJG0kxSlKv/nuSz5F76S7456BgpH/LpR82bn3zw8fv9VjlWs5jpb18ctt+jGcYy34+1Kk9qvPbxxzsww4Uki8ceD05Ab+C/Y7uP+bkEAKZZkZwat34+OVvfsJfPAf274v499lPt3qQDAAAAgCfgub3sZTvnJh0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPE3q3/8v6qUxqC+mGPz+/2y9LnX9qXZ/0gEAAAAAAAAAwAn49l72sp1zg3avqP7m/3LVuFC9fiPvZCvr2czlbGct3XSzmeUk8yMDzW6vdbuby4+wZ3vsnu0nM18AAAAAAAAA+Jr6Y1b3//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADToEhO9YtquTCoz6cxk6SZZLbc7l7yn0H9aXZ/0gEAAADAE/DcXvaynXODdq+onvlfqJ77m3knd9PNRrrpZD3Xq+8C+k/9jd2dlc7uzsqdcnl43J/8/7HCqEZM/7uH8e98qdpiLjeyUa25nN/krXRyPY1qz9KlQTzj4/pDGVPxo9ojRna9LsuZ/6Iup8N8lZHTw4y06tjKbJw/PBOPeXQefKflNIbf/Fz4CnJ+ti7L+bw+1Tlvj5x9LxyeiWTh13++eqtz9/atG1tL0zOlI3owEysjmXjxmcpEq8rExWF7NT/Pr7KUxbyZzWzkt1lLN+tZzOtVba0+n8vX+cMz9eMDrTe/LJLZ+rj0r6KPF9PL1b7nspFf5q1cr45oK1dzNe38IK+mdeAIXxwb9+97dfder9dL4/E+9d/5bl05neRndTkdyryeH8nr6DV3vuobXbOfpYWTvzbOfKuulGfPa1N3bTz/wL8Sg0w8f3gm/lKdOFudu7c3b629/Yjv90pdlhn46TATM/Xa3qkTmdSRlOfLwjCWg2dH2ff82L7lqu/CsK/xUN/FYd+XfVJn63u4h0dqV30vju3r73dppG/c/RYAU+/s987Ozv1v7t9zH879ae7W3BvN185cO/PSbE7/8/QPZ1qnXmm8VPwtH+Z3+8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0W29+97ttU5nffPIlcEvER13HBUVlempTPrKBHzVrnTvvH1l6933vr9xZ+3m+s31u6+2rl1bXl6+2rpyY6OzXr9OOkoA4CTt3/RPOhIAAAAAAAAAAAAAAOCLPIn/TjzpOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9vq0uZuZ8iy63LrbK9u7PSKZdBfX/LZpKirPwjyWfJvfSXzI8MV3zR+3z6UfPmJx98/P7+WM1q+3+1T2IWB2JpPBDTccdrj4z31yMNVwwzs5hkoS5h4j4PAAD//6e3Br8=") connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 39.312200867s ago: executing program 1 (id=620): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x1c, r1, 0x1, 0x170bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x20000800) 38.787104167s ago: executing program 32 (id=620): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x1c, r1, 0x1, 0x170bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x20000800) 9.978171949s ago: executing program 0 (id=781): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x180, 0x0}) 7.321542111s ago: executing program 0 (id=792): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) io_uring_setup(0x1c16, &(0x7f00000001c0)={0x0, 0xc8a1, 0x20, 0x8, 0x7ffffffe}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 5.295968268s ago: executing program 0 (id=803): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.362092089s ago: executing program 4 (id=809): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x3}, 0x8) 3.856192617s ago: executing program 4 (id=814): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000003780)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r1, 0xd}, 0x8) 3.540043062s ago: executing program 4 (id=815): r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x24143, 0x10) fcntl$setlease(r0, 0x400, 0x1) 3.004012604s ago: executing program 0 (id=817): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x9000) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) 2.801952264s ago: executing program 0 (id=820): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.65976795s ago: executing program 2 (id=821): madvise(&(0x7f00005ac000/0x3000)=nil, 0x3000, 0x2) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 2.473764485s ago: executing program 4 (id=823): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000240)=@file={0x1, './file4\x00'}, 0x6e) setrlimit(0x7, &(0x7f0000000740)={0x2, 0x6}) ioctl$sock_proto_private(r0, 0x89e0, 0x0) 2.363102771s ago: executing program 2 (id=824): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x1010000, &(0x7f0000000340)=ANY=[], 0x88, 0x2bc, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) statfs(&(0x7f0000000000)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 2.362213637s ago: executing program 3 (id=825): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) 2.151920743s ago: executing program 4 (id=826): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x26, 0x34b, &(0x7f0000000700)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 1.955627903s ago: executing program 2 (id=827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1.614176981s ago: executing program 3 (id=828): socket(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x1, 0x3}) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 1.441331165s ago: executing program 3 (id=829): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x19) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.390212658s ago: executing program 2 (id=830): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) 1.305667413s ago: executing program 0 (id=831): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015082d5281b08c00901024ffa0102030109021200013daea0020904"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x20, 0x14, 0x1, '_'}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.201926092s ago: executing program 3 (id=832): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) 1.201020375s ago: executing program 4 (id=833): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="52010000ead4a320d118af1e6309010203010902240001f60720400904a67602ab52634a09050b002000f84c090905aa"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000f40)={0x14, 0x0, &(0x7f0000000f00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001240)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001880)={0x2c, &(0x7f0000000000)={0x0, 0x13, 0x2, "17c0"}, 0x0, 0x0, 0x0, 0x0}) 1.017623498s ago: executing program 3 (id=834): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 881.425477ms ago: executing program 2 (id=835): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0xa, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x2008840) 674.745197ms ago: executing program 2 (id=836): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002e000701fcffffff1400000001"], 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0x2400c080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a992f53", 0x0, 0xfffeffff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=837): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_ORPHAN_MASK={0x0, 0xa, 0x7}]}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): [ 78.817977][ T5615] bridge_slave_0: entered promiscuous mode [ 78.853288][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.853568][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.853778][ T5613] bridge_slave_0: entered allmulticast mode [ 78.858443][ T5613] bridge_slave_0: entered promiscuous mode [ 78.887884][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.888741][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.888994][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.889130][ T5615] bridge_slave_1: entered allmulticast mode [ 78.890855][ T5615] bridge_slave_1: entered promiscuous mode [ 78.916453][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.916711][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.916979][ T5613] bridge_slave_1: entered allmulticast mode [ 78.921365][ T5613] bridge_slave_1: entered promiscuous mode [ 78.999432][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.999589][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.999719][ T5612] bridge_slave_0: entered allmulticast mode [ 79.003333][ T5612] bridge_slave_0: entered promiscuous mode [ 79.147001][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.147350][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.147575][ T5612] bridge_slave_1: entered allmulticast mode [ 79.149402][ T5612] bridge_slave_1: entered promiscuous mode [ 79.155290][ T5614] team0: Port device team_slave_0 added [ 79.164700][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.165211][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.165469][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.165681][ T5611] bridge_slave_0: entered allmulticast mode [ 79.170977][ T5611] bridge_slave_0: entered promiscuous mode [ 79.185747][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.214675][ T5614] team0: Port device team_slave_1 added [ 79.220149][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.221439][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.222519][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.223075][ T5611] bridge_slave_1: entered allmulticast mode [ 79.226843][ T5611] bridge_slave_1: entered promiscuous mode [ 79.233583][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.319120][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.374834][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.376262][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.376270][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.376283][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.380889][ T5615] team0: Port device team_slave_0 added [ 79.397916][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.403719][ T5613] team0: Port device team_slave_0 added [ 79.429502][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.429516][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.429539][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.436472][ T5615] team0: Port device team_slave_1 added [ 79.444219][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.448194][ T5613] team0: Port device team_slave_1 added [ 79.551999][ T5612] team0: Port device team_slave_0 added [ 79.597430][ T5612] team0: Port device team_slave_1 added [ 79.599597][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.599605][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.599618][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.604844][ T5611] team0: Port device team_slave_0 added [ 79.607522][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.607533][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.607556][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.659302][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.659316][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.659339][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.666627][ T5611] team0: Port device team_slave_1 added [ 79.668602][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.668613][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.668636][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.766680][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.766694][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.766716][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.780706][ T5614] hsr_slave_0: entered promiscuous mode [ 79.783244][ T5614] hsr_slave_1: entered promiscuous mode [ 79.818398][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.818412][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.818448][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.829031][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.829043][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.829066][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.874914][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.874929][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.874952][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.996915][ T5615] hsr_slave_0: entered promiscuous mode [ 79.998109][ T5615] hsr_slave_1: entered promiscuous mode [ 79.999155][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 79.999224][ T5615] Cannot create hsr debugfs directory [ 80.011603][ T5613] hsr_slave_0: entered promiscuous mode [ 80.014052][ T5613] hsr_slave_1: entered promiscuous mode [ 80.015692][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 80.015712][ T5613] Cannot create hsr debugfs directory [ 80.098869][ T5612] hsr_slave_0: entered promiscuous mode [ 80.100074][ T5612] hsr_slave_1: entered promiscuous mode [ 80.101068][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 80.101089][ T5612] Cannot create hsr debugfs directory [ 80.512992][ T4928] Bluetooth: hci4: command tx timeout [ 80.513023][ T4928] Bluetooth: hci2: command tx timeout [ 80.592962][ T5624] Bluetooth: hci3: command tx timeout [ 80.666303][ T5611] hsr_slave_0: entered promiscuous mode [ 80.667531][ T5611] hsr_slave_1: entered promiscuous mode [ 80.668479][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 80.668499][ T5611] Cannot create hsr debugfs directory [ 80.672129][ T5624] Bluetooth: hci0: command tx timeout [ 80.672154][ T5624] Bluetooth: hci1: command tx timeout [ 81.376189][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.455728][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.469781][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.508507][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.519610][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.545398][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.582069][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.631362][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.867294][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.898632][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.909388][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.934789][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.940371][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.979124][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.999877][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.036776][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.219698][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.255979][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.259495][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.297649][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.306362][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.336515][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.366536][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.409059][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.556648][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.591976][ T4928] Bluetooth: hci2: command tx timeout [ 82.592004][ T4928] Bluetooth: hci4: command tx timeout [ 82.596166][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.607507][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.636750][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.646940][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.675299][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.681981][ T5624] Bluetooth: hci3: command tx timeout [ 82.686743][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.710482][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.738999][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.753467][ T5624] Bluetooth: hci1: command tx timeout [ 82.753495][ T5624] Bluetooth: hci0: command tx timeout [ 82.914901][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.915245][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.945021][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.956452][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.984921][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.996015][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.029158][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.036179][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.046935][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.090865][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.115578][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.115747][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.162324][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.162445][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.218565][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.296327][ T2226] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.296477][ T2226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.340172][ T2226] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.340310][ T2226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.403581][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.549610][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.628006][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.628234][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.684117][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.761248][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.761487][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.932832][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.972949][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.005453][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.005687][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.088379][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.090913][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.209120][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.304879][ T1484] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.305117][ T1484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.365892][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.373296][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.544054][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.673019][ T4928] Bluetooth: hci4: command tx timeout [ 84.673048][ T4928] Bluetooth: hci2: command tx timeout [ 84.755095][ T5624] Bluetooth: hci3: command tx timeout [ 84.833325][ T5624] Bluetooth: hci0: command tx timeout [ 84.833352][ T5624] Bluetooth: hci1: command tx timeout [ 84.855331][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.976546][ T5614] veth0_vlan: entered promiscuous mode [ 85.099180][ T5614] veth1_vlan: entered promiscuous mode [ 85.369037][ T5615] veth0_vlan: entered promiscuous mode [ 85.433697][ T5614] veth0_macvtap: entered promiscuous mode [ 85.468568][ T5615] veth1_vlan: entered promiscuous mode [ 85.504955][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.521390][ T5614] veth1_macvtap: entered promiscuous mode [ 85.613268][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.710889][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.771405][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.864896][ T1508] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.871397][ T5615] veth0_macvtap: entered promiscuous mode [ 85.879862][ T1508] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.888668][ T1508] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.896975][ T1508] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.908481][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.927505][ T5615] veth1_macvtap: entered promiscuous mode [ 86.144845][ T5612] veth0_vlan: entered promiscuous mode [ 86.197898][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.311013][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.382676][ T5612] veth1_vlan: entered promiscuous mode [ 86.420410][ T1508] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.438737][ T1508] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.478142][ T1508] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.508300][ T1508] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.541503][ T1508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.541524][ T1508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.676034][ T5611] veth0_vlan: entered promiscuous mode [ 86.693889][ T5613] veth0_vlan: entered promiscuous mode [ 86.767863][ T823] cfg80211: failed to load regulatory.db [ 86.979545][ T1508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.979562][ T1508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.098543][ T5611] veth1_vlan: entered promiscuous mode [ 87.105621][ T5613] veth1_vlan: entered promiscuous mode [ 87.134759][ T5612] veth0_macvtap: entered promiscuous mode [ 87.193325][ T5612] veth1_macvtap: entered promiscuous mode [ 87.195720][ T2226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.195736][ T2226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.420454][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.427505][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.427520][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.510687][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.525478][ T5613] veth0_macvtap: entered promiscuous mode [ 87.536621][ T5611] veth0_macvtap: entered promiscuous mode [ 87.562407][ T1508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.566506][ T5613] veth1_macvtap: entered promiscuous mode [ 87.589335][ T1508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.598412][ T5611] veth1_macvtap: entered promiscuous mode [ 87.613226][ T1508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.648018][ T1508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.845457][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.869288][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.987898][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.005666][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.314765][ T5821] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.323938][ T1508] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.336933][ T1508] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.340795][ T1508] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.344264][ T1508] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.344656][ T1508] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.344690][ T1508] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.344721][ T1508] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.344751][ T1508] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.708353][ T1508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.708370][ T1508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.055556][ T5828] loop3: detected capacity change from 0 to 512 [ 89.320696][ T215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.320713][ T215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.534926][ T5828] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.10: bg 0: block 393: padding at end of block bitmap is not set [ 89.535102][ T5828] loop3: lost filesystem error report for type 5 error -117 [ 89.543335][ C1] EXT4-fs (loop3): initial error at time 1777939100: ext4_validate_block_bitmap:441 [ 89.543361][ C1] EXT4-fs (loop3): last error at time 1777939100: ext4_validate_block_bitmap:441 [ 89.670994][ T5828] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 89.671018][ T5828] loop3: lost filesystem error report for type 5 error -117 [ 89.743276][ T5828] EXT4-fs (loop3): 2 truncates cleaned up [ 89.793305][ T5828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.318021][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.326438][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.326455][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.463003][ T5842] loop0: detected capacity change from 0 to 128 [ 90.638720][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.638738][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.694917][ T5842] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 90.896906][ T5842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.938877][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.938896][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.301978][ T215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.301996][ T215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.337757][ T5852] capability: warning: `syz.3.19' uses 32-bit capabilities (legacy support in use) [ 91.357158][ T5852] program syz.3.19 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.983659][ T32] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.310686][ T32] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 92.310727][ T32] usb 2-1: config 2 interface 0 has no altsetting 0 [ 92.365887][ T32] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 92.365916][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.365934][ T32] usb 2-1: Product: syz [ 92.365946][ T32] usb 2-1: Manufacturer: syz [ 92.365960][ T32] usb 2-1: SerialNumber: syz [ 92.381310][ T5859] loop4: detected capacity change from 0 to 4096 [ 92.390562][ T5859] ======================================================= [ 92.390562][ T5859] WARNING: The mand mount option has been deprecated and [ 92.390562][ T5859] and is ignored by this kernel. Remove the mand [ 92.390562][ T5859] option from the mount to silence this warning. [ 92.390562][ T5859] ======================================================= [ 92.616147][ T32] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 92.616273][ T32] usb 2-1: selecting invalid altsetting 0 [ 92.674532][ T32] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 92.697754][ T32] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 92.698368][ T32] usb 2-1: media controller created [ 92.747070][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.915299][ T5878] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.471949][ T5883] loop1: detected capacity change from 0 to 128 [ 94.645848][ T5883] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.696167][ T32] usb 2-1: USB disconnect, device number 2 [ 94.863923][ T55] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.016155][ T5883] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.085840][ T55] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 95.085869][ T55] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 95.085887][ T55] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 95.086020][ T55] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 95.086045][ T55] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 95.087844][ T55] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 95.087871][ T55] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 95.087890][ T55] usb 3-1: Product: syz [ 95.087904][ T55] usb 3-1: Manufacturer: syz [ 95.867992][ T55] cdc_wdm 3-1:1.0: skipping garbage [ 95.868013][ T55] cdc_wdm 3-1:1.0: skipping garbage [ 96.000283][ T55] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 96.000314][ T55] cdc_wdm 3-1:1.0: Unknown control protocol [ 96.359797][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -75 [ 96.666871][ T32] usb 3-1: USB disconnect, device number 2 [ 97.052083][ T5920] process 'syz.1.39' launched './file2' with NULL argv: empty string added [ 97.556458][ T5901] loop0: detected capacity change from 0 to 40427 [ 97.704596][ T5930] loop2: detected capacity change from 0 to 512 [ 97.711514][ T5901] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 97.711537][ T5901] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 97.936584][ T5938] loop4: detected capacity change from 0 to 512 [ 97.957852][ T5938] EXT4-fs (loop4): Test dummy encryption mode enabled [ 98.164996][ T5938] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.200978][ T5930] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 98.201132][ T5930] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 98.201166][ T5930] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.44: Failed to acquire dquot type 1 [ 98.201187][ T5930] loop2: lost filesystem error report for type 5 error -117 [ 98.211691][ C1] EXT4-fs (loop2): last error at time 1777939109: ext4_acquire_dquot:7034 [ 98.267174][ T5930] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 98.267312][ T5930] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 98.267350][ T5930] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.44: Failed to acquire dquot type 1 [ 98.267370][ T5930] loop2: lost filesystem error report for type 5 error -117 [ 98.500478][ T5930] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.44: bg 0: block 248: padding at end of block bitmap is not set [ 98.500514][ T5930] loop2: lost filesystem error report for type 5 error -117 [ 98.590056][ T5930] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 98.590085][ T5930] loop2: lost filesystem error report for type 5 error -117 [ 98.643353][ T5930] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 98.677551][ T5930] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 98.677604][ T5930] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.44: Failed to acquire dquot type 1 [ 98.677616][ T5930] loop2: lost filesystem error report for type 5 error -117 [ 98.711087][ T5930] EXT4-fs (loop2): 1 orphan inode deleted [ 98.784606][ T5613] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 98.793055][ T5930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.793216][ T5930] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.121737][ T5930] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 99.164802][ T5901] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 99.242982][ T5901] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 99.243753][ T5901] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 99.428775][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.924249][ T5942] loop1: detected capacity change from 0 to 32768 [ 101.271203][ T5978] warning: `syz.3.