last executing test programs: 2m10.914605446s ago: executing program 2 (id=80): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44094}, 0x20000000) 2m10.789504029s ago: executing program 2 (id=81): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000005c0), 0x924924924924c31, 0x3ec0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x5, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000399000/0x1000)=nil, 0x1000, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000380)=""/2, 0x2, 0x0, 0x8}}, 0x120) readv(r4, &(0x7f0000000400)=[{&(0x7f0000000440)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r4, &(0x7f0000000500), 0x4) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 2m9.459707622s ago: executing program 2 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0xb2) write(r4, &(0x7f0000000140)='prev_state.func', 0xf) 2m8.093017055s ago: executing program 2 (id=87): pipe2$9p(&(0x7f0000000040), 0x800) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x4, &(0x7f0000000100), 0x0, 0x24f, &(0x7f00000006c0)="$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") mount$bind(&(0x7f0000000c00)='.\x00', &(0x7f0000000c40)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$tmpfs(0x0, &(0x7f0000000c80)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000cc0)='.\x00', &(0x7f0000000d00)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 2m6.67039377s ago: executing program 2 (id=98): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf2501000000060006004e200000140002007767320000000000000000000000000024000300a0cb879a47f509004c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000100000008000500"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 2m4.692355479s ago: executing program 2 (id=113): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000240), 0x26, 0x75d, &(0x7f0000019580)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x5a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000019d80), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000019dc0)='./file0\x00', &(0x7f000001a0c0), 0x10000, &(0x7f000001a100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) ppoll(&(0x7f000001a180)=[{r0, 0xc148}], 0x1, 0x0, 0x0, 0x0) 2m4.557574352s ago: executing program 32 (id=113): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000240), 0x26, 0x75d, &(0x7f0000019580)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x5a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000019d80), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000019dc0)='./file0\x00', &(0x7f000001a0c0), 0x10000, &(0x7f000001a100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) ppoll(&(0x7f000001a180)=[{r0, 0xc148}], 0x1, 0x0, 0x0, 0x0) 7.146958184s ago: executing program 5 (id=982): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 6.955560779s ago: executing program 5 (id=988): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xd, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x1, 0x1, '\x00'}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000200), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) 4.033281371s ago: executing program 4 (id=1027): prlimit64(0x0, 0xe, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000000)) 3.471628795s ago: executing program 5 (id=1030): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0xf2) 3.24303388s ago: executing program 5 (id=1032): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x2, {{0xa, 0x1, 0x1, @local}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000000000000a004e24000019c3ff0100000000000000000000000000010100"/68], 0x90) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x794, 0x4e23, 0x7, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d6, 0x6c}, @in6=@loopback, {0x4, 0x192, 0x6, 0xffff, 0x3, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfe, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES8=r2, @ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES32], 0x138}, 0x1, 0x0, 0x0, 0x48805}, 0x4000004) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x9, 0x3, 0x0, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x20000080) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) 3.196552252s ago: executing program 4 (id=1035): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000000)) 2.734776483s ago: executing program 5 (id=1041): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 2.474519159s ago: executing program 1 (id=1050): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000005c0), 0x924924924924c31, 0x3ec0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000399000/0x1000)=nil, 0x1000, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000380)=""/2, 0x2, 0x0, 0x8}}, 0x120) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000440)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r3, &(0x7f0000000500), 0x4) 2.42638898s ago: executing program 1 (id=1053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000500)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) 2.353869702s ago: executing program 1 (id=1054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xb, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0xeeef0000, 0x3, 0x1, 0x7, 0x0, [{0x4, 0x4, 0x1, '\x00', 0x4}, {0xe, 0x0, 0x2, '\x00', 0x4}, {0x7, 0x5, 0x2, '\x00', 0x5}, {0x5, 0x0, 0x3, '\x00', 0x60}, {0x0, 0xcf, 0x6, '\x00', 0x8}, {0x40, 0x6, 0x2, '\x00', 0x37}, {0x0, 0x4, 0x0, '\x00', 0x2}, {0x7, 0x0, 0xf, '\x00', 0x8}, {0x0, 0xa, 0x8, '\x00', 0x2}, {0x2, 0x3, 0x78, '\x00', 0x8}, {0x1, 0x2, 0x3, '\x00', 0x3}, {0x6, 0xd4, 0x2, '\x00', 0x2}, {0x2, 0xd, 0x9f, '\x00', 0x8}, {0x7, 0x3, 0xf, '\x00', 0x8}, {0x25, 0x33, 0x1, '\x00', 0x5}, {0x9, 0x3, 0x40, '\x00', 0x4}, {0xc, 0x0, 0x2, '\x00', 0x3}, {0x81, 0x1, 0xff, '\x00', 0xdf}, {0x7, 0x52, 0xfe}, {0x8, 0x9, 0x2, '\x00', 0x8}, {0x6, 0x9, 0x34, '\x00', 0x5}, {0x7, 0x0, 0xb6, '\x00', 0x7}, {0x5, 0x0, 0x6, '\x00', 0x3}, {0x2, 0x2, 0xe3, '\x00', 0x9}]}}) 2.277865944s ago: executing program 1 (id=1056): unshare(0x60000600) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000a00), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) ppoll(&(0x7f0000000a40)=[{r0, 0x80}], 0x1, 0x0, 0x0, 0x0) 1.876512204s ago: executing program 4 (id=1058): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) fsopen(0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1e, 0x1, @empty, 0x20002}, 0x23) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0, 0xfffffffffffffe3c}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.454122285s ago: executing program 3 (id=1063): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000005c0), 0x924924924924c31, 0x3ec0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000399000/0x1000)=nil, 0x1000, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000380)=""/2, 0x2, 0x0, 0x8}}, 0x120) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000440)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r3, &(0x7f0000000500), 0x4) 1.398559776s ago: executing program 4 (id=1064): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x180) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write(r0, &(0x7f0000000340)="dad0", 0x2) 1.394314806s ago: executing program 3 (id=1066): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.374568257s ago: executing program 4 (id=1067): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x80) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x29414fdd1d35f159, &(0x7f0000000040), &(0x7f00000000c0)=0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getrusage(0x1, &(0x7f0000003ec0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) syz_open_dev$tty20(0xc, 0x4, 0x0) 1.318521068s ago: executing program 0 (id=1068): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "0000000000000003", "2bb88e4342d4d7e5a176dd28846cc7382d200d898a3a2f17d566d7d670dc1ec5", 'Jb\aJ', "e901000000182c00"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="c62e", 0x2, 0x8040, 0x0, 0x0) 1.318324848s ago: executing program 3 (id=1069): close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82f41, 0x0) socket(0xa, 0x2400000001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x4, '\x00', {0xc, 0x6, "9fcb9d", 0x8, 0x0, 0xff, @empty, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}}}, 0x6a) 1.153615522s ago: executing program 3 (id=1070): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x4000000000000009, 0x1e0341) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) 1.126762753s ago: executing program 3 (id=1071): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000380), &(0x7f0000002580)='./file0\x00', 0x400, &(0x7f00000025c0)=ANY=[], 0x0, 0x1cc, &(0x7f00000046c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000004900)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004940)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000004980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000049c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000004a00)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000004a80), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004b00)=0x6) semget(0x1, 0x5, 0x6b4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000004b40)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000004b80)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000004bc0), 0x0, 0x44044) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000004c00)=@req3={0x3, 0x2, 0xb290, 0x5, 0x7, 0x8, 0xfffffffa}, 0x1) 1.078578514s ago: executing program 0 (id=1072): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.078349814s ago: executing program 0 (id=1073): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="7a0af8ff7525757cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c80000040000000000b1a297cfddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1ae9f2cfe401dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd853eb3f12225bfcca581f04f317c8301b43267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4800b3c26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692f01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f7e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c662003"], &(0x7f0000002040)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002080)={r0, 0x2800000002000000, 0xd, 0x55, &(0x7f0000002100)="a06ad876d56a0064d082778c39", &(0x7f0000002140)=""/85, 0x600, 0x4000000, 0x0, 0x0, &(0x7f00000021c0), &(0x7f0000002200)}, 0x50) 1.026410735s ago: executing program 0 (id=1074): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x1ff) mount(&(0x7f0000000000)=@sg0, &(0x7f00000004c0)='./trace\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./trace/trace\x00', 0x0, 0x0) read(r5, &(0x7f00000005c0), 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000640)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/custom0\x00', 0x6, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe2500"}, 0xd8) bind$inet6(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000380)=[{&(0x7f00000005c0)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x8001}, 0xa) 600.314665ms ago: executing program 1 (id=1075): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xa, 0xa882) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000740), 0x8f, 0x4042) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000780)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x1, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab789f3a47a42fb0286100ac27ca64c6a4b4e00d9683dda1af01000000def712001000000000000000000000000008000000000000000000000000ed00", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000100020000000800000000faffffff00", "e7460000102000000000e44400000020e40000008bd02800", [0xde, 0x5]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 128.432917ms ago: executing program 3 (id=1076): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x84) pwrite64(r2, &(0x7f0000000000)='2', 0x1, 0x84fed0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x35) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x4000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x2) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x24, &(0x7f0000000140)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0xc0085508, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200778931215d064f6e4196ff6e69311c3cb3a5c0e6033d926e02ac69bb3c7d9f4d1d82e6b30c9a5bf151d915901eff348a3493d3502496eddcf9ee2e6c8d51c417e0f3c4e73c29ef987fef6f328370b16d7c4e7f0a08590151b7f4654ad560a5a36f1978dd7414d966376d97429b7c31058f2614fe11602a875267821490b44e273fa648167c981d2728ab61b0eede1083a1df56bf91fc22a963e2ceefdb141d5c3c9adf3d2b42b1debf530e620fa9be00a292247ac05addb62e1c0a9f0697425950a29fa12746442c9e158db5cda85ea84c7c91e00333c6ac136161a3047ed6a9bb16583dcb8ac18091", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRESDEC=r5, @ANYBLOB="0000000002000020b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x41100, 0x5}, 0x94) write(0xffffffffffffffff, &(0x7f0000000340)='!Hm', 0x3) close(0x3) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x0, 0x238, 0xfeffffff, 0x0, 0x0, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x3, @broadcast, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x220}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @dev, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@devgroup={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x2, 0x9}}) 71.986028ms ago: executing program 0 (id=1077): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ppoll(&(0x7f0000000080)=[{r0, 0x112}], 0x1, &(0x7f0000000100), 0x0, 0x0) 71.702208ms ago: executing program 5 (id=1078): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt/trace_marker\x00', 0x1, 0x5a) write(r0, &(0x7f0000000100)="2d25c873c6d0ff57318d8185a94d488b38f0fcd9", 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f0000002200)=""/16384, 0x4000) 71.602518ms ago: executing program 1 (id=1079): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x7, 0x8000, 0x1, 0x4, 0x3, 0xa7, 0x1000}, 0xc) 20.44191ms ago: executing program 0 (id=1080): openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x322c2, 0x95) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8414, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000940)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1081): setns(0xc9, 0x0) socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0xa8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000640)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x5420, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000001a40)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000001b00)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) write$sndseq(0xffffffffffffffff, &(0x7f0000001bc0)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r5 = gettid() r6 = syz_open_dev$sndctrl(&(0x7f00000005c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000001780)={{0xfffffffe, 0x0, 0x6, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, r5, 0x0, 0x800000, 'syz1\x00', 0x0}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000540)={0x7}, 0x8) kernel console output (not intermixed with test programs): T4187] device veth0_macvtap entered promiscuous mode [ 65.529142][ T4187] device veth1_macvtap entered promiscuous mode [ 65.543081][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.553342][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.561911][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.572502][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.581072][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.590813][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.599628][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.621016][ T4198] device veth0_macvtap