last executing test programs: 6.54449856s ago: executing program 4 (id=1053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x2d) 6.51456831s ago: executing program 4 (id=1055): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdir(&(0x7f00000005c0)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='mnt\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000680)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303a501845bd36e336734956c718643b6ec65ce83d95034ea4ac502f84b2c3044e5da763f5c58e20b19b85507db3c1f5a574163ad8eb059513c88336cff11fe"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000780)='mnt/ttyUSB0\x00', 0x44002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x1, 0x110, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000b80)=@mgmt_frame=@probe_response={{{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x4, 0x7, 0x5, 0x1}}, @void, @void, @void, @void}, 0x36) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 3.311210459s ago: executing program 4 (id=1100): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) 3.251048531s ago: executing program 4 (id=1101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000002c0), 0x208e24b) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000480)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.719080614s ago: executing program 4 (id=1111): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0xcc, 0xc, 0x1010}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00 ', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80, 0x1000}}}}}}}, 0x0) 2.632327366s ago: executing program 4 (id=1113): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x84) pwrite64(r2, &(0x7f0000000000)='2', 0x1, 0x84fed0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x35) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x4000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x2) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x24, &(0x7f0000000140)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0xc0085508, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200778931215d064f6e4196ff6e69311c3cb3a5c0e6033d926e02ac69bb3c7d9f4d1d82e6b30c9a5bf151d915901eff348a3493d3502496eddcf9ee2e6c8d51c417e0f3c4e73c29ef987fef6f328370b16d7c4e7f0a08590151b7f4654ad560a5a36f1978dd7414d966376d97429b7c31058f2614fe11602a875267821490b44e273fa648167c981d2728ab61b0eede1083a1df56bf91fc22a963e2ceefdb141d5c3c9adf3d2b42b1debf530e620fa9be00a292247ac05addb62e1c0a9f0697425950a29fa12746442c9e158db5cda85ea84c7c91e00333c6ac136161a3047ed6a9bb16583dcb8ac18091", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRESDEC=r5, @ANYBLOB="0000000002000020b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x41100, 0x5}, 0x94) write(0xffffffffffffffff, &(0x7f0000000340)='!Hm', 0x3) close(0x3) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x0, 0x238, 0xfeffffff, 0x0, 0x0, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x3, @broadcast, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x220}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @dev, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@devgroup={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x2, 0x9}}) 1.826049856s ago: executing program 3 (id=1117): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x8, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002218000000050c04a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000600), 0xa, 0x62080) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, 0x0) 1.592484952s ago: executing program 2 (id=1123): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0xcc, 0xc, 0x1010}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00 ', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80, 0x1000}}}}}}}, 0x0) 1.569776532s ago: executing program 1 (id=1124): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000001280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x130, 0x0, 0x4, {0x2, 0x0, 0x0, '\x00', {0x200, 0x1, 0x1, 0x800, 0xee01, r2, 0x2000, '\x00', 0xd, 0x1ca, 0xb4ed, 0x8, {0x88009, 0xfffffff9}, {0x8c7, 0x7f4a}, {0x4, 0x9}, {0x8, 0x9}, 0x7fff, 0x4, 0x0, 0x9}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x22400181, 0x785, 0x3, 0x1, 0x4}}, 0x50) 1.533238733s ago: executing program 1 (id=1125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x5, &(0x7f0000000140)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8, 0x4}, {0x0, 0x0, 0x8}, {0x2, 0x0, 0x8}, {0x6, 0x0, 0x0, 0x10000000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pimreg0\x00', 0x7c2}) 1.428513176s ago: executing program 1 (id=1126): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002400)=[{&(0x7f0000002440)=""/4091, 0xffb}], 0x1, 0x29, 0x6) 1.428085086s ago: executing program 2 (id=1127): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x1ff) mount(&(0x7f0000000000)=@sg0, &(0x7f00000004c0)='./trace\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./trace/trace\x00', 0x0, 0x0) read(r5, &(0x7f00000005c0), 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000640)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/custom0\x00', 0x6, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, 0x0, 0x0) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000380)=[{&(0x7f00000005c0)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x8001}, 0xa) 1.368015297s ago: executing program 1 (id=1128): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000000)) 1.071617864s ago: executing program 1 (id=1129): syz_usb_connect(0x0, 0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082403010002100708240201000400", @ANYBLOB="03a9fe"], 0x0) 780.547051ms ago: executing program 3 (id=1130): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 603.129686ms ago: executing program 0 (id=1132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = dup2(r1, r1) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x1000}) 512.380458ms ago: executing program 3 (id=1133): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x3, @any, 0x0, 0x1}, 0xe) 510.298078ms ago: executing program 2 (id=1134): r0 = syz_open_dev$loop(&(0x7f0000000540), 0x9, 0xa0401) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000)) 416.52465ms ago: executing program 0 (id=1135): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x20, 0x0, 0x7, {[@cipso={0x86, 0x8, 0xffffffffffffffff, [{0x5, 0x46}]}, @cipso={0x86, 0x6}]}}}], 0x20}}], 0x1, 0x8090) 416.304401ms ago: executing program 3 (id=1136): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r1, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f00000006c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0xe}}, 0xfffffe8f) 416.12983ms ago: executing program 2 (id=1137): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0xcc, 0xc, 0x1010}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00 ', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80, 0x1000}}}}}}}, 0x0) 416.01429ms ago: executing program 3 (id=1138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r1, 0x421, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40805}, 0x400d4) 388.536431ms ago: executing program 0 (id=1139): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000002040)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002080)={r0, 0x2800000002000000, 0xd, 0x55, &(0x7f0000002100)="a06ad876d56a0064d082778c39", &(0x7f0000002140)=""/85, 0x600, 0x4000000, 0x0, 0x0, &(0x7f00000021c0), &(0x7f0000002200)}, 0x50) 360.717362ms ago: executing program 0 (id=1140): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000000)) 255.591405ms