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.823550][ T5989] netlink: 'syz.0.68': attribute type 3 has an invalid length. [ 102.030172][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 102.215941][ T6005] loop1: detected capacity change from 0 to 2048 [ 102.220604][ T37] audit: type=1326 audit(1777939113.436:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.4.75" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55ab92cdd9 code=0x0 [ 102.408751][ T6005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.445329][ T6005] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 102.598781][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.165068][ T6026] loop1: detected capacity change from 0 to 40427 [ 103.172060][ T6026] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 103.172083][ T6026] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 103.176496][ T6026] F2FS-fs (loop1): invalid crc value [ 103.299862][ T6026] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 103.342692][ T6026] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 103.342719][ T6026] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 103.999338][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 104.648332][ T6054] sctp: [Deprecated]: syz.4.94 (pid 6054) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.648332][ T6054] Use struct sctp_sack_info instead [ 105.001023][ T6062] netlink: 48 bytes leftover after parsing attributes in process `syz.2.97'. [ 105.025025][ T6062] ip6gre1: entered allmulticast mode [ 105.834612][ T55] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.014304][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 106.014348][ T55] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 106.014369][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.109998][ T55] usb 4-1: config 0 descriptor?? [ 106.127187][ T6075] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 106.161824][ T5744] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.340866][ T5744] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 106.340896][ T5744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.502089][ T5744] usb 2-1: config 0 descriptor?? [ 106.574560][ T5744] cp210x 2-1:0.0: cp210x converter detected [ 106.865445][ T55] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 106.865487][ T55] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 106.865514][ T55] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 106.865539][ T55] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 106.866115][ T55] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 106.866144][ T55] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 106.866169][ T55] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 106.866821][ T55] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 106.866855][ T55] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 106.866881][ T55] uclogic 0003:5543:0064.0001: unknown main item tag 0x0 [ 106.970242][ T5744] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 106.980189][ T5744] cp210x 2-1:0.0: GPIO initialisation failed: -524 [ 107.100181][ T55] uclogic 0003:5543:0064.0001: hidraw0: USB HID v7b.fd Device [HID 5543:0064] on usb-dummy_hcd.3-1/input0 [ 107.114912][ T6098] netlink: 'syz.4.112': attribute type 16 has an invalid length. [ 107.114930][ T6098] netlink: 'syz.4.112': attribute type 3 has an invalid length. [ 107.114942][ T6098] netlink: 'syz.4.112': attribute type 1 has an invalid length. [ 107.114954][ T6098] netlink: 112 bytes leftover after parsing attributes in process `syz.4.112'. [ 107.121162][ T5744] usb 2-1: cp210x converter now attached to ttyUSB0 [ 107.221445][ T55] usb 4-1: USB disconnect, device number 2 [ 107.341060][ T5736] usb 2-1: USB disconnect, device number 3 [ 107.398611][ T6102] macvlan0: entered promiscuous mode [ 107.540191][ T6100] fido_id[6100]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 107.567465][ T5736] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 107.594422][ T5736] cp210x 2-1:0.0: device disconnected [ 107.603092][ T6102] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 108.001548][ T6114] loop3: detected capacity change from 0 to 128 [ 108.179730][ T6118] loop2: detected capacity change from 0 to 1024 [ 108.344243][ T6122] loop4: detected capacity change from 0 to 1024 [ 108.352477][ T6118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.424563][ T6125] loop0: detected capacity change from 0 to 131072 [ 109.594838][ T6125] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 109.607860][ T6125] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 109.642610][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.716845][ T6125] F2FS-fs (loop0): list inode (7) has corrupted xattr [ 109.826129][ T6137] loop3: detected capacity change from 0 to 256 [ 110.306114][ T6144] 9p: Bad value for 'rfdno' [ 110.311919][ T6137] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 110.638155][ T6146] loop1: detected capacity change from 0 to 2048 [ 110.915476][ T6146] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.937277][ T6150] loop2: detected capacity change from 0 to 256 [ 110.974158][ T6150] exfat: Deprecated parameter 'utf8' [ 110.974257][ T6150] exfat: Deprecated parameter 'namecase' [ 110.974320][ T6150] exfat: Deprecated parameter 'namecase' [ 111.152011][ T6150] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc3758327, utbl_chksum : 0xe619d30d) [ 111.398682][ T6158] loop3: detected capacity change from 0 to 512 [ 111.461210][ T6158] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.135: inode has both inline data and extents flags [ 111.461399][ T6158] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.462382][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 111.462397][ C1] EXT4-fs (loop3): initial error at time 1777939122: ext4_orphan_get:1397: inode 15 [ 111.462427][ C1] EXT4-fs (loop3): last error at time 1777939122: ext4_orphan_get:1397: inode 15 [ 111.470588][ T6158] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.135: couldn't read orphan inode 15 (err -117) [ 111.470615][ T6158] loop3: lost filesystem error report for type 5 error -117 [ 111.483202][ T6158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.501814][ T37] audit: type=1800 audit(1777939122.676:3): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.130" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 111.815079][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.099965][ T6166] loop3: detected capacity change from 0 to 2048 [ 112.241205][ T6166] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 112.278524][ T6166] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 112.300873][ T6166] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.736575][ T6191] capability: warning: `syz.3.145' uses deprecated v2 capabilities in a way that may be insecure [ 113.050039][ T6203] loop2: detected capacity change from 0 to 256 [ 113.089445][ T6203] exFAT-fs (loop2): error, no upcase table entry. Please run fsck [ 113.089464][ T6203] exFAT-fs (loop2): Filesystem has been set read-only [ 113.089797][ T6203] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 114.881844][ T55] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.033412][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 115.039791][ T55] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 115.039817][ T55] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 115.039836][ T55] usb 4-1: config 0 has no interface number 0 [ 115.039892][ T55] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 115.039916][ T55] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 115.046237][ T55] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 115.046261][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.046280][ T55] usb 4-1: Product: syz [ 115.046293][ T55] usb 4-1: Manufacturer: syz [ 115.046306][ T55] usb 4-1: SerialNumber: syz [ 115.090679][ T55] usb 4-1: config 0 descriptor?? [ 115.152337][ T6266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.179'. [ 115.156219][ T6244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 115.156410][ T6244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 115.272481][ T5736] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.426479][ T5736] usb 5-1: Using ep0 maxpacket: 32 [ 115.434116][ T5736] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 115.434140][ T5736] usb 5-1: config 2 has no interface number 0 [ 115.434181][ T5736] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 115.434205][ T5736] usb 5-1: config 2 interface 88 has no altsetting 0 [ 115.436586][ T5736] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 115.436613][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.436632][ T5736] usb 5-1: Product: syz [ 115.436646][ T5736] usb 5-1: Manufacturer: syz [ 115.436658][ T5736] usb 5-1: SerialNumber: syz [ 115.458314][ T6244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 115.494874][ T6244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 115.598690][ T6259] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 115.629485][ T6274] loop0: detected capacity change from 0 to 256 [ 115.808981][ T6259] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 115.956833][ T55] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 115.958486][ T55] asix 4-1:0.251: probe with driver asix failed with error -524 [ 116.071007][ T6274] FAT-fs (loop0): Directory bread(block 64) failed [ 116.071037][ T6274] FAT-fs (loop0): Directory bread(block 65) failed [ 116.071142][ T6274] FAT-fs (loop0): Directory bread(block 66) failed [ 116.071161][ T6274] FAT-fs (loop0): Directory bread(block 67) failed [ 116.071250][ T6274] FAT-fs (loop0): Directory bread(block 68) failed [ 116.071271][ T6274] FAT-fs (loop0): Directory bread(block 69) failed [ 116.071361][ T6274] FAT-fs (loop0): Directory bread(block 70) failed [ 116.071381][ T6274] FAT-fs (loop0): Directory bread(block 71) failed [ 116.071574][ T6274] FAT-fs (loop0): Directory bread(block 72) failed [ 116.071609][ T6274] FAT-fs (loop0): Directory bread(block 73) failed [ 116.187647][ T5738] usb 4-1: USB disconnect, device number 3 [ 116.225264][ T5736] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 116.225525][ T5736] asix 5-1:2.88: probe with driver asix failed with error -71 [ 116.363571][ T5736] usb 5-1: USB disconnect, device number 2 [ 116.714734][ T6288] loop1: detected capacity change from 0 to 256 [ 116.717684][ T6288] exfat: Deprecated parameter 'utf8' [ 116.717852][ T6288] exfat: Deprecated parameter 'namecase' [ 116.717883][ T6288] exfat: Deprecated parameter 'namecase' [ 116.937417][ T6288] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 117.433362][ T6305] loop3: detected capacity change from 0 to 2048 [ 117.435502][ T6303] loop0: detected capacity change from 0 to 512 [ 117.453957][ T6303] EXT4-fs: Ignoring removed bh option [ 117.545159][ T6303] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 117.549605][ T6303] EXT4-fs (loop0): 1 truncate cleaned up [ 117.625334][ T6303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.710853][ T6305] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.999816][ T6303] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.197: bg 0: block 465: padding at end of block bitmap is not set [ 118.043817][ T6303] EXT4-fs (loop0): Remounting filesystem read-only [ 118.111825][ T5738] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 118.323567][ T5738] usb 3-1: config 0 has no interfaces? [ 118.323602][ T5738] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 118.323625][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.349702][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.351526][ T5738] usb 3-1: config 0 descriptor?? [ 118.584619][ T5736] usb 3-1: USB disconnect, device number 3 [ 118.921871][ T5738] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.131763][ T5738] usb 4-1: Using ep0 maxpacket: 32 [ 119.133659][ T5738] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 119.133707][ T5738] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 119.133732][ T5738] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.133757][ T5738] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 119.136066][ T5738] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 119.136090][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.136109][ T5738] usb 4-1: Product: syz [ 119.136122][ T5738] usb 4-1: Manufacturer: syz [ 119.136135][ T5738] usb 4-1: SerialNumber: syz [ 119.220691][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 119.292708][ T5736] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.441747][ T5736] usb 5-1: Using ep0 maxpacket: 16 [ 119.444563][ T5736] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 119.444588][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.502234][ T5738] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input6 [ 119.506363][ T5736] usb 5-1: config 0 descriptor?? [ 119.526162][ T55] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 119.557388][ T5736] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 119.708288][ T55] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.708312][ T55] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 119.708358][ T55] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 119.708378][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.721597][ T55] usb 2-1: config 0 descriptor?? [ 119.802362][ T55] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 119.804967][ T5736] usb 5-1: Detected FT232B [ 119.821786][ T55] dvb-usb: bulk message failed: -22 (3/0) [ 119.940235][ T55] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 119.942049][ T5738] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 119.942065][ T5738] (id 0x00) [ 119.956671][ T55] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 119.956727][ T55] usb 2-1: media controller created [ 120.012977][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.037193][ T6329] dvb-usb: bulk message failed: -22 (2/0) [ 120.037292][ T6329] dvb-usb: bulk message failed: -22 (4/0) [ 120.167079][ T5738] rc_core: IR keymap rc-imon-pad not found [ 120.167097][ T5738] Registered IR keymap rc-empty [ 120.167188][ T5738] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 120.167205][ T5738] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 120.209463][ T55] dvb-usb: bulk message failed: -22 (6/0) [ 120.209606][ T55] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 120.219358][ T5736] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 120.234768][ T55] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 120.238730][ T5736] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 120.240497][ T5738] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 120.495874][ T6340] vcan0: tx drop: invalid da for name 0x0000000000000033 [ 120.513545][ T55] dvb-usb: schedule remote query interval to 150 msecs. [ 120.513566][ T55] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 120.543819][ T5738] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input7 [ 120.548248][ T5736] usb 5-1: USB disconnect, device number 3 [ 120.732763][ T32] dvb-usb: bulk message failed: -22 (1/0) [ 120.732809][ T32] dvb-usb: error while querying for an remote control event. [ 120.848068][ T5736] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 120.871967][ T55] usb 2-1: USB disconnect, device number 4 [ 120.895660][ T5738] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:4> initialized [ 120.919460][ T5736] ftdi_sio 5-1:0.0: device disconnected [ 120.990545][ T5738] usb 4-1: USB disconnect, device number 4 [ 121.726945][ T55] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 122.210502][ T6344] loop2: detected capacity change from 0 to 32768 [ 122.436035][ T5736] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.662370][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.662402][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.662424][ T5736] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.662464][ T5736] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.662585][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.728654][ T5736] usb 5-1: config 0 descriptor?? [ 123.214756][ T5736] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 123.217245][ T5736] hid_parser_main: 463 callbacks suppressed [ 123.217263][ T5736] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 123.217290][ T5736] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 123.217316][ T5736] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 123.217340][ T5736] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 