entered promiscuous mode [ 65.640276][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.648007][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.657978][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.667487][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.678721][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.686472][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.694286][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.702778][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.712138][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.727591][ T4198] device veth1_macvtap entered promiscuous mode [ 65.738576][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.749114][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.760332][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.772641][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.781528][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.790539][ T1340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.806405][ T4193] device veth0_macvtap entered promiscuous mode [ 65.827047][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.836566][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.845617][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.856615][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.871576][ T4193] device veth1_macvtap entered promiscuous mode [ 65.887720][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.899258][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.913118][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.943242][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.956841][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.967381][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.977974][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.991795][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.004000][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.012237][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.021521][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.030271][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.039788][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.048539][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.057272][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.067239][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.077769][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.088400][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.102034][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.119260][ T4186] device veth0_macvtap entered promiscuous mode [ 66.132875][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.143502][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.155473][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.166194][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.177579][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.185679][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.194040][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.202556][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.211382][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.220237][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.229498][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.238575][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.250215][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.259683][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.268702][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.277706][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.302062][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.312567][ T4261] Bluetooth: hci3: command 0x040f tx timeout [ 66.319083][ T4261] Bluetooth: hci1: command 0x040f tx timeout [ 66.325818][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.333883][ T4261] Bluetooth: hci0: command 0x040f tx timeout [ 66.339743][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.350319][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.374370][ T4186] device veth1_macvtap entered promiscuous mode [ 66.384434][ T4261] Bluetooth: hci4: command 0x040f tx timeout [ 66.390576][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 66.420735][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.432165][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.441161][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.450454][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.458377][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.472684][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.481807][ T4197] device veth0_vlan entered promiscuous mode [ 66.485605][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.512113][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.539854][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.551003][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.563229][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.574619][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.584693][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.595166][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.606825][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.635446][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.645896][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.655633][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.666866][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.676901][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.687390][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.697269][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.708056][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.719220][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.734948][ T1209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.742791][ T1209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.757481][ T4197] device veth1_vlan entered promiscuous mode [ 66.771910][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.780631][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.795926][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.805994][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.818288][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.827199][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.837158][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.845982][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.883206][ T4197] device veth0_macvtap entered promiscuous mode [ 66.920380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.931381][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.941001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.949918][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.960783][ T4197] device veth1_macvtap entered promiscuous mode [ 66.995242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.005393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.014879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.036253][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.050020][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.102607][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.121103][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.141578][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.152360][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.168323][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.169220][ T4302] loop4: detected capacity change from 0 to 1024 [ 67.179272][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.196893][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.209965][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.221429][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.237889][ T4302] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 67.247891][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.248684][ T4302] EXT4-fs (loop4): Ignoring removed bh option [ 67.269738][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.275196][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.277878][ T1209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.293431][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.303036][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.309270][ T1209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.310749][ T4302] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e001c01c, mo2=0002] [ 67.320598][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.336230][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.344765][ T4302] System zones: 0-1, 3-36 [ 67.352682][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.361644][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.369632][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.399332][ T4302] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,max_dir_size_kb=0x0000000000000000,mblk_io_submit,debug,bh,bsddf,acl,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 67.399377][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.432384][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.442552][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.453157][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.463360][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.474311][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.484383][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.494910][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.510600][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.553247][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.570922][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.581810][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.591723][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.603701][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.613651][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.640412][ T1209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.692595][ T1209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.712941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.798452][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.818491][ T4318] loop1: detected capacity change from 0 to 256 [ 67.829745][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.870154][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.884567][ T4318] exfat: Deprecated parameter 'utf8' [ 67.890737][ T4318] exfat: Deprecated parameter 'utf8' [ 67.919158][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.967892][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.967888][ T4318] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x30348f56, utbl_chksum : 0xe619d30d) [ 68.003117][ T4322] loop4: detected capacity change from 0 to 2048 [ 68.011824][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.059594][ T4322] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 68.121274][ T4322] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.123504][ T4318] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 68.236764][ T4333] loop2: detected capacity change from 0 to 512 [ 68.342726][ T4333] EXT4-fs (loop2): 1 truncate cleaned up [ 68.349172][ T4333] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 68.365324][ T4336] loop1: detected capacity change from 0 to 512 [ 68.379477][ T4336] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.396425][ T1110] Bluetooth: hci0: command 0x0419 tx timeout [ 68.405322][ T1110] Bluetooth: hci1: command 0x0419 tx timeout [ 68.411618][ T1110] Bluetooth: hci3: command 0x0419 tx timeout [ 68.441714][ T4333] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.13: bg 0: block 465: padding at end of block bitmap is not set [ 68.459042][ T4336] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.469340][ T4333] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 68.469523][ T4333] EXT4-fs (loop2): This should not happen!! Data will be lost [ 68.469523][ T4333] [ 68.469539][ T4333] EXT4-fs (loop2): Total free blocks count 0 [ 68.469552][ T4333] EXT4-fs (loop2): Free/Dirty block details [ 68.469585][ T4333] EXT4-fs (loop2): free_blocks=0 [ 68.469627][ T4333] EXT4-fs (loop2): dirty_blocks=2 [ 68.469639][ T4333] EXT4-fs (loop2): Block reservation details [ 68.469651][ T4333] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 68.530887][ T1110] Bluetooth: hci2: command 0x0419 tx timeout [ 68.543209][ T4333] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 68.563483][ T1110] Bluetooth: hci4: command 0x0419 tx timeout [ 68.573651][ T4333] EXT4-fs (loop2): This should not happen!! Data will be lost [ 68.573651][ T4333] [ 68.640690][ T4336] EXT4-fs (loop1): 1 truncate cleaned up [ 68.652437][ T4336] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 68.833883][ T1107] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.983542][ T4356] loop0: detected capacity change from 0 to 1024 [ 69.020401][ T4356] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.064347][ T4363] loop4: detected capacity change from 0 to 256 [ 69.078666][ T4363] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.096964][ T4363] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 69.129425][ T4363] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 69.171911][ T26] audit: type=1800 audit(1792059197.153:2): pid=4363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.23" name="file1" dev="loop4" ino=1048625 res=0 errno=0 [ 69.207662][ T1107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.226713][ T26] audit: type=1800 audit(1792059197.213:3): pid=4363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.23" name="file1" dev="loop4" ino=1048625 res=0 errno=0 [ 69.227353][ T1107] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 69.315854][ T1107] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 69.354327][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.392105][ T1107] usb 4-1: config 0 descriptor?? [ 69.493422][ T4371] loop0: detected capacity change from 0 to 256 [ 69.508265][ T4371] ======================================================= [ 69.508265][ T4371] WARNING: The mand mount option has been deprecated and [ 69.508265][ T4371] and is ignored by this kernel. Remove the mand [ 69.508265][ T4371] option from the mount to silence this warning. [ 69.508265][ T4371] ======================================================= [ 69.550196][ T4371] exfat: Bad value for 'uid' [ 69.601395][ T4376] loop4: detected capacity change from 0 to 512 [ 69.662477][ T4376] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.734715][ T4376] EXT4-fs (loop4): 1 truncate cleaned up [ 69.740400][ T4376] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 69.838618][ T4387] FAULT_INJECTION: forcing a failure. [ 69.838618][ T4387] name failslab, interval 1, probability 0, space 0, times 1 [ 69.853575][ T4387] CPU: 1 PID: 4387 Comm: syz.2.32 Not tainted syzkaller #0 [ 69.862642][ T4387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.872726][ T4387] Call Trace: [ 69.876033][ T4387] [ 69.878975][ T4387] dump_stack_lvl+0x188/0x250 [ 69.883714][ T4387] ? show_regs_print_info+0x20/0x20 [ 69.888932][ T4387] ? load_image+0x410/0x410 [ 69.893642][ T4387] ? __lock_acquire+0x7d40/0x7d40 [ 69.899349][ T4387] should_fail+0x383/0x4b0 [ 69.903801][ T4387] should_failslab+0x5/0x20 [ 69.908695][ T4387] slab_pre_alloc_hook+0x51/0xc0 [ 69.913771][ T4387] __kmalloc_node+0x6d/0x3a0 [ 69.918388][ T4387] ? kvmalloc_node+0x84/0x130 [ 69.923092][ T4387] kvmalloc_node+0x84/0x130 [ 69.927611][ T4387] alloc_fdtable+0x169/0x2c0 [ 69.932251][ T4387] dup_fd+0x982/0xc70 [ 69.936255][ T4387] __close_range+0x194/0x510 [ 69.940858][ T4387] ? pick_file+0x220/0x220 [ 69.945374][ T4387] __x64_sys_close_range+0x76/0x80 [ 69.950667][ T4387] do_syscall_64+0x4c/0xa0 [ 69.955098][ T4387] ? clear_bhb_loop+0x30/0x80 [ 69.959798][ T4387] ? clear_bhb_loop+0x30/0x80 [ 69.965016][ T4387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.970933][ T4387] RIP: 0033:0x7f71a62f1559 [ 69.975342][ T4387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.994941][ T4387] RSP: 002b:00007f71a4549028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 70.003345][ T4387] RAX: ffffffffffffffda RBX: 00007f71a6578fa0 RCX: 00007f71a62f1559 [ 70.011312][ T4387] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 70.019396][ T4387] RBP: 00007f71a63888b0 R08: 0000000000000000 R09: 0000000000000000 [ 70.027502][ T4387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.035465][ T4387] R13: 00007f71a6579038 R14: 00007f71a6578fa0 R15: 00007ffd7682a9c8 [ 70.043442][ T4387] [ 70.055101][ T4259] usb 4-1: USB disconnect, device number 2 [ 70.101583][ T4390] loop0: detected capacity change from 0 to 1024 [ 70.181209][ T4390] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.263154][ T4390] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.393489][ T4392] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.446591][ T4392] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.518593][ T4392] EXT4-fs (loop2): shut down requested (0) [ 70.629978][ T4259] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 70.950457][ T4417] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 71.050982][ T4417] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.42: invalid indirect mapped block 256 (level 1) [ 71.126691][ T4417] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.42: invalid indirect mapped block 2683928664 (level 1) [ 71.150084][ T4417] EXT4-fs (loop2): 1 truncate cleaned up [ 71.183618][ T4417] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 71.247106][ T4430] SQUASHFS error: zlib decompression failed, data probably corrupt [ 71.261949][ T4430] SQUASHFS error: Failed to read block 0x9b: -5 [ 71.273015][ T4430] SQUASHFS error: Unable to read metadata cache entry [99] [ 71.331670][ T4430] SQUASHFS error: Unable to read inode 0x127 [ 71.348834][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.355514][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.362705][ T4259] usb 5-1: not running at top speed; connect to a high speed hub [ 71.971547][ T4259] usb 5-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 71.982493][ T4259] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 71.993709][ T4259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.014056][ T4435] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.058508][ T4259] usb 5-1: Found UVC 1.00 device (046d:0825) [ 72.073499][ T4435] EXT4-fs (loop3): 1 truncate cleaned up [ 72.093858][ T4435] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 72.102765][ T4259] usb 5-1: No streaming interface found for terminal 2. [ 72.250429][ T4444] set_capacity_and_notify: 4 callbacks suppressed [ 72.250447][ T4444] loop2: detected capacity change from 0 to 512 [ 72.289784][ T4444] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.332397][ T4444] EXT4-fs (loop2): 1 truncate cleaned up [ 72.370424][ T4216] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.423282][ T4444] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 72.675078][ T4216] usb 5-1: USB disconnect, device number 2 [ 73.383590][ T4467] loop4: detected capacity change from 0 to 512 [ 73.467827][ T4467] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 73.651968][ T4472] loop2: detected capacity change from 0 to 1764 [ 73.659944][ T4467] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003e01c, mo2=0002] [ 73.703000][ T4467] System zones: 1-12 [ 73.774972][ T4467] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33261: comm syz.4.54: invalid block [ 73.921738][ T4467] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.54: invalid indirect mapped block 8 (level 2) [ 74.069228][ T4480] netlink: 'syz.1.56': attribute type 3 has an invalid length. [ 74.082689][ T4467] EXT4-fs (loop4): 1 truncate cleaned up [ 74.103893][ T4467] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nojournal_checksum,nomblk_io_submit,data_err=ignore,max_batch_time=0x0000000000000001,nodelalloc,noauto_da_alloc,,errors=continue. Quota mode: none. [ 74.175903][ T4482] loop2: detected capacity change from 0 to 128 [ 74.252639][ T4482] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.535736][ T4493] loop2: detected capacity change from 0 to 512 [ 74.683956][ T4493] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 74.744517][ T4493] EXT4-fs (loop2): 1 truncate cleaned up [ 74.750197][ T4493] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 75.454523][ T4509] loop4: detected capacity change from 0 to 512 [ 75.622071][ T4509] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.441875][ T4509] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.487853][ T4509] EXT4-fs (loop4): shut down requested (0) [ 76.578575][ T4522] loop2: detected capacity change from 0 to 512 [ 76.650910][ T4522] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.745775][ T4522] EXT4-fs (loop2): 1 truncate cleaned up [ 76.751456][ T4522] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 76.853825][ T1107] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 77.584778][ T4543] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4193] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4543] [ 77.694006][ T1107] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 77.707928][ T1107] usb 1-1: config 0 has no interface number 0 [ 77.754195][ T4540] Zero length message leads to an empty skb [ 77.934105][ T1107] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 77.965244][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.022808][ T1107] usb 1-1: Product: syz [ 78.046047][ T1107] usb 1-1: Manufacturer: syz [ 78.050690][ T1107] usb 1-1: SerialNumber: syz [ 78.102036][ T1107] usb 1-1: config 0 descriptor?? [ 78.393792][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 78.413795][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 78.423787][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 78.433787][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 78.443779][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 78.453779][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 78.463779][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 78.473780][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 78.483800][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.493780][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.867049][ T4557] loop2: detected capacity change from 0 to 512 [ 79.096056][ T4557] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.122841][ T4557] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.163119][ T4557] EXT4-fs (loop2): shut down requested (0) [ 79.213773][ T4566] loop4: detected capacity change from 0 to 128 [ 79.524198][ T4566] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffffÿ" or missing value [ 79.938047][ T4569] loop4: detected capacity change from 0 to 512 [ 79.978632][ T4569] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.043641][ T4569] EXT4-fs (loop4): 1 truncate cleaned up [ 80.050984][ T4569] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 80.155457][ T21] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 80.174425][ T21] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 80.187521][ T21] hid-generic 0000:0008:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 80.364094][ T1107] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 80.485726][ T1107] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 80.587457][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.694635][ T1107] asix: probe of 1-1:0.251 failed with error -71 [ 80.950706][ T1107] usb 1-1: USB disconnect, device number 2 [ 80.956066][ T4580] fido_id[4580]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.116675][ T4577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.357558][ T4589] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4193] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4589] [ 83.027133][ T4600] loop0: detected capacity change from 0 to 512 [ 83.088081][ T4600] EXT4-fs (loop0): Ignoring removed oldalloc option [ 83.161436][ T4600] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 83.184680][ T4600] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.751133][ T4620] loop2: detected capacity change from 0 to 128 [ 83.854425][ T4620] EXT4-fs error (device loop2): ext4_fill_super:4872: inode #2: comm syz.2.87: iget: checksum invalid [ 83.899634][ T4620] EXT4-fs (loop2): get root inode failed [ 83.906356][ T4620] EXT4-fs (loop2): mount failed [ 83.945236][ T4602] loop4: detected capacity change from 0 to 256 [ 85.423871][ T4650] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4650] [ 86.251497][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.358064][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.471755][ T4680] overlayfs: failed to clone upperpath [ 86.510661][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.647176][ T4684] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4193] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4684] [ 86.757238][ T7] cfg80211: failed to load regulatory.db [ 87.143886][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.219544][ T4688] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.231139][ T4687] loop4: detected capacity change from 0 to 8 [ 87.277501][ T4687] squashfs image failed sanity check [ 87.383159][ T4699] device bridge1 entered promiscuous mode [ 87.574956][ T4706] netlink: 'syz.1.130': attribute type 29 has an invalid length. [ 88.153422][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 88.238130][ T4216] Bluetooth: hci3: command 0x0405 tx timeout [ 88.357477][ T4706] netlink: 'syz.1.130': attribute type 29 has an invalid length. [ 88.374995][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 88.395431][ T4721] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.747332][ T4740] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4193] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4740] [ 89.265269][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 89.395298][ T4688] chnl_net:caif_netlink_parms(): no params data found [ 90.454993][ T4688] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.462210][ T4688] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.498144][ T4688] device bridge_slave_0 entered promiscuous mode [ 90.556546][ T4688] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.571379][ T4688] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.589157][ T4688] device bridge_slave_1 entered promiscuous mode [ 90.729174][ T4688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.772823][ T4688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.811043][ T4688] team0: Port device team_slave_0 added [ 90.819117][ T4688] team0: Port device team_slave_1 added [ 90.850580][ T4688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.862179][ T4688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.922196][ T4688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.954287][ T4688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.963163][ T4688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.990441][ T4688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.086415][ T4688] device hsr_slave_0 entered promiscuous mode [ 91.100567][ T4688] device hsr_slave_1 entered promiscuous mode [ 91.115184][ T4688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.131617][ T4688] Cannot create hsr debugfs directory [ 91.344495][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 91.402292][ T4810] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4810] [ 92.012287][ T4826] loop0: detected capacity change from 0 to 512 [ 92.112334][ T4826] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.197567][ T4826] EXT4-fs (loop0): 1 truncate cleaned up [ 92.203259][ T4826] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.418662][ T9] device hsr_slave_0 left promiscuous mode [ 92.462575][ T9] device hsr_slave_1 left promiscuous mode [ 92.495779][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.574678][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.585374][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.592816][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.607861][ T9] device bridge_slave_1 left promiscuous mode [ 92.616038][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.636290][ T9] device bridge_slave_0 left promiscuous mode [ 92.642534][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.806318][ T9] device veth1_macvtap left promiscuous mode [ 92.812898][ T9] device veth0_macvtap left promiscuous mode [ 92.840651][ T9] device veth1_vlan left promiscuous mode [ 92.848288][ T9] device veth0_vlan left promiscuous mode [ 92.932157][ T4861] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4861] [ 93.400997][ T9] team0 (unregistering): Port device team_slave_1 removed [ 93.416772][ T4876] loop4: detected capacity change from 0 to 512 [ 93.424401][ T4316] Bluetooth: hci4: command 0x040f tx timeout [ 93.430607][ T9] team0 (unregistering): Port device team_slave_0 removed [ 93.441253][ T4876] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.461787][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.473665][ T4876] EXT4-fs (loop4): 1 truncate cleaned up [ 93.479792][ T4876] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.482289][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.576002][ T9] bond0 (unregistering): Released all slaves [ 93.611876][ T4688] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.764661][ T4688] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.796144][ T4688] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.811287][ T4688] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.012308][ T4900] loop4: detected capacity change from 0 to 128 [ 94.079644][ T4688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.105368][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 94.154546][ T7] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 94.197359][ T4900] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.211298][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.231405][ T4900] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.237493][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.268309][ T4688] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.292268][ T4900] fscrypt (loop4, inode 12): Unsupported encryption flags (0x10) [ 94.336841][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.362635][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.393210][ T4424] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.400473][ T4424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.417019][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.480350][ T4918] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.504968][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.524299][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.543537][ T4685] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.550706][ T4685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.564810][ T7] usb 1-1: not running at top speed; connect to a high speed hub [ 