123.217365][ T5736] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 123.318723][ T5736] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 123.354706][ T5736] usb 5-1: USB disconnect, device number 4 [ 123.416366][ T6386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.229'. [ 123.468104][ T6386] sch_fq: defrate 0 ignored. [ 123.607580][ T6385] fido_id[6385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 124.084829][ T6395] loop0: detected capacity change from 0 to 4096 [ 124.125148][ T6395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.568381][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.251071][ T6441] netlink: 'syz.3.252': attribute type 2 has an invalid length. [ 126.284496][ T6430] loop2: detected capacity change from 0 to 32768 [ 126.727065][ T6450] erspan0: entered promiscuous mode [ 127.294551][ T6456] loop0: detected capacity change from 0 to 32768 [ 127.308521][ T6456] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.258 (6456) [ 127.343211][ T6456] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.343251][ T6456] BTRFS info (device loop0): using sha256 checksum algorithm [ 127.598779][ T6456] BTRFS info (device loop0): enabling ssd optimizations [ 127.598809][ T6456] BTRFS info (device loop0): turning on async discard [ 127.598824][ T6456] BTRFS info (device loop0): enabling free space tree [ 128.283435][ T6493] netlink: 277 bytes leftover after parsing attributes in process `syz.2.267'. [ 128.789665][ T6500] loop4: detected capacity change from 0 to 512 [ 128.805127][ T6500] FAT-fs (loop4): bogus logical sector size 0 [ 128.805146][ T6500] FAT-fs (loop4): Can't find a valid FAT filesystem [ 128.815164][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'. [ 129.229311][ T6510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.273'. [ 129.593739][ T5612] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.052646][ T6529] loop2: detected capacity change from 0 to 512 [ 130.114849][ T6529] EXT4-fs (loop2): orphan cleanup on readonly fs [ 130.114872][ T6529] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 130.290401][ T6529] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 130.333354][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 130.333372][ C1] EXT4-fs (loop2): initial error at time 1777939141: ext4_mb_generate_buddy:1317 [ 130.333392][ C1] EXT4-fs (loop2): last error at time 1777939141: ext4_mb_generate_buddy:1317 [ 130.334386][ T6529] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.282: attempt to clear invalid blocks 2 len 1 [ 130.334417][ T6529] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 130.340106][ T6529] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.282: invalid indirect mapped block 1819239214 (level 0) [ 130.340138][ T6529] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 130.391852][ T6529] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.282: invalid indirect mapped block 1819239214 (level 1) [ 130.391888][ T6529] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 130.438971][ T6529] EXT4-fs (loop2): 1 truncate cleaned up [ 130.447225][ T6529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.520894][ T6529] EXT4-fs (loop2): shut down requested (2) [ 130.846647][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.395881][ T6559] netlink: 104 bytes leftover after parsing attributes in process `syz.3.293'. [ 131.958634][ T6543] loop4: detected capacity change from 0 to 40427 [ 131.987806][ T6543] F2FS-fs (loop4): invalid crc value [ 132.561474][ T6543] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 132.756738][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.756816][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.824119][ T6543] F2FS-fs (loop4): Start checkpoint disabled! [ 132.869517][ T6543] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 132.869925][ T6543] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 132.932964][ T6598] netlink: 52 bytes leftover after parsing attributes in process `syz.2.308'. [ 133.185531][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.214196][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.431371][ T68] kworker/u8:5: attempt to access beyond end of device [ 133.431371][ T68] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.448317][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 133.448345][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 133.448355][ T68] Workqueue: writeback wb_workfn (flush-7:4) [ 133.448397][ T68] Call Trace: [ 133.448404][ T68] [ 133.448415][ T68] dump_stack_lvl+0xe8/0x150 [ 133.448441][ T68] f2fs_stop_checkpoint+0x383/0x540 [ 133.448467][ T68] f2fs_write_end_io+0x1274/0x1740 [ 133.448512][ T68] __submit_merged_bio+0x256/0x6a0 [ 133.448540][ T68] __submit_merged_write_cond+0x3c9/0x4e0 [ 133.448569][ T68] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 133.448621][ T68] f2fs_write_data_pages+0x287e/0x34f0 [ 133.448681][ T68] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 133.448716][ T68] ? cfg80211_inform_single_bss_data+0xba3/0x1b80 [ 133.448783][ T68] ? __lock_acquire+0x6b5/0x2d10 [ 133.448822][ T68] ? unwind_next_frame+0xa6/0x2550 [ 133.448870][ T68] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 133.448897][ T68] do_writepages+0x32e/0x550 [ 133.448920][ T68] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 133.448939][ T68] ? reacquire_held_locks+0x104/0x190 [ 133.448952][ T68] ? rt_spin_lock+0x1e0/0x400 [ 133.448976][ T68] __writeback_single_inode+0x133/0x10e0 [ 133.448993][ T68] ? rt_spin_unlock+0x160/0x200 [ 133.449012][ T68] writeback_sb_inodes+0x97f/0x1980 [ 133.449040][ T68] ? lockdep_hardirqs_on+0x7a/0x110 [ 133.449060][ T68] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 133.449106][ T68] ? rcu_is_watching+0x15/0xb0 [ 133.449127][ T68] wb_writeback+0x445/0xb00 [ 133.449144][ T68] ? queue_io+0x2b1/0x440 [ 133.449164][ T68] ? __pfx_wb_writeback+0x10/0x10 [ 133.449192][ T68] wb_workfn+0x3fd/0xf20 [ 133.449211][ T68] ? look_up_lock_class+0x57/0x110 [ 133.449240][ T68] ? __pfx_wb_workfn+0x10/0x10 [ 133.449261][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 133.449281][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 133.449300][ T68] ? process_one_work+0x8b7/0x1710 [ 133.449319][ T68] ? process_one_work+0x8b7/0x1710 [ 133.449346][ T68] ? process_one_work+0x8b7/0x1710 [ 133.449362][ T68] process_one_work+0x9a3/0x1710 [ 133.449396][ T68] ? __pfx_process_one_work+0x10/0x10 [ 133.449411][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 133.449442][ T68] worker_thread+0xba8/0x11e0 [ 133.449483][ T68] kthread+0x388/0x470 [ 133.449507][ T68] ? __pfx_worker_thread+0x10/0x10 [ 133.449522][ T68] ? __pfx_kthread+0x10/0x10 [ 133.449540][ T68] ret_from_fork+0x514/0xb70 [ 133.449559][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 133.449574][ T68] ? __switch_to+0xc79/0x1410 [ 133.449591][ T68] ? __pfx_kthread+0x10/0x10 [ 133.449619][ T68] ret_from_fork_asm+0x1a/0x30 [ 133.449651][ T68] [ 133.467177][ T68] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 134.154103][ T6625] loop0: detected capacity change from 0 to 512 [ 134.213292][ T6625] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 134.363140][ T32] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 134.405172][ T6625] EXT4-fs (loop0): failed to open journal device unknown-block(11,127) -6 [ 134.535879][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.535912][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.535952][ T32] usb 2-1: New USB device found, idVendor=0408, idProduct=3001, bcdDevice= 0.00 [ 134.535974][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.585720][ T32] usb 2-1: config 0 descriptor?? [ 134.710309][ T6636] netlink: 56 bytes leftover after parsing attributes in process `syz.2.324'. [ 134.977042][ T6642] loop2: detected capacity change from 0 to 256 [ 135.023023][ T32] hid-generic 0003:0408:3001.0003: unknown main item tag 0x0 [ 135.023054][ T32] hid-generic 0003:0408:3001.0003: unknown main item tag 0x0 [ 135.023077][ T32] hid-generic 0003:0408:3001.0003: unknown main item tag 0x0 [ 135.023099][ T32] hid-generic 0003:0408:3001.0003: unknown main item tag 0x0 [ 135.023120][ T32] hid-generic 0003:0408:3001.0003: unknown main item tag 0x0 [ 135.023143][ T32] hid-generic 0003:0408:3001.0003: unknown main item tag 0x0 [ 135.023166][ T32] hid-generic 0003:0408:3001.0003: unknown main item tag 0x0 [ 135.023197][ T32] hid-generic 0003:0408:3001.0003: unknown main item tag 0x0 [ 135.023221][ T32] hid-generic 0003:0408:3001.0003: unknown main item tag 0x0 [ 135.023244][ T32] hid-generic 0003:0408:3001.0003: unknown main item tag 0x0 [ 135.054465][ T6642] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 135.160261][ T32] hid-generic 0003:0408:3001.0003: hidraw0: USB HID v0.0b Device [HID 0408:3001] on usb-dummy_hcd.1-1/input0 [ 135.261947][ T32] usb 2-1: USB disconnect, device number 5 [ 135.381422][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 135.441761][ T5738] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.452364][ T6651] fido_id[6651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 135.591807][ T5738] usb 5-1: Using ep0 maxpacket: 16 [ 135.598204][ T5738] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 135.598234][ T5738] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.598264][ T5738] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 135.598286][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.665668][ T5738] usb 5-1: config 0 descriptor?? [ 136.063664][ T6665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.063858][ T6665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.157778][ T6665] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 136.300966][ T5738] greenasia 0003:0E8F:0012.0004: invalid report_size 12084 [ 136.300988][ T5738] greenasia 0003:0E8F:0012.0004: item 0 2 1 7 parsing failed [ 136.330067][ T5738] greenasia 0003:0E8F:0012.0004: parse failed [ 136.330144][ T5738] greenasia 0003:0E8F:0012.0004: probe with driver greenasia failed with error -22 [ 136.516631][ T823] usb 5-1: USB disconnect, device number 5 [ 136.568664][ T6671] loop0: detected capacity change from 0 to 4096 [ 136.773973][ T6671] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 137.070824][ T6683] loop1: detected capacity change from 0 to 4096 [ 137.100872][ T6683] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 137.145452][ T6689] loop9: detected capacity change from 0 to 524287936 [ 137.271172][ T6692] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 137.309677][ T55] IPVS: starting estimator thread 0... [ 137.411904][ T6693] IPVS: using max 9 ests per chain, 21600 per kthread [ 137.507537][ T6695] Bluetooth: MGMT ver 1.23 [ 137.549521][ T6671] ntfs3(loop0): ino=1a, mi_enum_attr [ 137.549788][ T6671] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 137.815016][ T6671] ntfs3(loop0): ino=1a, mi_enum_attr [ 137.815040][ T6671] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 138.205122][ T6686] loop3: detected capacity change from 0 to 32768 [ 138.304605][ T6671] ntfs3(loop0): ino=5, "/" ntfs_readdir [ 138.421106][ T6686] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.346 (6686) [ 139.005351][ T6686] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.005384][ T6686] BTRFS info (device loop3): using sha256 checksum algorithm [ 139.486532][ T6686] BTRFS info (device loop3): enabling ssd optimizations [ 139.486557][ T6686] BTRFS info (device loop3): turning on async discard [ 139.486573][ T6686] BTRFS info (device loop3): enabling free space tree [ 139.490366][ T6732] netlink: 44 bytes leftover after parsing attributes in process `syz.1.358'. [ 139.700556][ T6737] program syz.2.360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.719148][ T5615] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.435669][ T6748] loop1: detected capacity change from 0 to 32768 [ 140.463460][ T6748] (syz.1.365,6748,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.472488][ T6748] (syz.1.365,6748,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.541417][ T6748] (syz.1.365,6748,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 140.543207][ T6748] (syz.1.365,6748,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 140.565727][ T6748] JBD2: Ignoring recovery information on journal [ 140.660593][ T6748] (syz.1.365,6748,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 140.665314][ T6748] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 140.669830][ T6748] (syz.1.365,6748,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 140.705339][ T6748] (syz.1.365,6748,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 140.858945][ T6748] (syz.1.365,6748,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 140.880859][ T6748] (syz.1.365,6748,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 140.880895][ T6748] (syz.1.365,6748,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 140.880921][ T6748] (syz.1.365,6748,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 140.880941][ T6748] (syz.1.365,6748,1):ocfs2_quota_read:201 ERROR: status = -5 [ 140.880961][ T6748] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 5 [ 140.881059][ T6748] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 140.881090][ T6748] (syz.1.365,6748,1):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 140.883937][ T6748] (syz.1.365,6748,1):ocfs2_mknod:318 ERROR: status = -5 [ 140.883988][ T6748] (syz.1.365,6748,1):ocfs2_mknod:506 ERROR: status = -5 [ 140.884007][ T6748] (syz.1.365,6748,1):ocfs2_create:679 ERROR: status = -5 [ 140.891182][ T6748] syz.1.365 (6748) used greatest stack depth: 19064 bytes left [ 141.105073][ T6754] loop4: detected capacity change from 0 to 128 [ 141.498642][ T6761] loop3: detected capacity change from 0 to 2048 [ 141.804522][ T6761] loop3: p3 p4 < > [ 141.804767][ T6761] loop3: p3 size 861184 extends beyond EOD, truncated [ 142.544385][ T6352] udevd[6352]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 142.576820][ T5892] udevd[5892]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 142.637957][ T6777] loop0: detected capacity change from 0 to 512 [ 142.659526][ T6352] udevd[6352]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 142.678586][ T5892] udevd[5892]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 142.699080][ T6777] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 142.699195][ T6777] System zones: 0-2, 18-18, 34-35 [ 142.724741][ T6777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.724983][ T6777] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.908447][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.098565][ T5614] ocfs2: Unmounting device (7,1) on (node local) [ 143.472959][ T55] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.611786][ T823] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 143.697744][ T55] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 143.697769][ T55] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 143.697787][ T55] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 143.697806][ T55] usb 3-1: config 220 has no interface number 2 [ 