94.567485][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.632915][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.672393][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.727818][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.759960][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.769391][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.778657][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.787562][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.795588][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 421, setting to 64 [ 94.871736][ T4931] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4931] [ 94.907613][ T4688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.995359][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.043981][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.054651][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.090375][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.404052][ T7] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 95.404083][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.404100][ T7] usb 1-1: Product: syz [ 95.404112][ T7] usb 1-1: Manufacturer: syz [ 95.404124][ T7] usb 1-1: SerialNumber: syz [ 95.434544][ T4890] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.455342][ T7] oti6858 1-1:1.0: oti6858 converter detected [ 95.460939][ T7] usb 1-1: oti6858 converter now attached to ttyUSB0 [ 95.504321][ T4316] Bluetooth: hci4: command 0x0419 tx timeout [ 95.573470][ T4945] input: syz0 as /devices/virtual/input/input5 [ 95.635126][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.635319][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.654020][ T4688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.794110][ T4958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.178412][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.278763][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.361682][ T4988] loop4: detected capacity change from 0 to 512 [ 96.369088][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.385116][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.446379][ T4990] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4193] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4990] [ 96.473848][ C1] usb 1-1: oti6858_read_int_callback(): usb_submit_urb() failed with error -1 [ 96.708407][ T4688] device veth0_vlan entered promiscuous mode [ 96.728932][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.736772][ T4316] usb 1-1: USB disconnect, device number 3 [ 96.754739][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.792177][ T4688] device veth1_vlan entered promiscuous mode [ 96.800571][ T4316] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 96.866311][ T4316] oti6858 1-1:1.0: device disconnected [ 97.015896][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.036521][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.096231][ T4988] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 97.127912][ T4988] ext4 filesystem being mounted at /44/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.341822][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.385272][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.492455][ T4688] device veth0_macvtap entered promiscuous mode [ 97.546630][ T4688] device veth1_macvtap entered promiscuous mode [ 97.585964][ T4216] Bluetooth: hci4: command 0x0405 tx timeout [ 97.701723][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.739731][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.772212][ T5020] loop0: detected capacity change from 0 to 1024 [ 97.779334][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.801527][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.832904][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.862395][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.880091][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.953706][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.992214][ T4688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.034475][ T5017] loop4: detected capacity change from 0 to 512 [ 98.055107][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.096273][ T1275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.370321][ T5017] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.489661][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.512696][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.517327][ T5017] EXT4-fs (loop4): 1 truncate cleaned up [ 98.533871][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.553776][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.563612][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.574625][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.593593][ T5017] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 98.593811][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.621622][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.646730][ T4688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.685498][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 98.692854][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 98.703431][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 98.711208][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 98.718695][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 98.726383][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 98.734565][ T5032] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 98.791357][ T4688] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.825429][ T4688] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.839246][ T4688] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.848074][ T4688] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.858423][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.870559][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.121251][ T5051] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4193] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5051] [ 99.267504][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.747403][ T21] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.770878][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.820444][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.848798][ T21] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.891331][ T21] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.909007][ T21] usb 1-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 99.927242][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.945881][ T5068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.103102][ T21] usb 1-1: config 0 descriptor?? [ 100.109287][ T5064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.121123][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.148494][ T1275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.394363][ T1275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.656819][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.717381][ T5095] loop4: detected capacity change from 0 to 1024 [ 100.877079][ T5102] loop5: detected capacity change from 0 to 256 [ 101.010596][ T21] usbhid 1-1:0.0: can't add hid device: -71 [ 101.011855][ T5108] loop4: detected capacity change from 0 to 512 [ 101.021196][ T21] usbhid: probe of 1-1:0.0 failed with error -71 [ 101.031520][ T21] usb 1-1: USB disconnect, device number 4 [ 101.103294][ T5112] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4193] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5112] [ 101.435414][ T5108] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.773273][ T5108] EXT4-fs (loop4): 1 truncate cleaned up [ 101.783992][ T5108] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 103.018413][ T5169] loop4: detected capacity change from 0 to 1024 [ 103.149075][ T4316] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 103.204833][ T5176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.241'. [ 103.369733][ T5185] ip_tables: iptables: counters copy to user failed while replacing table [ 104.153227][ T5186] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4688] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5186] [ 104.833751][ C1] sched: RT throttling activated [ 106.149372][ T5228] loop0: detected capacity change from 0 to 512 [ 106.220429][ T5228] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 106.335224][ T5228] EXT4-fs (loop0): 1 truncate cleaned up [ 106.341880][ T5228] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 106.564834][ T5235] loop5: detected capacity change from 0 to 512 [ 106.595933][ T5235] EXT4-fs (loop5): Ignoring removed nobh option [ 106.759856][ T26] audit: type=1800 audit(1792059234.673:4): pid=5237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.253" name="file3" dev="loop0" ino=16 res=0 errno=0 [ 106.840269][ T5235] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 106.850741][ T4316] usb 1-1: device descriptor read/all, error -71 [ 106.906222][ T5235] EXT4-fs (loop5): 1 truncate cleaned up [ 106.938659][ T5235] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 107.520810][ T5250] input: syz0 as /devices/virtual/input/input6 [ 107.772306][ T5254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.822183][ T5253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.498749][ T5272] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4688] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5272] [ 108.890769][ T5283] loop0: detected capacity change from 0 to 256 [ 109.045323][ T5283] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 109.183919][ T26] audit: type=1800 audit(1792059237.073:5): pid=5283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.269" name="file1" dev="loop0" ino=1048653 res=0 errno=0 [ 109.589636][ T5286] loop4: detected capacity change from 0 to 512 [ 109.686406][ T5286] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 109.745013][ T5293] input: syz0 as /devices/virtual/input/input7 [ 109.761855][ T5286] EXT4-fs (loop4): 1 truncate cleaned up [ 109.775378][ T5286] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 110.293062][ T26] audit: type=1800 audit(1792059238.153:6): pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.271" name="file3" dev="loop4" ino=16 res=0 errno=0 [ 111.013408][ T5308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.297909][ T5327] loop4: detected capacity change from 0 to 1024 [ 111.376320][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 111.392287][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 111.400907][ T5331] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 111.409625][ T5331] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 112.726810][ T5362] loop5: detected capacity change from 0 to 512 [ 114.403076][ T5362] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 114.476578][ T5362] EXT4-fs (loop5): 1 truncate cleaned up [ 114.482406][ T5362] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 114.670565][ T5379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.747681][ T5378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.960793][ T26] audit: type=1800 audit(1792059242.883:7): pid=5391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.288" name="file3" dev="loop5" ino=16 res=0 errno=0 [ 115.175965][ T5390] Cannot find add_set index 0 as target [ 115.641600][ T5410] input: syz0 as /devices/virtual/input/input8 [ 116.084299][ T5420] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5420] [ 117.415872][ T5435] sch_tbf: peakrate 5 is lower than or equals to rate 8 ! [ 118.309497][ T5446] loop4: detected capacity change from 0 to 2048 [ 119.184777][ T5446] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.204111][ T5446] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.478689][ T5457] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 122.617458][ T5497] FAULT_INJECTION: forcing a failure. [ 122.617458][ T5497] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 122.630608][ T5497] CPU: 1 PID: 5497 Comm: syz.0.303 Not tainted syzkaller #0 [ 122.637912][ T5497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.647985][ T5497] Call Trace: [ 122.651282][ T5497] [ 122.654497][ T5497] dump_stack_lvl+0x188/0x250 [ 122.659214][ T5497] ? show_regs_print_info+0x20/0x20 [ 122.664434][ T5497] ? load_image+0x410/0x410 [ 122.669134][ T5497] ? __lock_acquire+0x7d40/0x7d40 [ 122.674192][ T5497] should_fail+0x383/0x4b0 [ 122.678635][ T5497] _copy_from_user+0x2e/0x170 [ 122.683334][ T5497] __sys_bpf+0x26d/0x6f0 [ 122.687697][ T5497] ? bpf_link_show_fdinfo+0x380/0x380 [ 122.693115][ T5497] __x64_sys_bpf+0x78/0x90 [ 122.697562][ T5497] do_syscall_64+0x4c/0xa0 [ 122.702003][ T5497] ? clear_bhb_loop+0x30/0x80 [ 122.706825][ T5497] ? clear_bhb_loop+0x30/0x80 [ 122.711540][ T5497] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.717479][ T5497] RIP: 0033:0x7fe94825a559 [ 122.721918][ T5497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.741561][ T5497] RSP: 002b:00007fe9464b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.750003][ T5497] RAX: ffffffffffffffda RBX: 00007fe9484e1fa0 RCX: 00007fe94825a559 [ 122.758005][ T5497] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 122.766203][ T5497] RBP: 00007fe9482f18b0 R08: 0000000000000000 R09: 0000000000000000 [ 122.774187][ T5497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.782179][ T5497] R13: 00007fe9484e2038 R14: 00007fe9484e1fa0 R15: 00007ffd27d90ad8 [ 122.790286][ T5497] [ 122.860409][ T5512] loop4: detected capacity change from 0 to 512 [ 122.895299][ T5512] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 122.951634][ T5512] EXT4-fs (loop4): 1 truncate cleaned up [ 122.962549][ T5512] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 123.150634][ T5525] fuse: Bad value for 'fd' [ 124.278895][ T26] audit: type=1800 audit(1792059251.313:8): pid=5530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.322" name="file3" dev="loop4" ino=16 res=0 errno=0 [ 124.897202][ T5537] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4688] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5537] [ 126.921920][ T5586] loop5: detected capacity change from 0 to 512 [ 126.971990][ T5586] EXT4-fs (loop5): Ignoring removed nobh option [ 127.010895][ T5586] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 127.881859][ T5586] EXT4-fs (loop5): 1 truncate cleaned up [ 127.896910][ T5586] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 128.019099][ T5611] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4193] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5611] [ 130.015667][ T4316] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.263879][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 130.524021][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.540168][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 130.556449][ T4316] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 130.569731][ T4316] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 130.593876][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.605168][ T4316] usb 1-1: config 0 descriptor?? [ 131.395817][ T4316] hid-generic 0003:057E:2019.0002: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 131.453599][ T5680] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 131.922560][ T13] usb 1-1: USB disconnect, device number 7 [ 132.495564][ T5707] WARNING! power/level is deprecated; use power/control instead [ 132.677494][ T5719] loop0: detected capacity change from 0 to 512 [ 132.786863][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.793391][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.021734][ T5719] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.409387][ T5719] EXT4-fs (loop0): 1 truncate cleaned up [ 133.434981][ T5719] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 134.630760][ T5755] fuse: Bad value for 'fd' [ 137.039069][ T5809] loop5: detected capacity change from 0 to 1024 [ 139.356374][ T5864] input: syz0 as /devices/virtual/input/input9 [ 140.733678][ T5901] fuse: Bad value for 'fd' [ 141.014182][ T4316] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 141.507493][ T4316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.540149][ T4316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.294045][ T4316] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 142.331660][ T4316] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 142.471615][ T4316] usb 6-1: Manufacturer: syz [ 142.502823][ T4316] usb 6-1: config 0 descriptor?? [ 144.211143][ T5950] overlayfs: unrecognized mount option "verity=on" or missing value [ 144.237522][ T4316] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 144.246622][ T4316] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 144.255184][ T4316] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 144.274926][ T4316] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 144.282595][ T4316] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 144.294896][ T4316] usb 6-1: USB disconnect, device number 2 [ 144.375635][ T5954] input: syz0 as /devices/virtual/input/input10 [ 144.894058][ T4316] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 145.242344][ T5970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.304675][ T5969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.454033][ T4316] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 145.467320][ T4316] usb 6-1: can't read configurations, error -71 [ 147.569721][ T6012] input: syz0 as /devices/virtual/input/input11 [ 148.387321][ T6033] FAULT_INJECTION: forcing a failure. [ 148.387321][ T6033] name failslab, interval 1, probability 0, space 0, times 0 [ 148.387374][ T6033] CPU: 1 PID: 6033 Comm: syz.4.471 Not tainted syzkaller #0 [ 148.387393][ T6033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.387404][ T6033] Call Trace: [ 148.387412][ T6033] [ 148.387420][ T6033] dump_stack_lvl+0x188/0x250 [ 148.387448][ T6033] ? show_regs_print_info+0x20/0x20 [ 148.387468][ T6033] ? load_image+0x410/0x410 [ 148.387491][ T6033] ? __might_sleep+0xf0/0xf0 [ 148.387510][ T6033] ? __lock_acquire+0x7d40/0x7d40 [ 148.387537][ T6033] should_fail+0x383/0x4b0 [ 148.387563][ T6033] should_failslab+0x5/0x20 [ 148.387580][ T6033] slab_pre_alloc_hook+0x51/0xc0 [ 148.387599][ T6033] ? __kernfs_new_node+0xe3/0x6b0 [ 148.387620][ T6033] kmem_cache_alloc+0x3d/0x280 [ 148.387643][ T6033] __kernfs_new_node+0xe3/0x6b0 [ 148.387665][ T6033] ? __lock_acquire+0x7d40/0x7d40 [ 148.387685][ T6033] ? kernfs_new_node+0x250/0x250 [ 148.387717][ T6033] ? kernfs_activate+0x1eb/0x210 [ 148.387741][ T6033] kernfs_new_node+0x148/0x250 [ 148.387766][ T6033] __kernfs_create_file+0x47/0x2e0 [ 148.387790][ T6033] sysfs_add_file_mode_ns+0x2d2/0x390 [ 148.387816][ T6033] sysfs_merge_group+0x182/0x320 [ 148.387838][ T6033] ? sysfs_remove_groups+0xa0/0xa0 [ 148.387860][ T6033] ? kernfs_put+0x442/0x480 [ 148.387880][ T6033] ? sysfs_create_groups+0x9c/0x120 [ 148.387901][ T6033] dpm_sysfs_add+0xce/0x270 [ 148.387923][ T6033] device_add+0x745/0x1050 [ 148.387947][ T6033] device_create+0x266/0x300 [ 148.387970][ T6033] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 148.387990][ T6033] ? _raw_spin_unlock+0x40/0x40 [ 148.388010][ T6033] ? root_device_unregister+0xf0/0xf0 [ 148.388027][ T6033] ? update_attr+0x550/0x730 [ 148.388049][ T6033] ? memcpy+0x3c/0x60 [ 148.388067][ T6033] ? is_console_locked+0x5/0x10 [ 148.388083][ T6033] ? csi_J+0x8d6/0xdb0 [ 148.388104][ T6033] vcs_make_sysfs+0x2e/0x80 [ 148.388122][ T6033] vc_allocate+0x5e4/0x700 [ 148.388146][ T6033] ? vc_cons_allocated+0x70/0x70 [ 148.388183][ T6033] con_install+0x9c/0x720 [ 148.388209][ T6033] ? show_tty_active+0x30/0x30 [ 148.388239][ T6033] tty_init_dev+0xbb/0x470 [ 148.388263][ T6033] tty_open+0x7e8/0xcd0 [ 148.388290][ T6033] ? __lock_acquire+0x7d40/0x7d40 [ 148.388314][ T6033] ? tty_compat_ioctl+0x570/0x570 [ 148.388340][ T6033] ? do_raw_spin_unlock+0x11d/0x230 [ 148.388364][ T6033] chrdev_open+0x585/0x5f0 [ 148.388389][ T6033] ? cd_forget+0x160/0x160 [ 148.388413][ T6033] ? fsnotify_perm+0x3a7/0x560 [ 148.388434][ T6033] ? cd_forget+0x160/0x160 [ 148.388453][ T6033] do_dentry_open+0x7f7/0xf90 [ 148.388474][ T6033] ? vfs_open+0x2b/0x80 [ 148.388498][ T6033] path_openat+0x2718/0x2fb0 [ 148.388540][ T6033] ? __kasan_slab_alloc+0xa9/0xc0 [ 148.388573][ T6033] ? do_filp_open+0x400/0x400 [ 148.388613][ T6033] do_filp_open+0x1df/0x400 [ 148.388639][ T6033] ? vfs_tmpfile+0x300/0x300 [ 148.388680][ T6033] ? _raw_spin_unlock+0x24/0x40 [ 148.388699][ T6033] ? alloc_fd+0x59e/0x650 [ 148.388725][ T6033] do_sys_openat2+0x14b/0x500 [ 148.388743][ T6033] ? __lock_acquire+0x7d40/0x7d40 [ 148.388765][ T6033] ? do_sys_open+0xe0/0xe0 [ 148.388783][ T6033] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 148.388808][ T6033] ? lock_chain_count+0x20/0x20 [ 148.388835][ T6033] __x64_sys_openat+0x135/0x160 [ 148.388858][ T6033] do_syscall_64+0x4c/0xa0 [ 148.388876][ T6033] ? clear_bhb_loop+0x30/0x80 [ 148.388895][ T6033] ? clear_bhb_loop+0x30/0x80 [ 148.388916][ T6033] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.388936][ T6033] RIP: 0033:0x7fcd546a2d8e [ 148.388954][ T6033] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 148.388968][ T6033] RSP: 002b:00007fcd52939b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 148.388990][ T6033] RAX: ffffffffffffffda RBX: 00007fcd5293a6c0 RCX: 00007fcd546a2d8e [ 148.389004][ T6033] RDX: 0000000000000002 RSI: 00007fcd52939c00 RDI: ffffffffffffff9c [ 148.389017][ T6033] RBP: 00007fcd547798b0 R08: 0000000000000000 R09: 0000000000000000 [ 148.389029][ T6033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.389041][ T6033] R13: 00007fcd5496a038 R14: 00007fcd54969fa0 R15: 00007ffe8ef94898 [ 148.389071][ T6033] [ 148.842665][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 149.293986][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 149.652004][ T6044] device syzkaller1 entered promiscuous mode [ 149.668661][ T6046] input: syz1 as /devices/virtual/input/input12 [ 149.746480][ T13] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 149.763797][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.781222][ T13] usb 1-1: Product: syz [ 149.789200][ T13] usb 1-1: Manufacturer: syz [ 149.796369][ T13] usb 1-1: SerialNumber: syz [ 149.841360][ T6052] input: syz0 as /devices/virtual/input/input13 [ 149.850405][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.5.478'. [ 150.615457][ T6065] loop4: detected capacity change from 0 to 8 [ 150.685484][ T6065] SQUASHFS error: zlib decompression failed, data probably corrupt [ 150.701214][ T6065] SQUASHFS error: Failed to read block 0x9b: -5 [ 150.708829][ T6065] SQUASHFS error: Unable to read metadata cache entry [99] [ 150.722791][ T6065] SQUASHFS error: Unable to read inode 0x127 [ 150.844063][ T4267] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 151.044046][ T13] usb 1-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 151.114006][ T13] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 151.143944][ T13] usb 1-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 151.213170][ T13] usb 1-1: USB disconnect, device number 8 [ 151.216998][ T4267] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 151.267131][ T4267] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 151.501900][ T6093] udevd[6093]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.514044][ T4267] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.826001][ T4267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.065132][ T4267] usb 6-1: Product: syz [ 152.222362][ T4267] usb 6-1: Manufacturer: syz [ 152.239822][ T4267] usb 6-1: SerialNumber: syz [ 152.251921][ T6108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.269527][ T6107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.508932][ T6061] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.516580][ T6061] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.763992][ T4316] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 153.184591][ T4267] cdc_ncm 6-1:1.0: SET_CRC_MODE failed [ 153.254299][ T4316] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 153.295702][ T4267] cdc_ncm 6-1:1.0: bind() failure [ 153.324915][ T4316] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 153.475006][ T4267] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 153.519729][ T4316] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.592575][ T4267] cdc_ncm 6-1:1.1: bind() failure [ 153.636866][ T4267] usb 6-1: USB disconnect, device number 5 [ 153.645068][ T4316] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.667411][ T4316] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 153.687668][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.706597][ T4316] usb 5-1: config 0 descriptor?? [ 153.721341][ T6150] loop5: detected capacity change from 0 to 8 [ 153.727811][ T6123] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 153.761282][ T6150] SQUASHFS error: zlib decompression failed, data probably corrupt [ 153.775658][ T6150] SQUASHFS error: Failed to read block 0x9b: -5 [ 153.781999][ T6150] SQUASHFS error: Unable to read metadata cache entry [99] [ 153.790220][ T6150] SQUASHFS error: Unable to read inode 0x127 [ 154.205518][ T4316] acrux 0003:1A34:F705.0004: ignoring exceeding usage max [ 154.238599][ T4316] acrux 0003:1A34:F705.0004: No inputs registered, leaving [ 154.258310][ T4316] acrux 0003:1A34:F705.0004: hidraw0: USB HID v0.10 Joystick [HID 1a34:f705] on usb-dummy_hcd.4-1/input0 [ 154.269988][ T4316] acrux 0003:1A34:F705.0004: no inputs found [ 154.291238][ T4316] acrux 0003:1A34:F705.0004: Failed to enable force feedback support, error: -19 [ 154.633247][ T4316] usb 5-1: USB disconnect, device number 3 [ 155.218716][ T6183] fido_id[6183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 156.124307][ T6198] FAULT_INJECTION: forcing a failure. [ 156.124307][ T6198] name failslab, interval 1, probability 0, space 0, times 0 [ 156.234231][ T6198] CPU: 1 PID: 6198 Comm: syz.4.526 Not tainted syzkaller #0 [ 156.241733][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.251830][ T6198] Call Trace: [ 156.255147][ T6198] [ 156.258082][ T6198] dump_stack_lvl+0x188/0x250 [ 156.262769][ T6198] ? show_regs_print_info+0x20/0x20 [ 156.267972][ T6198] ? load_image+0x410/0x410 [ 156.272486][ T6198] ? __lock_acquire+0x7d40/0x7d40 [ 156.277528][ T6198] should_fail+0x383/0x4b0 [ 156.282012][ T6198] should_failslab+0x5/0x20 [ 156.286523][ T6198] slab_pre_alloc_hook+0x51/0xc0 [ 156.291469][ T6198] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 156.297285][ T6198] ? __get_vm_area_node+0x119/0x2d0 [ 156.302504][ T6198] __get_vm_area_node+0x119/0x2d0 [ 156.307536][ T6198] ? aa_get_newest_label+0xf5/0x5a0 [ 156.312756][ T6198] __vmalloc_node_range+0xef/0x8b0 [ 156.317878][ T6198] ? bpf_jit_binary_alloc+0x120/0x240 [ 156.323432][ T6198] module_alloc+0x81/0x90 [ 156.327788][ T6198] ? bpf_jit_binary_alloc+0x120/0x240 [ 156.333176][ T6198] bpf_jit_binary_alloc+0x120/0x240 [ 156.338700][ T6198] ? bpf_int_jit_compile+0xc4d0/0xc4d0 [ 156.344185][ T6198] bpf_int_jit_compile+0xb2f5/0xc4d0 [ 156.349500][ T6198] ? kfree+0xef/0x2a0 [ 156.353538][ T6198] ? stack_trace_snprint+0xe0/0xe0 [ 156.358685][ T6198] ? emit_bpf_dispatcher+0x1050/0x1050 [ 156.364186][ T6198] bpf_prog_select_runtime+0x46f/0x7b0 [ 156.369677][ T6198] ? bpf_prog_realloc+0x142/0x1c0 [ 156.374729][ T6198] bpf_prepare_filter+0x100e/0x11b0 [ 156.379951][ T6198] ? seccomp_attach_filter+0xbb0/0xbb0 [ 156.385443][ T6198] ? bpf_prog_create+0x1f0/0x1f0 [ 156.390398][ T6198] ? kmemdup+0x3d/0x50 [ 156.394487][ T6198] ? memcpy+0x3c/0x60 [ 156.398485][ T6198] bpf_prog_create_from_user+0x2cc/0x420 [ 156.404135][ T6198] ? seccomp_attach_filter+0xbb0/0xbb0 [ 156.409625][ T6198] do_seccomp+0x808/0x16a0 [ 156.414061][ T6198] ? __lock_acquire+0x7d40/0x7d40 [ 156.419118][ T6198] ? prctl_set_seccomp+0x60/0x60 [ 156.424075][ T6198] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 156.430181][ T6198] ? lockdep_hardirqs_on+0x94/0x140 [ 156.435409][ T6198] do_syscall_64+0x4c/0xa0 [ 156.439881][ T6198] ? clear_bhb_loop+0x30/0x80 [ 156.444577][ T6198] ? clear_bhb_loop+0x30/0x80 [ 156.449273][ T6198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.455186][ T6198] RIP: 0033:0x7fcd546e2559 [ 156.459623][ T6198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.479379][ T6198] RSP: 002b:00007fcd5293a028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 156.487816][ T6198] RAX: ffffffffffffffda RBX: 00007fcd54969fa0 RCX: 00007fcd546e2559 [ 156.495814][ T6198] RDX: 0000200000000280 RSI: 0000000000000000 RDI: 0000000000000001 [ 156.503826][ T6198] RBP: 00007fcd547798b0 R08: 0000000000000000 R09: 0000000000000000 [ 156.511827][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.519817][ T6198] R13: 00007fcd5496a038 R14: 00007fcd54969fa0 R15: 00007ffe8ef94898 [ 156.527837][ T6198] [ 156.579794][ T6198] syz.4.526: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 156.596591][ T6198] CPU: 1 PID: 6198 Comm: syz.4.526 Not tainted syzkaller #0 [ 156.604005][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.614072][ T6198] Call Trace: [ 156.617464][ T6198] [ 156.620408][ T6198] dump_stack_lvl+0x188/0x250 [ 156.625105][ T6198] ? rcu_lock_release+0x5/0x20 [ 156.629894][ T6198] ? show_regs_print_info+0x20/0x20 [ 156.635124][ T6198] ? load_image+0x410/0x410 [ 156.639662][ T6198] warn_alloc+0x245/0x320 [ 156.644040][ T6198] ? zone_watermark_ok_safe+0x250/0x250 [ 156.649647][ T6198] ? rcu_is_watching+0x11/0xa0 [ 156.654436][ T6198] ? __get_vm_area_node+0x119/0x2d0 [ 156.659660][ T6198] ? __get_vm_area_node+0x2b5/0x2d0 [ 156.665001][ T6198] ? aa_get_newest_label+0xf5/0x5a0 [ 156.670313][ T6198] __vmalloc_node_range+0x2b1/0x8b0 [ 156.675556][ T6198] module_alloc+0x81/0x90 [ 156.679987][ T6198] ? bpf_jit_binary_alloc+0x120/0x240 [ 156.685392][ T6198] bpf_jit_binary_alloc+0x120/0x240 [ 156.690614][ T6198] ? bpf_int_jit_compile+0xc4d0/0xc4d0 [ 156.696112][ T6198] bpf_int_jit_compile+0xb2f5/0xc4d0 [ 156.701398][ T6198] ? kfree+0xef/0x2a0 [ 156.705415][ T6198] ? stack_trace_snprint+0xe0/0xe0 [ 156.710567][ T6198] ? emit_bpf_dispatcher+0x1050/0x1050 [ 156.716035][ T6198] bpf_prog_select_runtime+0x46f/0x7b0 [ 156.721484][ T6198] ? bpf_prog_realloc+0x142/0x1c0 [ 156.726504][ T6198] bpf_prepare_filter+0x100e/0x11b0 [ 156.731698][ T6198] ? seccomp_attach_filter+0xbb0/0xbb0 [ 156.737271][ T6198] ? bpf_prog_create+0x1f0/0x1f0 [ 156.742238][ T6198] ? kmemdup+0x3d/0x50 [ 156.746331][ T6198] ? memcpy+0x3c/0x60 [ 156.750353][ T6198] bpf_prog_create_from_user+0x2cc/0x420 [ 156.756178][ T6198] ? seccomp_attach_filter+0xbb0/0xbb0 [ 156.761892][ T6198] do_seccomp+0x808/0x16a0 [ 156.766340][ T6198] ? __lock_acquire+0x7d40/0x7d40 [ 156.771384][ T6198] ? prctl_set_seccomp+0x60/0x60 [ 156.776349][ T6198] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 156.782332][ T6198] ? lockdep_hardirqs_on+0x94/0x140 [ 156.787679][ T6198] do_syscall_64+0x4c/0xa0 [ 156.792099][ T6198] ? clear_bhb_loop+0x30/0x80 [ 156.796894][ T6198] ? clear_bhb_loop+0x30/0x80 [ 156.801586][ T6198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.807482][ T6198] RIP: 0033:0x7fcd546e2559 [ 156.811915][ T6198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.831527][ T6198] RSP: 002b:00007fcd5293a028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 156.839959][ T6198] RAX: ffffffffffffffda RBX: 00007fcd54969fa0 RCX: 00007fcd546e2559 [ 156.847955][ T6198] RDX: 0000200000000280 RSI: 0000000000000000 RDI: 0000000000000001 [ 156.855970][ T6198] RBP: 00007fcd547798b0 R08: 0000000000000000 R09: 0000000000000000 [ 156.863961][ T6198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.871945][ T6198] R13: 00007fcd5496a038 R14: 00007fcd54969fa0 R15: 00007ffe8ef94898 [ 156.879929][ T6198] [ 157.603922][ T6198] Mem-Info: [ 157.607083][ T6198] active_anon:289 inactive_anon:9717 isolated_anon:0 [ 157.607083][ T6198] active_file:22942 inactive_file:35909 isolated_file:0 [ 157.607083][ T6198] unevictable:768 dirty:172 writeback:0 [ 157.607083][ T6198] slab_reclaimable:21232 slab_unreclaimable:96959 [ 157.607083][ T6198] mapped:33038 shmem:4521 pagetables:777 bounce:0 [ 157.607083][ T6198] kernel_misc_reclaimable:0 [ 157.607083][ T6198] free:1357831 free_pcp:11593 free_cma:0 [ 157.700978][ T6198] Node 0 active_anon:8024kB inactive_anon:26856kB active_file:91560kB inactive_file:143636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120652kB dirty:688kB writeback:0kB shmem:11404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10892kB pagetables:3008kB all_unreclaimable? no [ 157.761603][ T6198] Node 1 active_anon:32kB inactive_anon:512kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 157.789403][ T6220] loop5: detected capacity change from 0 to 512 [ 157.836034][ T6224] netlink: 32 bytes leftover after parsing attributes in process `syz.1.536'. [ 157.905392][ T6198] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.933472][ T6198] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 157.939367][ T6198] Node 0 DMA32 free:1510904kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1124kB inactive_anon:38576kB active_file:91560kB inactive_file:143636kB unevictable:1536kB writepending:468kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:31352kB local_pcp:9832kB free_cma:0kB [ 157.957153][ T6231] netlink: 65173 bytes leftover after parsing attributes in process `syz.0.540'. [ 157.969708][ T6198] lowmem_reserve[]: 0 0 0 0 0 [ 158.015144][ T6198] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 159.423468][ T6198] lowmem_reserve[]: 0 0 0 0 0 [ 159.428315][ T6198] Node 1 Normal free:3909460kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:11456kB local_pcp:5476kB free_cma:0kB [ 159.469200][ T6198] lowmem_reserve[]: 0 0 0 0 0 [ 159.479329][ T6198] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 159.494152][ T6220] netlink: 'syz.5.535': attribute type 29 has an invalid length. [ 159.501905][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.535'. [ 159.551672][ T6198] Node 0 DMA32: 1306*4kB (UME) 485*8kB (UME) 200*16kB (UME) 231*32kB (UME) 516*64kB (UME) 177*128kB (UME) 101*256kB (UM) 76*512kB (UME) 51*1024kB (UM) 16*2048kB (UME) 314*4096kB (UM) = 1511280kB [ 159.582092][ T6220] netlink: 'syz.5.535': attribute type 29 has an invalid length. [ 159.584321][ T6198] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 159.603015][ T6242] FAT-fs (loop5): error, invalid access to FAT (entry 0x00020000) [ 159.611699][ T6241] FAULT_INJECTION: forcing a failure. [ 159.611699][ T6241] name failslab, interval 1, probability 0, space 0, times 0 [ 159.624601][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.535'. [ 159.627526][ T6242] FAT-fs (loop5): Filesystem has been set read-only [ 159.634624][ T6241] CPU: 1 PID: 6241 Comm: syz.0.543 Not tainted syzkaller #0 [ 159.647283][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.657347][ T6241] Call Trace: [ 159.660638][ T6241] [ 159.663577][ T6241] dump_stack_lvl+0x188/0x250 [ 159.668275][ T6241] ? show_regs_print_info+0x20/0x20 [ 159.671724][ T6242] FAT-fs (loop5): error, invalid access to FAT (entry 0x00020000) [ 159.673487][ T6241] ? load_image+0x410/0x410 [ 159.673516][ T6241] ? __might_sleep+0xf0/0xf0 [ 159.673534][ T6241] ? __lock_acquire+0x7d40/0x7d40 [ 159.673554][ T6241] should_fail+0x383/0x4b0 [ 159.700174][ T6241] should_failslab+0x5/0x20 [ 159.704700][ T6241] slab_pre_alloc_hook+0x51/0xc0 [ 159.709652][ T6241] __kmalloc+0x6b/0x340 [ 159.713812][ T6241] ? iovec_from_user+0x83/0x370 [ 159.718711][ T6241] iovec_from_user+0x83/0x370 [ 159.723410][ T6241] ? verify_lock_unused+0x140/0x140 [ 159.728626][ T6241] __import_iovec+0x70/0x490 [ 159.733272][ T6241] ? do_futex+0xdc2/0x12b0 [ 159.735144][ T6198] Node 1 [ 159.737707][ T6241] ? vfs_write+0xaa6/0xd70 [ 159.737732][ T6241] import_iovec+0x6f/0xa0 [ 159.737755][ T6241] __se_sys_process_madvise+0x18b/0x510 [ 159.740686][ T6198] Normal: [ 159.745086][ T6241] ? __x64_sys_process_madvise+0xc0/0xc0 [ 159.745115][ T6241] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 159.765996][ T6198] 93*4kB (UE) [ 159.769670][ T6241] ? lockdep_hardirqs_on+0x94/0x140 [ 159.769699][ T6241] ? __x64_sys_process_madvise+0x1c/0xc0 [ 159.773053][ T6198] 38*8kB [ 159.778237][ T6241] do_syscall_64+0x4c/0xa0 [ 159.778256][ T6241] ? clear_bhb_loop+0x30/0x80 [ 159.778273][ T6241] ? clear_bhb_loop+0x30/0x80 [ 159.778291][ T6241] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.778310][ T6241] RIP: 0033:0x7fe94825a559 [ 159.810981][ T6241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.830614][ T6241] RSP: 002b:00007fe9464b2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 159.839043][ T6241] RAX: ffffffffffffffda RBX: 00007fe9484e1fa0 RCX: 00007fe94825a559 [ 159.844269][ T6198] (UE) [ 159.847028][ T6241] RDX: 0000000000000033 RSI: 0000000000000000 RDI: ffffffffffffffff [ 159.847044][ T6241] RBP: 00007fe9482f18b0 R08: 0000000000000000 R09: 0000000000000000 [ 159.847062][ T6241] R10: 0000000000000017 R11: 0000000000000246 R12: 0000000000000000 [ 159.847072][ T6241] R13: 00007fe9484e2038 R14: 00007fe9484e1fa0 R15: 00007ffd27d90ad8 [ 159.850988][ T6198] 25*16kB [ 159.857783][ T6241] [ 159.903656][ T6198] (UME) 71*32kB (UE) 33*64kB (UME) 22*128kB (UME) 11*256kB (UME) 2*512kB (U) 0*1024kB 1*2048kB (M) 951*4096kB (M) = 3909460kB [ 159.923956][ T6198] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 159.939354][ T6198] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 159.950780][ T6198] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 159.987706][ T6198] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 160.004910][ T6198] 64460 total pagecache pages [ 160.009881][ T6198] 0 pages in swap cache [ 160.019156][ T6198] Swap cache stats: add 1939, delete 1939, find 0/4 [ 160.062136][ T6198] Free swap = 124472kB [ 160.087096][ T6198] Total swap = 124996kB [ 160.091339][ T6198] 2097051 pages RAM [ 160.102249][ T6198] 0 pages HighMem/MovableOnly [ 160.117267][ T6198] 415313 pages reserved [ 160.137506][ T6198] 0 pages cma reserved [ 160.244933][ T4316] hid-generic 0000:0008:0000.0005: unknown main item tag 0x0 [ 160.262069][ T4316] hid-generic 0000:0008:0000.0005: unknown main item tag 0x0 [ 160.284928][ T4316] hid-generic 0000:0008:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 160.326524][ T6264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.346922][ T6264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.397272][ T6265] fido_id[6265]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 160.554113][ T4175] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 160.697086][ T6279] loop0: detected capacity change from 0 to 512 [ 160.780257][ T6285] Unsupported ieee802154 address type: 0 [ 160.809546][ T6279] netlink: 'syz.0.556': attribute type 29 has an invalid length. [ 160.843780][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 160.863674][ T6279] netlink: 'syz.0.556': attribute type 29 has an invalid length. [ 160.890009][ T6290] FAT-fs (loop0): error, invalid access to FAT (entry 0x00020000) [ 160.908139][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 160.924118][ T4175] usb 5-1: not running at top speed; connect to a high speed hub [ 160.942108][ T6290] FAT-fs (loop0): Filesystem has been set read-only [ 160.958880][ T6290] FAT-fs (loop0): error, invalid access to FAT (entry 0x00020000) [ 161.024267][ T4175] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 421, setting to 64 [ 161.214006][ T4175] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 161.238096][ T4175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.249932][ T4175] usb 5-1: Product: syz [ 161.254305][ T4175] usb 5-1: Manufacturer: syz [ 161.259565][ T4175] usb 5-1: SerialNumber: syz [ 161.303031][ T6310] netlink: 108 bytes leftover after parsing attributes in process `syz.3.569'. [ 161.314304][ T6263] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 161.345563][ T4175] oti6858 5-1:1.0: oti6858 converter detected [ 161.364196][ T4175] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 161.572011][ T6319] loop5: detected capacity change from 0 to 2048 [ 161.617991][ T6323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.800795][ T6325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.883708][ T6319] UDF-fs: bad mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 162.327835][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.572'. [ 162.600081][ T21] usb 5-1: USB disconnect, device number 4 [ 162.610990][ T21] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 162.620836][ T21] oti6858 5-1:1.0: device disconnected [ 163.270577][ T6341] loop5: detected capacity change from 0 to 8 [ 163.373631][ T6341] SQUASHFS error: zlib decompression failed, data probably corrupt [ 163.413909][ T6341] SQUASHFS error: Failed to read block 0x9b: -5 [ 163.420397][ T6341] SQUASHFS error: Unable to read metadata cache entry [99] [ 163.450357][ T6341] SQUASHFS error: Unable to read inode 0x127 [ 163.999184][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 164.264832][ T21] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 164.617064][ T21] usb 1-1: not running at top speed; connect to a high speed hub [ 164.638058][ T6401] loop5: detected capacity change from 0 to 512 [ 164.680598][ T6401] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 164.695355][ T6401] ext4 filesystem being mounted at /60/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.773897][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 421, setting to 64 [ 164.802624][ T6409] loop4: detected capacity change from 0 to 512 [ 164.900166][ T6409] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.921822][ T6416] loop5: detected capacity change from 0 to 8 [ 164.928501][ T6409] EXT4-fs (loop4): 1 truncate cleaned up [ 164.936420][ T6409] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.964006][ T21] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 164.973115][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.982758][ T21] usb 1-1: Product: syz [ 164.987282][ T21] usb 1-1: Manufacturer: syz [ 164.992000][ T21] usb 1-1: SerialNumber: syz [ 165.010981][ T6416] SQUASHFS error: zlib decompression failed, data probably corrupt [ 165.024194][ T6377] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 165.061166][ T6416] SQUASHFS error: Failed to read block 0x9b: -5 [ 165.065140][ T21] oti6858 1-1:1.0: oti6858 converter detected [ 165.082545][ T21] usb 1-1: oti6858 converter now attached to ttyUSB0 [ 165.089236][ T6416] SQUASHFS error: Unable to read metadata cache entry [99] [ 165.089283][ T6416] SQUASHFS error: Unable to read inode 0x127 [ 165.326050][ T6434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.696084][ T6376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.757459][ T1107] usb 1-1: USB disconnect, device number 9 [ 165.792919][ T1107] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 165.836517][ T1107] oti6858 1-1:1.0: device disconnected [ 166.893944][ T1107] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 167.203858][ T4316] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 167.687315][ T1107] usb 1-1: Using ep0 maxpacket: 16 [ 167.874333][ T1107] usb 1-1: unable to get BOS descriptor or descriptor too short [ 168.294118][ T4316] usb 6-1: not running at top speed; connect to a high speed hub [ 168.325588][ T1107] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 168.424036][ T4316] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 421, setting to 64 [ 168.583976][ T1107] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 168.605023][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.613047][ T1107] usb 1-1: Product: syz [ 168.621374][ T1107] usb 1-1: Manufacturer: syz [ 168.626934][ T4316] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 168.638239][ T1107] usb 1-1: SerialNumber: syz [ 168.645126][ T4316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.675569][ T4316] usb 6-1: Product: syz [ 168.679855][ T4316] usb 6-1: Manufacturer: syz [ 168.684818][ T4316] usb 6-1: SerialNumber: syz [ 168.724805][ T6506] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 168.745318][ T4316] oti6858 6-1:1.0: oti6858 converter detected [ 168.766196][ T4316] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 168.926291][ T1107] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 168.937212][ T1107] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 169.035626][ T6567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.224906][ T6505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.242214][ T4316] usb 6-1: USB disconnect, device number 6 [ 169.265946][ T4316] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 169.286289][ T4316] oti6858 6-1:1.0: device disconnected [ 169.381524][ T1107] usb 1-1: USB disconnect, device number 10 [ 170.568059][ T4744] Bluetooth: hci5: Frame reassembly failed (-84) [ 170.616269][ T6595] loop5: detected capacity change from 0 to 512 [ 170.673004][ T6595] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 170.693661][ T6595] ext4 filesystem being mounted at /68/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.045138][ T6603] FAULT_INJECTION: forcing a failure. [ 171.045138][ T6603] name failslab, interval 1, probability 0, space 0, times 0 [ 171.045168][ T6603] CPU: 1 PID: 6603 Comm: syz.5.660 Not tainted syzkaller #0 [ 171.045186][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.045199][ T6603] Call Trace: [ 171.045206][ T6603] [ 171.045214][ T6603] dump_stack_lvl+0x188/0x250 [ 171.045242][ T6603] ? show_regs_print_info+0x20/0x20 [ 171.045261][ T6603] ? load_image+0x410/0x410 [ 171.045284][ T6603] ? __might_sleep+0xf0/0xf0 [ 171.045303][ T6603] ? __lock_acquire+0x7d40/0x7d40 [ 171.045330][ T6603] should_fail+0x383/0x4b0 [ 171.045355][ T6603] should_failslab+0x5/0x20 [ 171.045373][ T6603] slab_pre_alloc_hook+0x51/0xc0 [ 171.045391][ T6603] ? __kernfs_new_node+0xe3/0x6b0 [ 171.045413][ T6603] kmem_cache_alloc+0x3d/0x280 [ 171.045436][ T6603] __kernfs_new_node+0xe3/0x6b0 [ 171.045459][ T6603] ? __lock_acquire+0x7d40/0x7d40 [ 171.045480][ T6603] ? kernfs_new_node+0x250/0x250 [ 171.045512][ T6603] ? kernfs_activate+0x1eb/0x210 [ 171.045535][ T6603] kernfs_new_node+0x148/0x250 [ 171.045559][ T6603] __kernfs_create_file+0x47/0x2e0 [ 171.045583][ T6603] sysfs_add_file_mode_ns+0x2d2/0x390 [ 171.045609][ T6603] sysfs_merge_group+0x182/0x320 [ 171.045631][ T6603] ? sysfs_remove_groups+0xa0/0xa0 [ 171.045653][ T6603] ? kernfs_put+0x442/0x480 [ 171.045673][ T6603] ? sysfs_create_groups+0x9c/0x120 [ 171.045694][ T6603] dpm_sysfs_add+0xce/0x270 [ 171.045715][ T6603] device_add+0x745/0x1050 [ 171.045739][ T6603] device_create+0x266/0x300 [ 171.045761][ T6603] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 171.045782][ T6603] ? _raw_spin_unlock+0x40/0x40 [ 171.045801][ T6603] ? root_device_unregister+0xf0/0xf0 [ 171.045818][ T6603] ? update_attr+0x550/0x730 [ 171.045838][ T6603] ? memcpy+0x3c/0x60 [ 171.045862][ T6603] ? is_console_locked+0x5/0x10 [ 171.045878][ T6603] ? csi_J+0x8d6/0xdb0 [ 171.045900][ T6603] vcs_make_sysfs+0x2e/0x80 [ 171.045916][ T6603] vc_allocate+0x5e4/0x700 [ 171.045941][ T6603] ? vc_cons_allocated+0x70/0x70 [ 171.045971][ T6603] con_install+0x9c/0x720 [ 171.045996][ T6603] ? show_tty_active+0x30/0x30 [ 171.046026][ T6603] tty_init_dev+0xbb/0x470 [ 171.046054][ T6603] tty_open+0x7e8/0xcd0 [ 171.046080][ T6603] ? __lock_acquire+0x7d40/0x7d40 [ 171.046104][ T6603] ? tty_compat_ioctl+0x570/0x570 [ 171.046128][ T6603] ? do_raw_spin_unlock+0x11d/0x230 [ 171.046151][ T6603] chrdev_open+0x585/0x5f0 [ 171.046174][ T6603] ? cd_forget+0x160/0x160 [ 171.046198][ T6603] ? fsnotify_perm+0x3a7/0x560 [ 171.046220][ T6603] ? cd_forget+0x160/0x160 [ 171.046249][ T6603] do_dentry_open+0x7f7/0xf90 [ 171.046270][ T6603] ? vfs_open+0x2b/0x80 [ 171.046294][ T6603] path_openat+0x2718/0x2fb0 [ 171.046338][ T6603] ? __kasan_slab_alloc+0xa9/0xc0 [ 171.046365][ T6603] ? do_filp_open+0x400/0x400 [ 171.046406][ T6603] do_filp_open+0x1df/0x400 [ 171.046431][ T6603] ? vfs_tmpfile+0x300/0x300 [ 171.046472][ T6603] ? _raw_spin_unlock+0x24/0x40 [ 171.046490][ T6603] ? alloc_fd+0x59e/0x650 [ 171.046516][ T6603] do_sys_openat2+0x14b/0x500 [ 171.046533][ T6603] ? __lock_acquire+0x7d40/0x7d40 [ 171.046553][ T6603] ? do_sys_open+0xe0/0xe0 [ 171.046572][ T6603] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 171.046596][ T6603] ? lock_chain_count+0x20/0x20 [ 171.046622][ T6603] __x64_sys_openat+0x135/0x160 [ 171.046645][ T6603] do_syscall_64+0x4c/0xa0 [ 171.046662][ T6603] ? clear_bhb_loop+0x30/0x80 [ 171.046681][ T6603] ? clear_bhb_loop+0x30/0x80 [ 171.046701][ T6603] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.046722][ T6603] RIP: 0033:0x7ff072ecdd8e [ 171.046739][ T6603] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.046754][ T6603] RSP: 002b:00007ff071164b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 171.046775][ T6603] RAX: ffffffffffffffda RBX: 00007ff0711656c0 RCX: 00007ff072ecdd8e [ 171.046790][ T6603] RDX: 0000000000000002 RSI: 00007ff071164c00 RDI: ffffffffffffff9c [ 171.046804][ T6603] RBP: 00007ff072fa48b0 R08: 0000000000000000 R09: 0000000000000000 [ 171.046816][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.046828][ T6603] R13: 00007ff073195038 R14: 00007ff073194fa0 R15: 00007ffeeb5da1a8 [ 171.046856][ T6603] [ 171.287741][ T6606] overlayfs: failed to clone upperpath [ 171.561449][ T6608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.349174][ T6620] FAULT_INJECTION: forcing a failure. [ 172.349174][ T6620] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 172.364284][ T6620] CPU: 0 PID: 6620 Comm: syz.5.667 Not tainted syzkaller #0 [ 172.371595][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.381774][ T6620] Call Trace: [ 172.385146][ T6620] [ 172.388091][ T6620] dump_stack_lvl+0x188/0x250 [ 172.392785][ T6620] ? show_regs_print_info+0x20/0x20 [ 172.398031][ T6620] ? load_image+0x410/0x410 [ 172.402891][ T6620] ? mark_lock+0x94/0x320 [ 172.407240][ T6620] should_fail+0x383/0x4b0 [ 172.411676][ T6620] prepare_alloc_pages+0x1e3/0x5b0 [ 172.416830][ T6620] __alloc_pages+0x11b/0x480 [ 172.421439][ T6620] ? zone_statistics+0x170/0x170 [ 172.426399][ T6620] ? rcu_lock_acquire+0x30/0x30 [ 172.431269][ T6620] ? alloc_pages+0x452/0x560 [ 172.435882][ T6620] __get_free_pages+0x8/0x30 [ 172.440535][ T6620] __tlb_remove_page_size+0x1f2/0x3f0 [ 172.445938][ T6620] unmap_page_range+0xfcf/0x2410 [ 172.450920][ T6620] unmap_vmas+0x131/0x250 [ 172.455354][ T6620] ? unmap_page_range+0x2410/0x2410 [ 172.460575][ T6620] ? __mutex_lock_common+0x435/0x2400 [ 172.465967][ T6620] ? exit_mm_release+0x16/0x30 [ 172.470757][ T6620] exit_mmap+0x3b9/0x640 [ 172.475022][ T6620] ? vm_brk+0x20/0x20 [ 172.479026][ T6620] ? uprobe_clear_state+0x2f6/0x460 [ 172.484251][ T6620] __mmput+0x115/0x390 [ 172.488334][ T6620] exit_mm+0x632/0x7b0 [ 172.492414][ T6620] ? perf_pmu_migrate_context+0xb70/0xb70 [ 172.498244][ T6620] ? do_exit+0x2110/0x2110 [ 172.502786][ T6620] ? __ia32_sys_timer_delete+0x40/0x40 [ 172.508262][ T6620] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 172.513797][ T6620] ? tty_audit_exit+0x149/0x1f0 [ 172.518662][ T6620] do_exit+0x5b8/0x2110 [ 172.522839][ T6620] ? put_task_struct+0x80/0x80 [ 172.527614][ T6620] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 172.533615][ T6620] ? _raw_spin_lock_irq+0xb7/0xf0 [ 172.538657][ T6620] do_group_exit+0x12c/0x2f0 [ 172.543268][ T6620] ? lockdep_hardirqs_on+0x94/0x140 [ 172.548578][ T6620] get_signal+0x7eb/0x12e0 [ 172.553042][ T6620] arch_do_signal_or_restart+0xe6/0x12a0 [ 172.558707][ T6620] ? futex_exit_release+0x1c0/0x1c0 [ 172.563923][ T6620] ? get_sigframe_size+0x10/0x10 [ 172.568884][ T6620] ? __context_tracking_exit+0x4c/0x80 [ 172.574368][ T6620] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 172.580369][ T6620] ? exit_to_user_mode_loop+0x3b/0x130 [ 172.586025][ T6620] exit_to_user_mode_loop+0x9e/0x130 [ 172.591328][ T6620] exit_to_user_mode_prepare+0xee/0x180 [ 172.597069][ T6620] syscall_exit_to_user_mode+0x16/0x40 [ 172.602666][ T6620] do_syscall_64+0x58/0xa0 [ 172.607142][ T6620] ? clear_bhb_loop+0x30/0x80 [ 172.611839][ T6620] ? clear_bhb_loop+0x30/0x80 [ 172.616530][ T6620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.622452][ T6620] RIP: 0033:0x7ff072f0d559 [ 172.626890][ T6620] Code: Unable to access opcode bytes at RIP 0x7ff072f0d52f. [ 172.629293][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 172.634258][ T6620] RSP: 002b:00007ff0711650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 172.644677][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 172.648864][ T6620] RAX: 0000000000000001 RBX: 00007ff073194fa8 RCX: 00007ff072f0d559 [ 172.648881][ T6620] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff073194fac [ 172.648891][ T6620] RBP: 00007ff073194fa0 R08: 0011ee50f7f753e0 R09: 0000000000000000 [ 172.648900][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.687911][ T6620] R13: 00007ff073195038 R14: 00007ffeeb5da0c0 R15: 00007ffeeb5da1a8 [ 172.696016][ T6620] [ 172.779168][ T6628] loop4: detected capacity change from 0 to 512 [ 172.935569][ T6628] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 172.963716][ T6628] ext4 filesystem being mounted at /121/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.330801][ T6655] overlayfs: failed to clone upperpath [ 173.684160][ T21] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 174.096711][ T21] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 174.133123][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.146988][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.161126][ T21] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 174.178666][ T6666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.263120][ T21] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 174.272411][ T21] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 174.280976][ T21] usb 6-1: Manufacturer: syz [ 174.286687][ T4261] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 174.294682][ T21] usb 6-1: config 0 descriptor?? [ 174.684166][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.696100][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.704157][ T4316] Bluetooth: hci5: command 0x1001 tx timeout [ 174.707680][ T4261] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 174.724437][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.726908][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 174.734987][ T4261] usb 5-1: config 0 descriptor?? [ 174.972000][ T21] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 175.026108][ T21] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 175.380364][ T21] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 175.419038][ T21] usb 6-1: USB disconnect, device number 7 [ 175.460113][ T6700] fido_id[6700]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 176.365831][ T4261] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 176.372694][ T4261] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 176.379726][ T4261] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 176.387518][ T4261] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 176.395167][ T4261] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 176.401976][ T4261] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 176.409015][ T4261] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 176.418121][ T4261] arvo 0003:1E7D:30D4.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 176.584046][ T4261] arvo 0003:1E7D:30D4.0007: couldn't init struct arvo_device [ 176.594831][ T4261] arvo 0003:1E7D:30D4.0007: couldn't install keyboard [ 176.607145][ T4261] arvo: probe of 0003:1E7D:30D4.0007 failed with error -71 [ 176.628154][ T4261] usb 5-1: USB disconnect, device number 5 [ 176.698522][ T6727] fido_id[6727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 176.762242][ T6732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.783915][ T4265] Bluetooth: hci5: command 0x1009 tx timeout [ 177.063161][ T6735] tipc: Started in network mode [ 177.072620][ T6735] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 177.087922][ T6735] tipc: Enabled bearer , priority 10 [ 177.096975][ T6735] tipc: Enabled bearer , priority 10 [ 177.940141][ T6751] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (98432 ns). Using initial count to start timer. [ 178.426325][ T4265] tipc: Node number set to 4269801491 [ 179.021720][ T6779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.035956][ T6778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.052796][ T6783] loop5: detected capacity change from 0 to 512 [ 179.081874][ T6783] EXT4-fs (loop5): Ignoring removed nobh option [ 179.376794][ T6783] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,nombcache,,errors=continue. Quota mode: writeback. [ 179.503025][ T6783] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.781884][ T6783] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.724: corrupted inode contents [ 179.813304][ T6783] EXT4-fs error (device loop5): ext4_dirty_inode:6087: inode #2: comm syz.5.724: mark_inode_dirty error [ 179.840241][ T6783] EXT4-fs error (device loop5): ext4_do_update_inode:5229: inode #2: comm syz.5.724: corrupted inode contents [ 180.709250][ T6802] netlink: 60 bytes leftover after parsing attributes in process `syz.3.728'. [ 182.239080][ T6826] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 182.308025][ T6826] overlayfs: failed to set xattr on upper [ 182.456397][ T6826] overlayfs: ...falling back to index=off,metacopy=off. [ 182.566848][ T6826] overlayfs: conflicting lowerdir path [ 182.597942][ T6850] loop0: detected capacity change from 0 to 512 [ 182.705040][ T6850] EXT4-fs (loop0): Ignoring removed nobh option [ 182.788542][ T6850] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,nombcache,,errors=continue. Quota mode: writeback. [ 182.806334][ T6850] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.831045][ T6850] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.745: corrupted inode contents [ 182.848389][ T6850] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #2: comm syz.0.745: mark_inode_dirty error [ 182.963063][ T6850] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.745: corrupted inode contents [ 182.974774][ T6861] netlink: 480 bytes leftover after parsing attributes in process `syz.5.750'. [ 184.504299][ T6893] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4688] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6893] [ 186.235275][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 186.254998][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 186.261321][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 186.267903][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 186.696116][ T6949] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6949] [ 187.291808][ T6951] fuse: Bad value for 'fd' [ 188.825616][ T7012] loop0: detected capacity change from 0 to 512 [ 188.860919][ T7012] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 188.894438][ T7012] EXT4-fs (loop0): 1 truncate cleaned up [ 188.900798][ T7012] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 189.853075][ T7025] kvm: emulating exchange as write [ 190.210715][ T7043] loop4: detected capacity change from 0 to 512 [ 190.355316][ T7043] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 190.370651][ T7043] ext4 filesystem being mounted at /142/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.783966][ T4265] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 193.568710][ T7110] usb usb6: usbfs: interface 0 claimed by hub while 'syz.5.842' sets config #0 [ 194.044061][ T4265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.073528][ T4265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.167276][ T4265] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 194.183908][ T4265] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 194.191962][ T4265] usb 5-1: Manufacturer: syz [ 194.212495][ T4265] usb 5-1: config 0 descriptor?? [ 194.228439][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.243267][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.971723][ T7161] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 195.223963][ T4265] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71 [ 195.232936][ T4265] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 195.241099][ T4265] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71 [ 195.249507][ T4265] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 195.257149][ T4265] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 195.268552][ T4265] usb 5-1: USB disconnect, device number 6 [ 195.368768][ T7179] capability: warning: `syz.0.868' uses deprecated v2 capabilities in a way that may be insecure [ 195.612359][ T7184] syz.1.870 (7184) used greatest stack depth: 18432 bytes left [ 196.672366][ T7216] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 197.818585][ T7241] FAULT_INJECTION: forcing a failure. [ 197.818585][ T7241] name failslab, interval 1, probability 0, space 0, times 0 [ 197.884058][ T7241] CPU: 0 PID: 7241 Comm: syz.4.892 Not tainted syzkaller #0 [ 197.891391][ T7241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.901467][ T7241] Call Trace: [ 197.904758][ T7241] [ 197.907699][ T7241] dump_stack_lvl+0x188/0x250 [ 197.912418][ T7241] ? show_regs_print_info+0x20/0x20 [ 197.917659][ T7241] ? load_image+0x410/0x410 [ 197.922186][ T7241] ? __might_sleep+0xf0/0xf0 [ 197.926797][ T7241] ? __lock_acquire+0x7d40/0x7d40 [ 197.931845][ T7241] ? mark_lock+0x94/0x320 [ 197.936299][ T7241] should_fail+0x383/0x4b0 [ 197.940744][ T7241] should_failslab+0x5/0x20 [ 197.945261][ T7241] slab_pre_alloc_hook+0x51/0xc0 [ 197.950313][ T7241] kmem_cache_alloc_trace+0x47/0x290 [ 197.955626][ T7241] ? find_css_set+0x9ca/0x1520 [ 197.960600][ T7241] find_css_set+0x9ca/0x1520 [ 197.965244][ T7241] ? cgroup_migrate_prepare_dst+0xc10/0xc10 [ 197.971262][ T7241] ? mark_lock+0x94/0x320 [ 197.975640][ T7241] cgroup_migrate_prepare_dst+0x114/0xc10 [ 197.981470][ T7241] cgroup_attach_task+0x55d/0x830 [ 197.986497][ T7241] ? cgroup_migrate_execute+0xff0/0xff0 [ 197.992061][ T7241] ? get_task_cred+0x2b6/0x330 [ 197.996820][ T7241] __cgroup1_procs_write+0x2ea/0x3f0 [ 198.002100][ T7241] ? cgroup_pidlist_destroy_work_fn+0x1f0/0x1f0 [ 198.008532][ T7241] ? cgroup_pidlist_stop+0xf0/0xf0 [ 198.013652][ T7241] cgroup_file_write+0x2c4/0x670 [ 198.018668][ T7241] ? read_lock_is_recursive+0x10/0x10 [ 198.024043][ T7241] ? cgroup_seqfile_stop+0xd0/0xd0 [ 198.029170][ T7241] ? cgroup_seqfile_stop+0xd0/0xd0 [ 198.034284][ T7241] kernfs_fop_write_iter+0x3a8/0x500 [ 198.039592][ T7241] vfs_write+0x748/0xd70 [ 198.043966][ T7241] ? file_end_write+0x250/0x250 [ 198.048834][ T7241] ? mutex_lock_nested+0x17/0x20 [ 198.054038][ T7241] ? __fdget_pos+0x2bf/0x370 [ 198.058659][ T7241] ? ksys_write+0x70/0x260 [ 198.063163][ T7241] ksys_write+0x153/0x260 [ 198.067488][ T7241] ? __ia32_sys_read+0x80/0x80 [ 198.072242][ T7241] ? lockdep_hardirqs_on+0x94/0x140 [ 198.077447][ T7241] do_syscall_64+0x4c/0xa0 [ 198.081862][ T7241] ? clear_bhb_loop+0x30/0x80 [ 198.086722][ T7241] ? clear_bhb_loop+0x30/0x80 [ 198.091420][ T7241] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.097526][ T7241] RIP: 0033:0x7fcd546e2559 [ 198.101933][ T7241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.121994][ T7241] RSP: 002b:00007fcd5293a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 198.130411][ T7241] RAX: ffffffffffffffda RBX: 00007fcd54969fa0 RCX: 00007fcd546e2559 [ 198.138376][ T7241] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 198.146352][ T7241] RBP: 00007fcd547798b0 R08: 0000000000000000 R09: 0000000000000000 [ 198.154336][ T7241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.162318][ T7241] R13: 00007fcd5496a038 R14: 00007fcd54969fa0 R15: 00007ffe8ef94898 [ 198.170296][ T7241] [ 198.240634][ T7245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.302583][ T7242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.407541][ T7259] usb usb5: usbfs: process 7259 (syz.4.902) did not claim interface 23 before use [ 198.507846][ T7261] kvm [7260]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x0 [ 198.519921][ T7261] kvm [7260]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x0 [ 199.500973][ T7293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.519872][ T7291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.503025][ T7323] 9pnet: Insufficient options for proto=fd [ 202.903870][ T4265] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 203.274878][ T4265] usb 5-1: config 127 has an invalid interface number: 57 but max is 0 [ 203.316198][ T4265] usb 5-1: config 127 has no interface number 0 [ 203.404066][ T4265] usb 5-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 203.696033][ T4265] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 203.728598][ T4265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.749859][ T4265] usb 5-1: Product: syz [ 203.757678][ T4265] usb 5-1: Manufacturer: syz [ 203.762326][ T4265] usb 5-1: SerialNumber: syz [ 203.804287][ T7414] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 204.065991][ T4265] asix: probe of 5-1:127.57 failed with error -22 [ 204.086125][ T4265] usb 5-1: USB disconnect, device number 7 [ 204.194000][ T4316] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 204.454123][ T4316] usb 6-1: Using ep0 maxpacket: 8 [ 204.605057][ T4316] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.782684][ T4316] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.847423][ T4316] usb 6-1: config 0 interface 0 has no altsetting 0 [ 204.861742][ T4316] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 204.879431][ T4316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.911154][ T4316] usb 6-1: config 0 descriptor?? [ 205.546537][ T4316] input: HID 046d:c623 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C623.0009/input/input16 [ 205.992233][ T4316] logitech 0003:046D:C623.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.5-1/input0 [ 206.205702][ T26] audit: type=1326 audit(1792059334.183:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.4.1020" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd546e2559 code=0x7ffc0000 [ 206.242626][ T7543] FAULT_INJECTION: forcing a failure. [ 206.242626][ T7543] name failslab, interval 1, probability 0, space 0, times 0 [ 206.291480][ T7543] CPU: 1 PID: 7543 Comm: syz.4.1020 Not tainted syzkaller #0 [ 206.298902][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.298933][ T26] audit: type=1326 audit(1792059334.223:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.4.1020" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd546e2559 code=0x7ffc0000 [ 206.309668][ T7543] Call Trace: [ 206.309683][ T7543] [ 206.309693][ T7543] dump_stack_lvl+0x188/0x250 [ 206.309719][ T7543] ? show_regs_print_info+0x20/0x20 [ 206.309737][ T7543] ? load_image+0x410/0x410 [ 206.309756][ T7543] ? __might_sleep+0xf0/0xf0 [ 206.359941][ T7543] ? __lock_acquire+0x7d40/0x7d40 [ 206.365132][ T7543] should_fail+0x383/0x4b0 [ 206.369678][ T7543] should_failslab+0x5/0x20 [ 206.372948][ T26] audit: type=1326 audit(1792059334.223:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.4.1020" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd546e2559 code=0x7ffc0000 [ 206.374279][ T7543] slab_pre_alloc_hook+0x51/0xc0 [ 206.374307][ T7543] kmem_cache_alloc_node+0x47/0x2c0 [ 206.374321][ T7543] ? __alloc_skb+0xf4/0x750 [ 206.374344][ T7543] __alloc_skb+0xf4/0x750 [ 206.374364][ T7543] audit_log_start+0x158/0x870 [ 206.422250][ T7543] ? audit_serial+0x30/0x30 [ 206.426787][ T7543] ? __cant_sleep+0x220/0x220 [ 206.429730][ T26] audit: type=1326 audit(1792059334.223:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.4.1020" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd546e2559 code=0x7ffc0000 [ 206.431478][ T7543] ? futex_wait+0x680/0x680 [ 206.431504][ T7543] audit_seccomp+0x5f/0x180 [ 206.464486][ T7543] __seccomp_filter+0xa66/0x1a00 [ 206.469452][ T7543] ? __secure_computing+0x2f0/0x2f0 [ 206.474688][ T7543] ? __context_tracking_exit+0x4c/0x80 [ 206.480170][ T7543] ? __lock_acquire+0x7d40/0x7d40 [ 206.480859][ T26] audit: type=1326 audit(1792059334.223:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.4.1020" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcd546e2559 code=0x7ffc0000 [ 206.485216][ T7543] ? lock_chain_count+0x20/0x20 [ 206.485240][ T7543] ? __secure_computing+0x10d/0x2f0 [ 206.485261][ T7543] syscall_trace_enter+0xd0/0x180 [ 206.485279][ T7543] do_syscall_64+0x24/0xa0 [ 206.485296][ T7543] ? clear_bhb_loop+0x30/0x80 [ 206.485314][ T7543] ? clear_bhb_loop+0x30/0x80 [ 206.485332][ T7543] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.485352][ T7543] RIP: 0033:0x7fcd546e2559 [ 206.485377][ T7543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.485391][ T7543] RSP: 002b:00007fcd5293a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 206.485411][ T7543] RAX: ffffffffffffffda RBX: 00007fcd54969fa8 RCX: 00007fcd546e2559 [ 206.485424][ T7543] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcd54969fa8 [ 206.485435][ T7543] RBP: 00007fcd54969fa0 R08: 0000000000000000 R09: 0000000000000000 [ 206.485446][ T7543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.485455][ T7543] R13: 00007fcd5496a038 R14: 00007ffe8ef947b0 R15: 00007ffe8ef94898 [ 206.485476][ T7543] [ 206.623108][ T26] audit: type=1326 audit(1792059334.223:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.4.1020" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd546e2559 code=0x7ffc0000 [ 206.660921][ T7543] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 206.670067][ T7543] audit: out of memory in audit_log_start [ 206.680387][ T26] audit: type=1326 audit(1792059334.663:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.4.1020" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fcd546e2559 code=0x7ffc0000 [ 206.711866][ T26] audit: type=1326 audit(1792059334.693:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.4.1020" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd546e2559 code=0x7ffc0000 [ 207.352033][ T4316] usb 6-1: USB disconnect, device number 8 [ 207.581698][ T7568] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1029'. [ 208.513824][ T13] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 209.034340][ T13] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 209.075692][ T13] usb 6-1: config 0 has no interface number 0 [ 209.213706][ T7629] rxe_eth0 speed is unknown, defaulting to 1000 [ 209.251385][ T13] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.264313][ T13] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.279072][ T13] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.294342][ T13] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 209.308740][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.323605][ T13] usb 6-1: config 0 descriptor?? [ 210.099754][ T13] uclogic 0003:28BD:0042.000A: failed retrieving string descriptor #100: -71 [ 210.118435][ T13] uclogic 0003:28BD:0042.000A: failed retrieving pen parameters: -71 [ 210.198935][ T13] uclogic 0003:28BD:0042.000A: pen probing failed: -71 [ 210.274070][ T13] uclogic 0003:28BD:0042.000A: failed probing parameters: -71 [ 210.284089][ T13] uclogic: probe of 0003:28BD:0042.000A failed with error -71 [ 210.550328][ T13] usb 6-1: USB disconnect, device number 9 [ 210.787162][ T7687] ------------[ cut here ]------------ [ 210.808327][ T7687] fmt: 'level=%s [ 210.808327][ T7687] ' current_buffer: ' <...>-4616 [001] ..... 83.731492: dwc3_ctrl_req: Get Device Status(Length = 0) [ 210.808327][ T7687] <...>-1970561396 [001] .p.35 83.786785: Unknown type 25955 [ 210.808327][ T7687] -0 [001] ..... 83.812017: initcall_level: level=' [ 210.808441][ T7687] WARNING: CPU: 0 PID: 7687 at kernel/trace/trace.c:3867 trace_check_vprintf+0xd4a/0x1080 [ 210.875270][ T7687] Modules linked in: [ 210.879229][ T7687] CPU: 1 PID: 7687 Comm: syz.5.1078 Not tainted syzkaller #0 [ 210.921889][ T7687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.942889][ T7687] RIP: 0010:trace_check_vprintf+0xd4a/0x1080 [ 210.949441][ T7687] Code: e8 3b 41 fc ff c6 05 37 8b da 0c 01 48 8b 7c 24 40 e8 5a 04 00 00 48 c7 c7 40 3f 2f 8a 48 8b 74 24 60 48 89 c2 e8 86 47 3a 08 <0f> 0b e9 1c fe ff ff 48 8b 4c 24 38 80 e1 07 38 c1 0f 8c ca f7 ff [ 211.018559][ T7687] RSP: 0018:ffffc90003607a20 EFLAGS: 00010246 [ 211.051534][ T7687] RAX: 33d79d9fa566ce00 RBX: 0000000000000000 RCX: 0000000000080000 [ 211.076942][ T7687] RDX: ffffc90013ec9000 RSI: 0000000000008b27 RDI: 0000000000008b28 [ 211.085143][ T7687] RBP: ffff88804fc400d8 R08: ffff8880b8e2795b R09: 1ffff110171c4f2b [ 211.093609][ T7687] R10: dffffc0000000000 R11: ffffed10171c4f2c R12: ffffffff8a200540 [ 211.101694][ T7687] R13: ffffc90003607b60 R14: dffffc0000000000 R15: 0000000000000002 [ 211.109777][ T7687] FS: 00007ff0711656c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 211.118886][ T7687] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.125559][ T7687] CR2: 00007fc1ffb8fff8 CR3: 00000000764b8000 CR4: 00000000003506f0 [ 211.133565][ T7687] Call Trace: [ 211.137039][ T7687] [ 211.141429][ T7687] trace_event_printf+0xea/0x140 [ 211.180580][ T7687] ? trace_print_seq+0x160/0x160 [ 211.422147][ T7687] ? trace_raw_output_prep+0x200/0x200 [ 211.554944][ T7687] trace_raw_output_initcall_level+0x93/0xd0 [ 211.754059][ T7687] tracing_read_pipe+0x52f/0xae0 [ 211.831773][ T7687] ? s_show+0x300/0x300 [ 211.845351][ T7687] vfs_read+0x2ff/0xd50 [ 211.849682][ T7687] ? __lock_acquire+0x7d40/0x7d40 [ 211.865460][ T7687] ? kernel_read+0x1e0/0x1e0 [ 211.870128][ T7687] ? mutex_lock_nested+0x17/0x20 [ 211.884088][ T7687] ? __fdget_pos+0x2bf/0x370 [ 211.888731][ T7687] ? ksys_read+0x70/0x260 [ 211.893093][ T7687] ksys_read+0x153/0x260 [ 211.906915][ T7687] ? vfs_write+0xd70/0xd70 [ 211.911457][ T7687] ? lockdep_hardirqs_on+0x94/0x140 [ 211.917746][ T7687] do_syscall_64+0x4c/0xa0 [ 211.922198][ T7687] ? clear_bhb_loop+0x30/0x80 [ 211.926994][ T7687] ? clear_bhb_loop+0x30/0x80 [ 211.931782][ T7687] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 211.941764][ T7687] RIP: 0033:0x7ff072f0d559 [ 211.946404][ T7687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.970436][ T7687] RSP: 002b:00007ff071165028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.978980][ T7687] RAX: ffffffffffffffda RBX: 00007ff073194fa0 RCX: 00007ff072f0d559 [ 211.988134][ T7687] RDX: 0000000000004000 RSI: 0000200000002200 RDI: 0000000000000004 [ 211.996367][ T7687] RBP: 00007ff072fa48b0 R08: 0000000000000000 R09: 0000000000000000 [ 212.004461][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.012437][ T7687] R13: 00007ff073195038 R14: 00007ff073194fa0 R15: 00007ffeeb5da1a8 [ 212.020562][ T7687] [ 212.023595][ T7687] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 212.030859][ T7687] CPU: 1 PID: 7687 Comm: syz.5.1078 Not tainted syzkaller #0 [ 212.038237][ T7687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.048322][ T7687] Call Trace: [ 212.051600][ T7687] [ 212.054523][ T7687] dump_stack_lvl+0x188/0x250 [ 212.059201][ T7687] ? show_regs_print_info+0x20/0x20 [ 212.064398][ T7687] ? load_image+0x410/0x410 [ 212.068938][ T7687] panic+0x2f8/0x850 [ 212.072838][ T7687] ? bpf_jit_dump+0xd0/0xd0 [ 212.077346][ T7687] ? trace_check_vprintf+0xd4a/0x1080 [ 212.082711][ T7687] __warn+0x248/0x2b0 [ 212.086680][ T7687] ? trace_check_vprintf+0xd4a/0x1080 [ 212.092044][ T7687] report_bug+0x1b9/0x2e0 [ 212.096369][ T7687] handle_bug+0x3a/0x70 [ 212.100521][ T7687] exc_invalid_op+0x16/0x40 [ 212.105010][ T7687] asm_exc_invalid_op+0x16/0x20 [ 212.109848][ T7687] RIP: 0010:trace_check_vprintf+0xd4a/0x1080 [ 212.115849][ T7687] Code: e8 3b 41 fc ff c6 05 37 8b da 0c 01 48 8b 7c 24 40 e8 5a 04 00 00 48 c7 c7 40 3f 2f 8a 48 8b 74 24 60 48 89 c2 e8 86 47 3a 08 <0f> 0b e9 1c fe ff ff 48 8b 4c 24 38 80 e1 07 38 c1 0f 8c ca f7 ff [ 212.135444][ T7687] RSP: 0018:ffffc90003607a20 EFLAGS: 00010246 [ 212.141553][ T7687] RAX: 33d79d9fa566ce00 RBX: 0000000000000000 RCX: 0000000000080000 [ 212.149796][ T7687] RDX: ffffc90013ec9000 RSI: 0000000000008b27 RDI: 0000000000008b28 [ 212.157776][ T7687] RBP: ffff88804fc400d8 R08: ffff8880b8e2795b R09: 1ffff110171c4f2b [ 212.165740][ T7687] R10: dffffc0000000000 R11: ffffed10171c4f2c R12: ffffffff8a200540 [ 212.173703][ T7687] R13: ffffc90003607b60 R14: dffffc0000000000 R15: 0000000000000002 [ 212.181697][ T7687] trace_event_printf+0xea/0x140 [ 212.186766][ T7687] ? trace_print_seq+0x160/0x160 [ 212.191734][ T7687] ? trace_raw_output_prep+0x200/0x200 [ 212.197224][ T7687] trace_raw_output_initcall_level+0x93/0xd0 [ 212.203249][ T7687] tracing_read_pipe+0x52f/0xae0 [ 212.208186][ T7687] ? s_show+0x300/0x300 [ 212.212428][ T7687] vfs_read+0x2ff/0xd50 [ 212.216595][ T7687] ? __lock_acquire+0x7d40/0x7d40 [ 212.221633][ T7687] ? kernel_read+0x1e0/0x1e0 [ 212.226236][ T7687] ? mutex_lock_nested+0x17/0x20 [ 212.231613][ T7687] ? __fdget_pos+0x2bf/0x370 [ 212.236364][ T7687] ? ksys_read+0x70/0x260 [ 212.240682][ T7687] ksys_read+0x153/0x260 [ 212.244912][ T7687] ? vfs_write+0xd70/0xd70 [ 212.249319][ T7687] ? lockdep_hardirqs_on+0x94/0x140 [ 212.254955][ T7687] do_syscall_64+0x4c/0xa0 [ 212.259363][ T7687] ? clear_bhb_loop+0x30/0x80 [ 212.264113][ T7687] ? clear_bhb_loop+0x30/0x80 [ 212.268781][ T7687] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 212.274665][ T7687] RIP: 0033:0x7ff072f0d559 [ 212.279075][ T7687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.298671][ T7687] RSP: 002b:00007ff071165028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.307168][ T7687] RAX: ffffffffffffffda RBX: 00007ff073194fa0 RCX: 00007ff072f0d559 [ 212.315397][ T7687] RDX: 0000000000004000 RSI: 0000200000002200 RDI: 0000000000000004 [ 212.323364][ T7687] RBP: 00007ff072fa48b0 R08: 0000000000000000 R09: 0000000000000000 [ 212.331328][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.339292][ T7687] R13: 00007ff073195038 R14: 00007ff073194fa0 R15: 00007ffeeb5da1a8 [ 212.347366][ T7687] [ 212.350673][ T7687] Kernel Offset: disabled [ 212.361052][ T7687] Rebooting in 86400 seconds..