143.697868][ T55] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 143.697894][ T55] usb 3-1: config 220 interface 0 has no altsetting 0 [ 143.697910][ T55] usb 3-1: config 220 interface 76 has no altsetting 0 [ 143.697926][ T55] usb 3-1: config 220 interface 1 has no altsetting 0 [ 143.781915][ T55] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 143.781942][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.781960][ T55] usb 3-1: Product: syz [ 143.781973][ T55] usb 3-1: Manufacturer: syz [ 143.781987][ T55] usb 3-1: SerialNumber: syz [ 143.808882][ T823] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 143.808909][ T823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.880031][ T823] usb 5-1: config 0 descriptor?? [ 143.901817][ T823] cp210x 5-1:0.0: cp210x converter detected [ 144.200327][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'. [ 144.239986][ T55] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 144.240022][ T55] uvcvideo 3-1:220.0: No valid video chain found. [ 144.240086][ T55] usb 3-1: selecting invalid altsetting 0 [ 144.269533][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'. [ 144.332778][ T55] usb 3-1: selecting invalid altsetting 0 [ 144.332814][ T55] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 144.344072][ T823] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 144.358438][ T55] usb 3-1: USB disconnect, device number 4 [ 144.539307][ T6816] netlink: 'syz.3.393': attribute type 9 has an invalid length. [ 144.540716][ T823] usb 5-1: cp210x converter now attached to ttyUSB0 [ 144.570127][ T32] usb 5-1: USB disconnect, device number 6 [ 144.581189][ T6817] netlink: 104 bytes leftover after parsing attributes in process `syz.0.392'. [ 144.630309][ T32] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 144.721328][ T6819] program syz.2.394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.772991][ T32] cp210x 5-1:0.0: device disconnected [ 144.919770][ T6824] loop2: detected capacity change from 0 to 128 [ 144.969945][ T6824] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 145.456620][ T6835] Driver unsupported XDP return value 0 on prog (id 41) dev N/A, expect packet loss! [ 146.424894][ T6864] netlink: 'syz.2.413': attribute type 30 has an invalid length. [ 146.512394][ T55] kernel write not supported for file /208/uid_map (pid: 55 comm: kworker/1:1) [ 146.614733][ T6870] mmap: syz.4.416 (6870) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.942672][ T37] audit: type=1326 audit(1777939158.156:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.4.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ab92cdd9 code=0x7ffc0000 [ 146.942718][ T37] audit: type=1326 audit(1777939158.186:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.4.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ab92cdd9 code=0x7ffc0000 [ 147.081972][ T37] audit: type=1326 audit(1777939158.286:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.4.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55ab8ce159 code=0x7ffc0000 [ 147.082126][ T37] audit: type=1326 audit(1777939158.316:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.4.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f55ab92cdd9 code=0x7ffc0000 [ 147.082273][ T37] audit: type=1326 audit(1777939158.316:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.4.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ab92cdd9 code=0x7ffc0000 [ 147.082415][ T37] audit: type=1326 audit(1777939158.316:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.4.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ab92cdd9 code=0x7ffc0000 [ 147.099984][ T37] audit: type=1326 audit(1777939158.326:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.4.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ab92cdd9 code=0x7ffc0000 [ 147.100029][ T37] audit: type=1326 audit(1777939158.326:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.4.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55ab8ce159 code=0x7ffc0000 [ 147.100065][ T37] audit: type=1326 audit(1777939158.326:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.4.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55ab8ce159 code=0x7ffc0000 [ 147.100100][ T37] audit: type=1326 audit(1777939158.326:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.4.421" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55ab8ce159 code=0x7ffc0000 [ 147.220549][ T6888] loop2: detected capacity change from 0 to 4096 [ 147.246880][ T6888] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 147.276067][ T6888] ntfs3(loop2): ino=3, mi_enum_attr [ 147.516139][ T6888] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 147.516344][ T6888] ntfs3(loop2): ino=1a, mi_enum_attr [ 147.516459][ T6888] ntfs3(loop2): ino=1a, mi_enum_attr [ 147.516475][ T6888] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 148.348011][ T6914] Zero length message leads to an empty skb [ 148.783299][ T6918] loop4: detected capacity change from 0 to 4096 [ 148.928538][ T6900] loop3: detected capacity change from 0 to 32768 [ 149.299029][ T6900] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 149.323392][ T6930] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.818575][ T6900] XFS (loop3): Ending clean mount [ 149.832379][ T6942] batman_adv: batadv0: Adding interface: ipvlan2 [ 149.832394][ T6942] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.832420][ T6942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.832435][ T6942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.832444][ T6942] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 150.152949][ T6953] loop0: detected capacity change from 0 to 64 [ 150.941443][ T5615] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 152.335602][ T6979] loop2: detected capacity change from 0 to 128 [ 152.994650][ T6983] loop3: detected capacity change from 0 to 32768 [ 153.202323][ T6979] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.205222][ T6979] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.326769][ T6976] loop1: detected capacity change from 0 to 131072 [ 153.340395][ T6983] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 153.356006][ T6983] JBD2: Ignoring recovery information on journal [ 153.464019][ T6983] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 153.537013][ T6976] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 153.576239][ T6983] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 153.576359][ T6983] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 153.576371][ T6983] OCFS2: File system is now read-only. [ 153.576386][ T6983] (syz.3.455,6983,1):ocfs2_search_chain:1913 ERROR: status = -30 [ 153.576409][ T6983] (syz.3.455,6983,1):ocfs2_search_chain:2036 ERROR: status = -30 [ 153.576428][ T6983] (syz.3.455,6983,1):ocfs2_claim_suballoc_bits:2123 ERROR: status = -30 [ 153.576448][ T6983] (syz.3.455,6983,1):ocfs2_claim_suballoc_bits:2176 ERROR: status = -30 [ 153.576469][ T6983] (syz.3.455,6983,1):__ocfs2_claim_clusters:2557 ERROR: status = -30 [ 153.576489][ T6983] (syz.3.455,6983,1):__ocfs2_claim_clusters:2565 ERROR: status = -30 [ 153.576515][ T6983] (syz.3.455,6983,1):ocfs2_local_alloc_new_window:1197 ERROR: status = -30 [ 153.576536][ T6983] (syz.3.455,6983,1):ocfs2_local_alloc_new_window:1222 ERROR: status = -30 [ 153.576554][ T6983] (syz.3.455,6983,1):ocfs2_local_alloc_slide_window:1296 ERROR: status = -30 [ 153.576790][ T6983] (syz.3.455,6983,1):ocfs2_local_alloc_slide_window:1315 ERROR: status = -30 [ 153.576810][ T6983] (syz.3.455,6983,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30 [ 153.576829][ T6983] (syz.3.455,6983,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 153.576847][ T6983] (syz.3.455,6983,1):ocfs2_reserve_clusters_with_limit:1266 ERROR: status = -30 [ 153.576876][ T6983] (syz.3.455,6983,1):ocfs2_reserve_clusters_with_limit:1315 ERROR: status = -30 [ 153.576896][ T6983] (syz.3.455,6983,1):ocfs2_symlink:1924 ERROR: status = -30 [ 153.587602][ T6983] (syz.3.455,6983,1):ocfs2_symlink:2078 ERROR: status = -30 [ 153.807744][ T6976] XFS (loop1): Starting recovery (logdev: internal) [ 153.867294][ T6976] XFS (loop1): Ending recovery (logdev: internal) [ 153.924780][ T5611] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.040934][ T5615] ocfs2: Unmounting device (7,3) on (node local) [ 154.306188][ T5614] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 154.891776][ T55] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 155.443775][ T55] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.443811][ T55] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 155.443913][ T55] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.443940][ T55] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.443974][ T55] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 155.443996][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.466254][ T55] usb 4-1: config 0 descriptor?? [ 155.467076][ T7006] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.891478][ T55] hid (null): invalid report_size 26545 [ 155.941842][ T55] uclogic 0003:145F:0212.0005: interface is invalid, ignoring [ 156.167543][ T55] usb 4-1: USB disconnect, device number 5 [ 156.168110][ T7027] netlink: 'syz.4.472': attribute type 1 has an invalid length. [ 156.677382][ T7034] macvtap1: entered promiscuous mode [ 156.689057][ T7034] macvtap1: entered allmulticast mode [ 156.689077][ T7034] veth1_vlan: entered allmulticast mode [ 156.755263][ T7040] loop1: detected capacity change from 0 to 128 [ 156.776271][ T7040] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 156.890525][ T7042] macvtap1: entered allmulticast mode [ 156.890546][ T7042] dummy0: entered allmulticast mode [ 156.906087][ T7042] dummy0: entered promiscuous mode [ 157.009277][ T7048] loop4: detected capacity change from 0 to 512 [ 157.138597][ T7042] dummy0: left allmulticast mode [ 157.148399][ T7048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.148542][ T7048] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.453860][ T10] dummy0: left promiscuous mode [ 157.540365][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.700631][ T7060] loop0: detected capacity change from 0 to 1024 [ 157.777473][ T7064] loop1: detected capacity change from 0 to 512 [ 157.778505][ T7064] EXT4-fs: Ignoring removed oldalloc option [ 157.778528][ T7064] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.820380][ T7064] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 157.820400][ T7064] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 157.820710][ T7064] EXT4-fs (loop1): orphan cleanup on readonly fs [ 157.820817][ T7064] __quota_error: 78 callbacks suppressed [ 157.820830][ T7064] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 157.821004][ T7064] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 157.821037][ T7064] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 157.896711][ T7064] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.489: bg 0: block 40: padding at end of block bitmap is not set [ 157.896745][ T7064] loop1: lost filesystem error report for type 5 error -117 [ 157.905384][ C1] EXT4-fs (loop1): initial error at time 1778004705: ext4_validate_block_bitmap:441 [ 157.905416][ C1] EXT4-fs (loop1): last error at time 1778004705: ext4_validate_block_bitmap:441 [ 157.946857][ T7064] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 157.946881][ T7064] loop1: lost filesystem error report for type 5 error -117 [ 157.947299][ T7064] EXT4-fs (loop1): 1 truncate cleaned up [ 157.950008][ T7064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.063535][ T7064] EXT4-fs (loop1): shut down requested (2) [ 158.389735][ T7073] loop2: detected capacity change from 0 to 4096 [ 158.444682][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.770125][ T37] audit: type=1326 audit(1778004706.005:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ab92cdd9 code=0x7ffc0000 [ 158.777387][ T37] audit: type=1326 audit(1778004706.005:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ab92cdd9 code=0x7ffc0000 [ 158.820593][ T37] audit: type=1326 audit(1778004706.055:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f55ab92cdd9 code=0x7ffc0000 [ 158.820924][ T37] audit: type=1326 audit(1778004706.055:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ab92cdd9 code=0x7ffc0000 [ 158.829307][ T37] audit: type=1326 audit(1778004706.065:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ab92cdd9 code=0x7ffc0000 [ 158.829589][ T37] audit: type=1326 audit(1778004706.065:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55ab8ed60e code=0x7ffc0000 [ 158.834835][ T37] audit: type=1326 audit(1778004706.065:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ab92cdd9 code=0x7ffc0000 [ 158.836515][ T37] audit: type=1326 audit(1778004706.075:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ab92cdd9 code=0x7ffc0000 [ 158.838781][ T37] audit: type=1326 audit(1778004706.075:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.4.495" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f55ab92cdd9 code=0x7ffc0000 [ 159.467909][ T7100] loop3: detected capacity change from 0 to 64 [ 159.490102][ T7100] hfs: Bad value for 'umask' [ 159.729765][ T7106] netlink: 44 bytes leftover after parsing attributes in process `syz.4.507'. [ 159.875524][ T7109] loop3: detected capacity change from 0 to 4096 [ 159.891856][ T7109] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 159.962056][ T7106] netlink: 40 bytes leftover after parsing attributes in process `syz.4.507'. [ 160.111627][ T7109] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 160.156289][ T7109] ntfs3(loop3): Failed to load $Extend (-22). [ 160.156312][ T7109] ntfs3(loop3): Failed to initialize $Extend. [ 160.318426][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.368748][ T7109] ntfs3(loop3): ino=0, attr_set_size_ex [ 160.893976][ T7126] loop0: detected capacity change from 0 to 256 [ 160.977538][ T7126] FAT-fs (loop0): Directory bread(block 64) failed [ 160.977569][ T7126] FAT-fs (loop0): Directory bread(block 65) failed [ 160.977668][ T7126] FAT-fs (loop0): Directory bread(block 66) failed [ 160.977689][ T7126] FAT-fs (loop0): Directory bread(block 67) failed [ 160.977782][ T7126] FAT-fs (loop0): Directory bread(block 68) failed [ 160.977803][ T7126] FAT-fs (loop0): Directory bread(block 69) failed [ 160.977900][ T7126] FAT-fs (loop0): Directory bread(block 70) failed [ 160.977921][ T7126] FAT-fs (loop0): Directory bread(block 71) failed [ 160.978012][ T7126] FAT-fs (loop0): Directory bread(block 72) failed [ 160.978032][ T7126] FAT-fs (loop0): Directory bread(block 73) failed [ 161.155729][ T7124] loop1: detected capacity change from 0 to 128 [ 161.176606][ T7124] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.180484][ T7124] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.379307][ T7118] loop2: detected capacity change from 0 to 131072 [ 161.419347][ T7118] F2FS-fs (loop2): invalid crc value [ 161.560863][ T7118] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 161.574988][ T7118] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 161.715194][ T7132] ip6gre1: entered promiscuous mode [ 161.715219][ T7132] ip6gre1: entered allmulticast mode [ 161.770848][ T7134] netlink: 'syz.1.518': attribute type 4 has an invalid length. [ 161.954585][ T1457] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.957107][ T55] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.965028][ T1457] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.046372][ T7138] input: syz0 as /devices/virtual/input/input10 [ 162.833686][ T5738] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.834007][ T5738] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.854127][ T7161] loop1: detected capacity change from 0 to 8 [ 163.164174][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.533'. [ 165.163507][ T7229] program syz.0.557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.327216][ T7237] loop2: detected capacity change from 0 to 256 [ 165.364853][ T7237] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372) [ 165.368265][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 165.779329][ T7252] loop4: detected capacity change from 0 to 2048 [ 165.990251][ T7260] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.273294][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.421850][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 166.639369][ T7264] loop2: detected capacity change from 0 to 256 [ 166.750265][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 166.750282][ T37] audit: type=1326 audit(1778004713.985:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.3.576" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86ae00cdd9 code=0x0 [ 166.850828][ T55] kernel read not supported for file /adsp1 (pid: 55 comm: kworker/1:1) [ 167.241160][ T7264] FAT-fs (loop2): Directory bread(block 64) failed [ 167.250413][ T7264] FAT-fs (loop2): Directory bread(block 65) failed [ 167.302615][ T7264] FAT-fs (loop2): Directory bread(block 66) failed [ 167.302648][ T7264] FAT-fs (loop2): Directory bread(block 67) failed [ 167.302791][ T7264] FAT-fs (loop2): Directory bread(block 68) failed [ 167.302811][ T7264] FAT-fs (loop2): Directory bread(block 69) failed [ 167.302940][ T7264] FAT-fs (loop2): Directory bread(block 70) failed [ 167.302960][ T7264] FAT-fs (loop2): Directory bread(block 71) failed [ 167.303093][ T7264] FAT-fs (loop2): Directory bread(block 72) failed [ 167.303113][ T7264] FAT-fs (loop2): Directory bread(block 73) failed [ 167.774629][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 167.784126][ T7286] program syz.1.581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.824272][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 167.824311][ T10] usb 3-1: can't read configurations, error -71 [ 168.166846][ T7299] loop1: detected capacity change from 0 to 128 [ 168.188648][ T7299] FAT-fs (loop1): Directory bread(block 162) failed [ 168.188678][ T7299] FAT-fs (loop1): Directory bread(block 163) failed [ 168.188699][ T7299] FAT-fs (loop1): Directory bread(block 164) failed [ 168.188720][ T7299] FAT-fs (loop1): Directory bread(block 165) failed [ 168.188741][ T7299] FAT-fs (loop1): Directory bread(block 166) failed [ 168.188760][ T7299] FAT-fs (loop1): Directory bread(block 167) failed [ 168.188797][ T7299] FAT-fs (loop1): Directory bread(block 168) failed [ 168.188818][ T7299] FAT-fs (loop1): Directory bread(block 169) failed [ 168.374714][ T7305] FAT-fs (loop1): Directory bread(block 162) failed [ 168.374744][ T7305] FAT-fs (loop1): Directory bread(block 163) failed [ 168.567490][ T7314] loop2: detected capacity change from 0 to 64 [ 168.640342][ T7314] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 168.747265][ T7306] syz.1.587: attempt to access beyond end of device [ 168.747265][ T7306] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 168.747368][ T7306] syz.1.587: attempt to access beyond end of device [ 168.747368][ T7306] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 168.922372][ T7321] loop0: detected capacity change from 0 to 4096 [ 168.926565][ T7321] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 169.018593][ T7323] loop4: detected capacity change from 0 to 256 [ 169.023487][ T7305] syz.1.587: attempt to access beyond end of device [ 169.023487][ T7305] loop1: rw=3, sector=234, nr_sectors = 6 limit=128 [ 169.023638][ T7305] syz.1.587: attempt to access beyond end of device [ 169.023638][ T7305] loop1: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 169.224185][ T7321] ntfs3(loop0): ino=1a, mi_enum_attr [ 169.224214][ T7321] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 170.596694][ T7351] loop2: detected capacity change from 0 to 2048 [ 170.756853][ T7351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.966083][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.305223][ T7369] netlink: 'syz.3.617': attribute type 83 has an invalid length. [ 171.392121][ T7373] loop4: detected capacity change from 0 to 256 [ 171.395792][ T7373] vfat: Bad value for 'nfs' [ 172.117021][ T43] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.254535][ T5738] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.264044][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 172.415688][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 172.436653][ T10] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 172.436678][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.436696][ T10] usb 4-1: Product: syz [ 172.436718][ T10] usb 4-1: Manufacturer: syz [ 172.436731][ T10] usb 4-1: SerialNumber: syz [ 172.481325][ T5738] usb 5-1: Using ep0 maxpacket: 16 [ 172.483487][ T5738] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.483536][ T5738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.483561][ T5738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 172.483582][ T5738] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 172.483603][ T5738] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.484826][ T5738] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 172.484849][ T5738] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 172.484867][ T5738] usb 5-1: Manufacturer: syz [ 172.511404][ T5738] usb 5-1: config 0 descriptor?? [ 172.624146][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.666127][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.684322][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.731445][ T10] usb 4-1: config 0 descriptor?? [ 172.731467][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.769918][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.903836][ T7385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.904536][ T7385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.940141][ T7392] loop0: detected capacity change from 0 to 4096 [ 173.047717][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 173.241916][ T5738] rc_core: IR keymap rc-hauppauge not found [ 173.241934][ T5738] Registered IR keymap rc-empty [ 173.269561][ T10] gspca_se401: Too many frame sizes [ 173.297536][ T5738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.319721][ T5738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.476765][ T5738] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 173.522664][ T10] usb 4-1: USB disconnect, device number 6 [ 173.527284][ T7406] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.582331][ T5738] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 173.743495][ T5738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.771929][ T5738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.800042][ T5738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.815280][ T5738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.834345][ T5738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.852472][ T5738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.883501][ T5738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.903632][ T5738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.923979][ T5738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.951665][ T5738] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 174.125662][ T5738] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 174.125687][ T5738] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 174.209510][ T43] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.307170][ T5738] usb 5-1: USB disconnect, device number 7 [ 174.486182][ T7419] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 174.759328][ T7426] program syz.2.640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.813533][ T7424] loop4: detected capacity change from 0 to 512 [ 174.851001][ T7424] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.871873][ T7424] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 174.871893][ T7424] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 174.930914][ T7424] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 174.930937][ T7424] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 174.992053][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.059336][ T7424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 175.072268][ T4928] Bluetooth: hci3: command tx timeout [ 175.275658][ T43] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.319546][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.836975][ T43] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.503963][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.657'. [ 176.503993][ T7467] netlink: 'syz.4.657': attribute type 30 has an invalid length. [ 176.504006][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 176.815572][ T7475] loop4: detected capacity change from 0 to 1024 [ 176.819729][ T7475] EXT4-fs: Ignoring removed orlov option [ 176.982892][ T7481] overlayfs: workdir and upperdir must reside under the same mount [ 177.052476][ T7475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.152208][ T4928] Bluetooth: hci3: command tx timeout [ 177.374532][ T7491] syz.2.665 (7491): /proc/7490/oom_adj is deprecated, please use /proc/7490/oom_score_adj instead. [ 177.446027][ T7493] program syz.0.666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.718172][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.854912][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 179.233790][ T4928] Bluetooth: hci3: command tx timeout [ 180.319891][ T7546] loop3: detected capacity change from 0 to 128 [ 180.418783][ T7546] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.424103][ T7546] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.425073][ T43] bridge_slave_1: left allmulticast mode [ 180.425242][ T43] bridge_slave_1: left promiscuous mode [ 180.545834][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.741929][ T5615] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.096495][ T43] bridge_slave_0: left allmulticast mode [ 181.096527][ T43] bridge_slave_0: left promiscuous mode [ 181.096791][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.143835][ T7495] syz.2.667 (7495) used greatest stack depth: 19048 bytes left [ 181.265047][ T7558] sctp: [Deprecated]: syz.2.685 (pid 7558) Use of int in maxseg socket option. [ 181.265047][ T7558] Use struct sctp_assoc_value instead [ 181.322152][ T4928] Bluetooth: hci3: command tx timeout [ 182.218663][ T7571] loop2: detected capacity change from 0 to 40427 [ 182.222306][ T7571] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 182.222328][ T7571] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 182.225011][ T7571] F2FS-fs (loop2): invalid crc value [ 182.391049][ T7571] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 182.429748][ T7571] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 182.429774][ T7571] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 182.725302][ T7581] loop0: detected capacity change from 0 to 2048 [ 182.748676][ T7581] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 182.748705][ T7581] NILFS (loop0): mounting unchecked fs [ 182.892020][ T5892] udevd[5892]: incorrect nilfs2 checksum on /dev/loop0 [ 182.929867][ T5892] udevd[5892]: incorrect nilfs2 checksum on /dev/loop0 [ 183.001427][ T7581] NILFS (loop0): recovery complete [ 183.033758][ T7582] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.479845][ T5744] IPVS: starting estimator thread 0... [ 183.480787][ T7586] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 183.579017][ T7588] IPVS: using max 10 ests per chain, 24000 per kthread [ 183.585137][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 184.771206][ T7600] loop2: detected capacity change from 0 to 131072 [ 184.786814][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.802926][ T7600] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 184.886029][ T7600] XFS (loop2): Starting recovery (logdev: internal) [ 184.893406][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.945814][ T7600] XFS (loop2): Ending recovery (logdev: internal) [ 184.950001][ T43] bond0 (unregistering): Released all slaves [ 185.029915][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 185.265315][ T5611] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 186.785019][ T7630] syz.3.709 (7630) used greatest stack depth: 18304 bytes left [ 187.360081][ T7646] loop0: detected capacity change from 0 to 32768 [ 187.396050][ T7646] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 187.406270][ T7646] JBD2: Ignoring recovery information on journal [ 187.455136][ T7646] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 187.509349][ T7646] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 187.509449][ T7646] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 187.509460][ T7646] OCFS2: File system is now read-only. [ 187.509476][ T7646] (syz.0.715,7646,0):ocfs2_search_chain:1913 ERROR: status = -30 [ 187.509497][ T7646] (syz.0.715,7646,0):ocfs2_search_chain:2036 ERROR: status = -30 [ 187.509517][ T7646] (syz.0.715,7646,0):ocfs2_claim_suballoc_bits:2123 ERROR: status = -30 [ 187.509537][ T7646] (syz.0.715,7646,0):ocfs2_claim_suballoc_bits:2176 ERROR: status = -30 [ 187.509557][ T7646] (syz.0.715,7646,0):__ocfs2_claim_clusters:2557 ERROR: status = -30 [ 187.509577][ T7646] (syz.0.715,7646,0):__ocfs2_claim_clusters:2565 ERROR: status = -30 [ 187.509596][ T7646] (syz.0.715,7646,0):ocfs2_local_alloc_new_window:1197 ERROR: status = -30 [ 187.509616][ T7646] (syz.0.715,7646,0):ocfs2_local_alloc_new_window:1222 ERROR: status = -30 [ 187.509636][ T7646] (syz.0.715,7646,0):ocfs2_local_alloc_slide_window:1296 ERROR: status = -30 [ 187.509786][ T7646] (syz.0.715,7646,0):ocfs2_local_alloc_slide_window:1315 ERROR: status = -30 [ 187.509806][ T7646] (syz.0.715,7646,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30 [ 187.509829][ T7646] (syz.0.715,7646,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 187.509849][ T7646] (syz.0.715,7646,0):ocfs2_reserve_clusters_with_limit:1266 ERROR: status = -30 [ 187.509880][ T7646] (syz.0.715,7646,0):ocfs2_reserve_clusters_with_limit:1315 ERROR: status = -30 [ 187.509901][ T7646] (syz.0.715,7646,0):ocfs2_symlink:1924 ERROR: status = -30 [ 187.511041][ T7646] (syz.0.715,7646,0):ocfs2_symlink:2078 ERROR: status = -30 [ 187.849554][ T5612] ocfs2: Unmounting device (7,0) on (node local) [ 188.003441][ T7391] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.003801][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.004054][ T7391] bridge_slave_0: entered allmulticast mode [ 188.007891][ T7391] bridge_slave_0: entered promiscuous mode [ 188.194837][ T7391] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.195183][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.196587][ T7391] bridge_slave_1: entered allmulticast mode [ 188.223627][ T7391] bridge_slave_1: entered promiscuous mode [ 189.078400][ T7391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.374109][ T7391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.784536][ T7673] loop3: detected capacity change from 0 to 32768 [ 189.797892][ T7692] loop2: detected capacity change from 0 to 32768 [ 189.879286][ T7692] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 189.908075][ T7692] JBD2: Ignoring recovery information on journal [ 190.037676][ T7692] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 190.154712][ T7692] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 190.154817][ T7692] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 190.154828][ T7692] OCFS2: File system is now read-only. [ 190.154843][ T7692] (syz.2.728,7692,0):ocfs2_search_chain:1913 ERROR: status = -30 [ 190.154865][ T7692] (syz.2.728,7692,0):ocfs2_search_chain:2036 ERROR: status = -30 [ 190.154893][ T7692] (syz.2.728,7692,0):ocfs2_claim_suballoc_bits:2123 ERROR: status = -30 [ 190.154913][ T7692] (syz.2.728,7692,0):ocfs2_claim_suballoc_bits:2176 ERROR: status = -30 [ 190.154933][ T7692] (syz.2.728,7692,0):__ocfs2_claim_clusters:2557 ERROR: status = -30 [ 190.154953][ T7692] (syz.2.728,7692,0):__ocfs2_claim_clusters:2565 ERROR: status = -30 [ 190.154972][ T7692] (syz.2.728,7692,0):ocfs2_local_alloc_new_window:1197 ERROR: status = -30 [ 190.154993][ T7692] (syz.2.728,7692,0):ocfs2_local_alloc_new_window:1222 ERROR: status = -30 [ 190.155013][ T7692] (syz.2.728,7692,0):ocfs2_local_alloc_slide_window:1296 ERROR: status = -30 [ 190.155163][ T7692] (syz.2.728,7692,0):ocfs2_local_alloc_slide_window:1315 ERROR: status = -30 [ 190.155184][ T7692] (syz.2.728,7692,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30 [ 190.155207][ T7692] (syz.2.728,7692,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 190.155248][ T7692] (syz.2.728,7692,0):ocfs2_reserve_clusters_with_limit:1266 ERROR: status = -30 [ 190.155281][ T7692] (syz.2.728,7692,0):ocfs2_reserve_clusters_with_limit:1315 ERROR: status = -30 [ 190.155302][ T7692] (syz.2.728,7692,0):ocfs2_symlink:1924 ERROR: status = -30 [ 190.155430][ T7692] (syz.2.728,7692,0):ocfs2_symlink:2078 ERROR: status = -30 [ 190.663833][ T5611] ocfs2: Unmounting device (7,2) on (node local) [ 190.741367][ T7709] TCP: TCP_TX_DELAY enabled [ 190.998429][ T7711] input: syz0 as /devices/virtual/input/input12 [ 191.498553][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 191.512804][ T7391] team0: Port device team_slave_0 added [ 191.607216][ T7391] team0: Port device team_slave_1 added [ 191.887946][ T7723] netlink: 52 bytes leftover after parsing attributes in process `syz.4.738'. [ 192.006978][ T7723] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.072464][ T7391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.072480][ T7391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.072505][ T7391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.237774][ T7736] loop3: detected capacity change from 0 to 128 [ 192.728401][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.750'. [ 192.728421][ T7749] IPv6: NLM_F_CREATE should be specified when creating new route [ 192.916499][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.984007][ T43] hsr_slave_0: left promiscuous mode [ 193.057273][ T43] hsr_slave_1: left promiscuous mode [ 193.137194][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.137345][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.208564][ T43] batman_adv: batadv0: Removing interface: ipvlan2 [ 193.277556][ T7768] program syz.2.758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.455453][ T37] audit: type=1326 audit(1778004740.695:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.3.760" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ae00cdd9 code=0x7ffc0000 [ 193.456471][ T37] audit: type=1326 audit(1778004740.695:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.3.760" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ae00cdd9 code=0x7ffc0000 [ 193.475643][ T37] audit: type=1326 audit(1778004740.715:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.3.760" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ae00cdd9 code=0x7ffc0000 [ 193.475688][ T37] audit: type=1326 audit(1778004740.715:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.3.760" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86ae00cdd9 code=0x7ffc0000 [ 193.475724][ T37] audit: type=1326 audit(1778004740.715:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.3.760" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ae00cdd9 code=0x7ffc0000 [ 193.475759][ T37] audit: type=1326 audit(1778004740.715:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.3.760" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ae00cdd9 code=0x7ffc0000 [ 193.478078][ T37] audit: type=1326 audit(1778004740.715:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.3.760" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ae00cdd9 code=0x7ffc0000 [ 193.485902][ T37] audit: type=1326 audit(1778004740.715:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.3.760" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ae00cdd9 code=0x7ffc0000 [ 193.485944][ T37] audit: type=1326 audit(1778004740.725:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.3.760" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ae00cdd9 code=0x7ffc0000 [ 193.486353][ T37] audit: type=1326 audit(1778004740.725:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7769 comm="syz.3.760" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f86ae00cdd9 code=0x7ffc0000 [ 193.722481][ T43] veth1_macvtap: left promiscuous mode [ 193.722823][ T43] veth0_macvtap: left promiscuous mode [ 193.726781][ T43] veth1_vlan: left promiscuous mode [ 193.727205][ T43] veth0_vlan: left promiscuous mode [ 193.776198][ T7775] loop5: detected capacity change from 0 to 7 [ 193.891994][ T7775] Dev loop5: unable to read RDB block 7 [ 193.892024][ T7775] loop5: AHDI p1 [ 193.892053][ T7775] loop5: partition table partially beyond EOD, truncated [ 194.190303][ T7765] loop0: detected capacity change from 0 to 32768 [ 194.194316][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.194412][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.253206][ T7765] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 194.284724][ T7786] loop2: detected capacity change from 0 to 16 [ 194.333557][ T7765] XFS (loop0): Ending clean mount [ 194.355753][ T7786] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 194.843265][ T5612] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 195.655988][ T7799] loop2: detected capacity change from 0 to 1024 [ 195.658625][ T7799] EXT4-fs: Ignoring removed orlov option [ 195.869347][ T7799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.889074][ T7799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.256727][ T5344] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 197.678795][ T5344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 197.678839][ T5344] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 197.678859][ T5344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.767228][ T5344] usb 3-1: config 0 descriptor?? [ 197.774145][ T7814] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.865359][ T5344] hid_parser_main: 17 callbacks suppressed [ 198.865380][ T5344] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 198.865406][ T5344] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 198.865428][ T5344] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 198.865451][ T5344] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 198.865474][ T5344] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 198.865497][ T5344] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 198.865520][ T5344] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 198.865543][ T5344] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 198.865566][ T5344] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 198.865589][ T5344] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 198.915019][ T5344] asus 0003:0B05:1ABE.0006: unbalanced collection at end of report description [ 198.915776][ T5344] asus 0003:0B05:1ABE.0006: Asus hid parse failed: -22 [ 198.915879][ T5344] asus 0003:0B05:1ABE.0006: probe with driver asus failed with error -22 [ 199.231566][ T5344] usb 3-1: USB disconnect, device number 7 [ 199.274746][ T43] team0 (unregistering): Port device team_slave_1 removed [ 199.585676][ T43] team0 (unregistering): Port device team_slave_0 removed [ 199.839553][ T7817] loop2: detected capacity change from 0 to 256 [ 199.860341][ T7817] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.937768][ T7391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.937783][ T7391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.937806][ T7391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.504948][ T55] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 200.635324][ T7391] hsr_slave_0: entered promiscuous mode [ 200.640558][ T7391] hsr_slave_1: entered promiscuous mode [ 200.689104][ T7831] loop4: detected capacity change from 0 to 128 [ 200.711764][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 200.748956][ T55] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.749008][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.749035][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 200.749056][ T55] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 200.749077][ T55] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.812816][ T55] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 200.812844][ T55] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 200.812863][ T55] usb 4-1: Manufacturer: syz [ 200.830778][ T7835] netlink: 36 bytes leftover after parsing attributes in process `syz.2.782'. [ 200.914728][ T55] usb 4-1: config 0 descriptor?? [ 201.305359][ T55] rc_core: IR keymap rc-hauppauge not found [ 201.305378][ T55] Registered IR keymap rc-empty [ 201.305523][ T55] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.326025][ T55] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.377648][ T55] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 201.380211][ T55] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 201.472806][ T55] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.481967][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 201.543491][ T55] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.554987][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 201.555020][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 201.602582][ T55] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.613661][ T55] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.615263][ T7848] loop2: detected capacity change from 0 to 1024 [ 201.632031][ T55] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.662041][ T55] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.691822][ T55] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.709277][ T55] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.731926][ T55] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.761849][ T55] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 201.905737][ T55] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 201.905760][ T55] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 202.182475][ T55] usb 4-1: USB disconnect, device number 7 [ 202.371317][ T7848] hfsplus: failed to load extents file [ 202.409944][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 202.409960][ T37] audit: type=1326 audit(1778004749.645:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.2.785" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2da5cdd9 code=0x7ffc0000 [ 202.451829][ T37] audit: type=1326 audit(1778004749.685:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.2.785" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2da5cdd9 code=0x7ffc0000 [ 202.452285][ T37] audit: type=1326 audit(1778004749.695:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.2.785" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2da5cdd9 code=0x7ffc0000 [ 202.452324][ T37] audit: type=1326 audit(1778004749.695:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.2.785" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2da5cdd9 code=0x7ffc0000 [ 202.452707][ T37] audit: type=1326 audit(1778004749.695:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.2.785" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f8d2da5cdd9 code=0x7ffc0000 [ 202.455915][ T37] audit: type=1326 audit(1778004749.695:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.2.785" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2da5cdd9 code=0x7ffc0000 [ 202.455953][ T37] audit: type=1326 audit(1778004749.695:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.2.785" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2da5cdd9 code=0x7ffc0000 [ 202.455986][ T37] audit: type=1326 audit(1778004749.695:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.2.785" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8d2da5cdd9 code=0x7ffc0000 [ 202.456020][ T37] audit: type=1326 audit(1778004749.695:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz.2.785" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8d2da5cdd9 code=0x7ffc0000 [ 202.508705][ T7860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.787'. [ 202.508726][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.787'. [ 202.562117][ T7861] netlink: 20 bytes leftover after parsing attributes in process `syz.4.787'. [ 202.562139][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.787'. [ 203.201538][ T7868] netlink: 56 bytes leftover after parsing attributes in process `syz.4.790'. [ 203.268507][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 203.350594][ T7874] program syz.4.793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.088628][ T7863] loop3: detected capacity change from 0 to 32768 [ 204.143715][ T5903] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 204.303615][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 204.305451][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.305481][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.305515][ T5903] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 204.305536][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.371555][ T5903] usb 3-1: config 0 descriptor?? [ 204.391125][ T5903] hub 3-1:0.0: USB hub found [ 204.659805][ T5903] hub 3-1:0.0: 1 port detected [ 205.437469][ T5903] usb 3-1: USB disconnect, device number 8 [ 205.741768][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 205.789618][ T7391] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 205.860195][ T7913] loop3: detected capacity change from 0 to 256 [ 205.891590][ T7391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.912529][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 205.937198][ T32] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 205.937227][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.937247][ T32] usb 1-1: Product: syz [ 205.937261][ T32] usb 1-1: Manufacturer: syz [ 205.937283][ T32] usb 1-1: SerialNumber: syz [ 205.945300][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 205.951277][ T7391] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 206.006651][ T32] usb 1-1: config 0 descriptor?? [ 206.118740][ T7391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 206.151941][ T7391] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 206.254693][ T32] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 206.361555][ T7391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 206.386368][ T7391] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 206.477593][ T37] audit: type=1326 audit(1778004753.665:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.4.809" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ab92cdd9 code=0x7ffc0000 [ 206.705503][ T32] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 206.771129][ T7391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 206.958953][ T32] usb 1-1: USB disconnect, device number 2 [ 207.381342][ T7391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.535163][ T7391] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.642909][ T2226] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.643281][ T2226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.744712][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.744812][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.366287][ T7968] loop2: detected capacity change from 0 to 256 [ 208.503802][ T7971] loop4: detected capacity change from 0 to 256 [ 208.754729][ T7971] FAT-fs (loop4): Directory bread(block 64) failed [ 208.754769][ T7971] FAT-fs (loop4): Directory bread(block 65) failed [ 208.754864][ T7971] FAT-fs (loop4): Directory bread(block 66) failed [ 208.754885][ T7971] FAT-fs (loop4): Directory bread(block 67) failed [ 208.754978][ T7971] FAT-fs (loop4): Directory bread(block 68) failed [ 208.754999][ T7971] FAT-fs (loop4): Directory bread(block 69) failed [ 208.755097][ T7971] FAT-fs (loop4): Directory bread(block 70) failed [ 208.755118][ T7971] FAT-fs (loop4): Directory bread(block 71) failed [ 208.755209][ T7971] FAT-fs (loop4): Directory bread(block 72) failed [ 208.755229][ T7971] FAT-fs (loop4): Directory bread(block 73) failed [ 209.520606][ T7986] ip6gre2: entered promiscuous mode [ 209.520631][ T7986] ip6gre2: entered allmulticast mode [ 209.712840][ T5629] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 209.803852][ T55] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 209.876064][ T5629] usb 1-1: unable to get BOS descriptor or descriptor too short [ 209.876637][ T5629] usb 1-1: not running at top speed; connect to a high speed hub [ 209.879981][ T5629] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 209.880009][ T5629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.880042][ T5629] usb 1-1: Product: syz [ 209.880056][ T5629] usb 1-1: Manufacturer: syz [ 209.880069][ T5629] usb 1-1: SerialNumber: syz [ 210.058170][ T55] usb 5-1: config 246 has an invalid interface number: 166 but max is 0 [ 210.058198][ T55] usb 5-1: config 246 has no interface number 0 [ 210.058242][ T55] usb 5-1: config 246 interface 166 altsetting 118 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 210.058269][ T55] usb 5-1: config 246 interface 166 altsetting 118 endpoint 0x8A has invalid wMaxPacketSize 0 [ 210.058291][ T55] usb 5-1: config 246 interface 166 has no altsetting 0 [ 210.103351][ T55] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 210.103379][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.103396][ T55] usb 5-1: Product: syz [ 210.103408][ T55] usb 5-1: Manufacturer: syz [ 210.103421][ T55] usb 5-1: SerialNumber: syz [ 210.179162][ T5629] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 210.402466][ T7391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.121670][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 315.121691][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8005 [ 315.121711][ C0] rcu: (detected by 0, t=10502 jiffies, g=24221, q=697 ncpus=2) [ 315.121729][ C0] task:syz.2.836 state:R running task stack:25880 pid:8005 tgid:8002 ppid:5611 task_flags:0x400040 flags:0x00080000 [ 315.121770][ C0] Call Trace: [ 315.121775][ C0] [ 315.121779][ C0] sched_show_task+0x4aa/0x5f0 [ 315.121799][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 315.121809][ C0] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 315.121826][ C0] ? wq_watchdog_touch+0x100/0x160 [ 315.121837][ C0] print_other_cpu_stall+0xfca/0x1380 [ 315.121855][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 315.121868][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 315.121889][ C0] rcu_sched_clock_irq+0x939/0x1050 [ 315.121902][ C0] update_process_times+0x234/0x2d0 [ 315.121917][ C0] tick_nohz_handler+0x42b/0x770 [ 315.121934][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 315.121950][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 315.121963][ C0] __hrtimer_run_queues+0x3bc/0xb10 [ 315.121983][ C0] hrtimer_interrupt+0x455/0x950 [ 315.122006][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 315.122021][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 315.122032][ C0] [ 315.122035][ C0] [ 315.122039][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 315.122050][ C0] RIP: 0010:arch_stack_walk+0x7e/0x150 [ 315.122066][ C0] Code: 65 48 8b 05 ac 36 02 11 49 39 c4 74 0a 49 8b 8c 24 38 19 00 00 eb 03 48 89 e9 48 c7 45 d0 00 00 00 00 48 c7 45 c8 00 00 00 00 <48> c7 45 c0 00 00 00 00 48 c7 45 b8 00 00 00 00 48 c7 45 b0 00 00 [ 315.122074][ C0] RSP: 0018:ffffc90006776dc8 EFLAGS: 00000246 [ 315.122086][ C0] RAX: ffff8880217abd80 RBX: ffffc90006776e80 RCX: ffffc90006776e50 [ 315.122093][ C0] RDX: ffff8880217abd80 RSI: ffffc90006776e80 RDI: ffffffff81afbe80 [ 315.122099][ C0] RBP: ffffc90006776e50 R08: dffffc0000000000 R09: 0000000000000000 [ 315.122105][ C0] R10: ffffc90006776f00 R11: fffffbfff1f152df R12: ffff8880217abd80 [ 315.122111][ C0] R13: 0000000000000000 R14: ffffffff81afbe80 R15: 0000000000000000 [ 315.122118][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 315.122134][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 315.122148][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 315.122161][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 315.122175][ C0] ? kernel_text_address+0xa5/0xe0 [ 315.122186][ C0] stack_trace_save+0xa9/0x100 [ 315.122197][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 315.122209][ C0] ? __lock_acquire+0x6b5/0x2d10 [ 315.122225][ C0] kasan_save_track+0x3e/0x80 [ 315.122260][ C0] kasan_save_free_info+0x46/0x50 [ 315.122269][ C0] __kasan_slab_free+0x5c/0x80 [ 315.122280][ C0] kfree+0x1c5/0x6c0 [ 315.122290][ C0] ? skb_release_data+0x828/0xa60 [ 315.122302][ C0] skb_release_data+0x828/0xa60 [ 315.122315][ C0] __kfree_skb+0x5d/0x210 [ 315.122331][ C0] __tcf_kfree_skb_list+0x14b/0x300 [ 315.122348][ C0] __dev_queue_xmit+0x202f/0x3900 [ 315.122358][ C0] ? kasan_save_track+0x3e/0x80 [ 315.122366][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 315.122376][ C0] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 315.122389][ C0] ? __sys_bpf+0x643/0x950 [ 315.122400][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 315.122415][ C0] ? __dev_queue_xmit+0x2b3/0x3900 [ 315.122432][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 315.122450][ C0] ? rcu_is_watching+0x15/0xb0 [ 315.122460][ C0] ? skb_release_data+0x2de/0xa60 [ 315.122474][ C0] __bpf_redirect+0xcfb/0x13c0 [ 315.122492][ C0] bpf_clone_redirect+0x313/0x4b0 [ 315.122508][ C0] ? bpf_test_run+0x1d1/0x830 [ 315.122525][ C0] bpf_prog_1939c40fbf65037b+0x5f/0x68 [ 315.122543][ C0] ? sched_clock_cpu+0x74/0x440 [ 315.122556][ C0] ? sched_balance_domains+0xf9/0x900 [ 315.122565][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 315.122575][ C0] ? sched_balance_domains+0x7ea/0x900 [ 315.122585][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 315.122597][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 315.122608][ C0] ? __local_bh_enable+0x1e1/0x2f0 [ 315.122619][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 315.122629][ C0] ? rcu_is_watching+0x15/0xb0 [ 315.122637][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 315.122647][ C0] ? bpf_test_timer_continue+0x10c/0x320 [ 315.122658][ C0] bpf_test_run+0x354/0x830 [ 315.122680][ C0] ? __pfx_bpf_test_run+0x10/0x10 [ 315.122700][ C0] ? eth_type_trans+0x348/0x7e0 [ 315.122713][ C0] ? convert___skb_to_skb+0x3d/0x5b0 [ 315.122727][ C0] bpf_prog_test_run_skb+0xe2c/0x2260 [ 315.122749][ C0] ? __fget_files+0x3a6/0x420 [ 315.122758][ C0] ? __fget_files+0x2a/0x420 [ 315.122770][ C0] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 315.122783][ C0] bpf_prog_test_run+0x2cd/0x340 [ 315.122797][ C0] __sys_bpf+0x643/0x950 [ 315.122810][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 315.122820][ C0] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 315.122842][ C0] ? rcu_is_watching+0x15/0xb0 [ 315.122854][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.122863][ C0] __x64_sys_bpf+0x7c/0x90 [ 315.122874][ C0] do_syscall_64+0x15f/0xf80 [ 315.122883][ C0] ? trace_irq_disable+0x3b/0x140 [ 315.122895][ C0] ? clear_bhb_loop+0x40/0x90 [ 315.122906][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.122915][ C0] RIP: 0033:0x7f8d2da5cdd9 [ 315.122925][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.122933][ C0] RSP: 002b:00007f8d2bc95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 315.122941][ C0] RAX: ffffffffffffffda RBX: 00007f8d2dcd6090 RCX: 00007f8d2da5cdd9 [ 315.122948][ C0] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a [ 315.122953][ C0] RBP: 00007f8d2daf2d69 R08: 0000000000000000 R09: 0000000000000000 [ 315.122958][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.122964][ C0] R13: 00007f8d2dcd6128 R14: 00007f8d2dcd6090 R15: 00007ffd3983cbe8 [ 315.122978][ C0] [ 315.122986][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10445 jiffies! g24221 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 315.122997][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=10443 [ 315.123002][ C0] rcu: rcu_preempt kthread starved for 10446 jiffies! g24221 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 315.123011][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 315.123016][ C0] rcu: RCU grace-period kthread stack dump: [ 315.123019][ C0] task:rcu_preempt state:I stack:26920 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 315.123046][ C0] Call Trace: [ 315.123049][ C0] [ 315.123054][ C0] __schedule+0x169e/0x54f0 [ 315.123073][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 315.123094][ C0] ? __pfx___schedule+0x10/0x10 [ 315.123107][ C0] ? schedule+0x90/0x360 [ 315.123116][ C0] schedule+0x164/0x360 [ 315.123126][ C0] schedule_timeout+0x158/0x2c0 [ 315.123137][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 315.123146][ C0] ? __pfx_process_timeout+0x10/0x10 [ 315.123159][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 315.123168][ C0] ? prepare_to_swait_event+0x340/0x370 [ 315.123183][ C0] rcu_gp_fqs_loop+0x312/0x11b0 [ 315.123202][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 315.123215][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 315.123226][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 315.123238][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 315.123249][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 315.123263][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 315.123274][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 315.123284][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 315.123296][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 315.123309][ C0] kthread+0x388/0x470 [ 315.123322][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 315.123333][ C0] ? __pfx_kthread+0x10/0x10 [ 315.123346][ C0] ret_from_fork+0x514/0xb70 [ 315.123359][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 315.123370][ C0] ? __switch_to+0xc79/0x1410 [ 315.123381][ C0] ? __pfx_kthread+0x10/0x10 [ 315.123393][ C0] ret_from_fork_asm+0x1a/0x30 [ 315.123414][ C0] [ 315.123417][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 315.123429][ C0] Sending NMI from CPU 0 to CPUs 1: [ 315.123466][ C1] NMI backtrace for cpu 1 [ 315.123485][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 315.123530][ C1] Tainted: [L]=SOFTLOCKUP [ 315.123536][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 315.123544][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 315.123561][ C1] Code: 4b 65 02 e9 03 cc 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 bb 21 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 315.123573][ C1] RSP: 0018:ffffc900001e7e20 EFLAGS: 00000242 [ 315.123585][ C1] RAX: 000000000003ec0d RBX: ffffffff81996aea RCX: 0000000080000001 [ 315.123596][ C1] RDX: 0000000000000001 RSI: ffffffff8d624e13 RDI: ffffffff8ba86860 [ 315.123607][ C1] RBP: ffffc900001e7f10 R08: ffff8880b8733e9b R09: 1ffff110170e67d3 [ 315.123618][ C1] R10: dffffc0000000000 R11: ffffed10170e67d4 R12: 0000000000000001 [ 315.123629][ C1] R13: 1ffff11003b50b88 R14: 0000000000000001 R15: 1ffff11003b50b88 [ 315.123639][ C1] FS: 0000000000000000(0000) GS:ffff888126025000(0000) knlGS:0000000000000000 [ 315.123652][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.123662][ C1] CR2: 00007fc2dca47221 CR3: 0000000024ea2000 CR4: 00000000003526f0 [ 315.123680][ C1] Call Trace: [ 315.123686][ C1] [ 315.123691][ C1] default_idle+0x9/0x20 [ 315.123708][ C1] default_idle_call+0x72/0xb0 [ 315.123726][ C1] do_idle+0x36a/0x5f0 [ 315.123744][ C1] ? __pfx_do_idle+0x10/0x10 [ 315.123764][ C1] cpu_startup_entry+0x43/0x60 [ 315.123779][ C1] start_secondary+0x101/0x110 [ 315.123795][ C1] common_startup_64+0x13e/0x147 [ 315.123824][ C1] [ 315.378227][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 315.502079][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.502220][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.556613][ T5629] gp8psk: usb out operation failed. [ 315.556631][ T5629] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 315.556666][ T5629] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 315.751198][ T55] usb 5-1: Cannot retrieve CPort count: -110 [ 315.751244][ T55] usb 5-1: Cannot retrieve CPort count: -110 [ 315.751281][ T55] es2_ap_driver 5-1:246.166: probe with driver es2_ap_driver failed with error -110 [ 317.796973][ T4928] Bluetooth: hci0: command 0x0406 tx timeout [ 321.995317][ T5629] usb 1-1: USB disconnect, device number 3 [ 322.162080][ T55] usb 5-1: USB disconnect, device number 8 SYZFAIL: failed to send rpc fd=3 want=29064 sent=0 n=-1 (errno 32: Broken pipe)