ago: executing program 2 (id=1141): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1a8) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000200)='7', 0x1) futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) 49.13271ms ago: executing program 3 (id=1142): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x80) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x29414fdd1d35f159, &(0x7f0000000040), &(0x7f00000000c0)=0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getrusage(0x1, &(0x7f0000003ec0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) syz_open_dev$tty20(0xc, 0x4, 0x0) 46.7325ms ago: executing program 0 (id=1143): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 460.111µs ago: executing program 1 (id=1144): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x1ff) mount(&(0x7f0000000000)=@sg0, &(0x7f00000004c0)='./trace\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./trace/trace\x00', 0x0, 0x0) read(r5, &(0x7f00000005c0), 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000640)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/custom0\x00', 0x6, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe2500"}, 0xd8) bind$inet6(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000380)=[{&(0x7f00000005c0)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x8001}, 0xa) 93.16µs ago: executing program 0 (id=1145): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000380), &(0x7f0000002580)='./file0\x00', 0x400, &(0x7f00000025c0)=ANY=[], 0x0, 0x1cc, &(0x7f00000046c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000004900)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004940)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000004980)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000049c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000004a00)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000004a80), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004b00)=0x6) semget(0x1, 0x5, 0x6b4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000004b40)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000004b80)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000004bc0), 0x0, 0x44044) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000004c00)=@req3={0x3, 0x2, 0xb290, 0x5, 0x7, 0x8, 0xfffffffa}, 0x1) 0s ago: executing program 2 (id=1146): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt/trace_marker\x00', 0x1, 0x5a) write(r0, &(0x7f0000000100)="2d25c873c6d0ff57318d8185a94d488b38f0fcd9", 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f0000002200)=""/16384, 0x4000) kernel console output (not intermixed with test programs): 0: Adding interface: batadv_slave_0 [ 55.109818][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.136126][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.150873][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.157925][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.183842][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.250041][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.257209][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.283991][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.283997][ T3518] Bluetooth: hci1: command 0x0409 tx timeout [ 55.295027][ T26] Bluetooth: hci0: command 0x0409 tx timeout [ 55.301224][ T3518] Bluetooth: hci4: command 0x0409 tx timeout [ 55.312675][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.312724][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.313601][ T4189] device bridge_slave_0 entered promiscuous mode [ 55.338723][ T26] Bluetooth: hci2: command 0x0409 tx timeout [ 55.342627][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.351784][ T3518] Bluetooth: hci3: command 0x0409 tx timeout [ 55.352296][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.383990][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.395453][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.402784][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.410637][ T4189] device bridge_slave_1 entered promiscuous mode [ 55.455882][ T4188] device hsr_slave_0 entered promiscuous mode [ 55.463538][ T4188] device hsr_slave_1 entered promiscuous mode [ 55.470713][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.478490][ T4188] Cannot create hsr debugfs directory [ 55.529259][ T4186] device hsr_slave_0 entered promiscuous mode [ 55.536201][ T4186] device hsr_slave_1 entered promiscuous mode [ 55.542969][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.550504][ T4186] Cannot create hsr debugfs directory [ 55.575147][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.586346][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.642524][ T4189] team0: Port device team_slave_0 added [ 55.655748][ T4189] team0: Port device team_slave_1 added [ 55.691727][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.698679][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.725036][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.763031][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.769990][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.796146][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.848251][ T4189] device hsr_slave_0 entered promiscuous mode [ 55.855119][ T4189] device hsr_slave_1 entered promiscuous mode [ 55.863622][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.871162][ T4189] Cannot create hsr debugfs directory [ 55.877693][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.888459][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.897377][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.928906][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.972888][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.987062][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.999591][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.017482][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.078425][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.088670][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.097953][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.107320][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.157534][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.178762][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.208382][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.227213][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.242674][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.275716][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.288376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.297670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.308468][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.326322][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.333993][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.344429][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.353564][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.363068][ T510] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.370270][ T510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.378951][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.387053][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.395636][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.420902][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.430708][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.442419][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.450680][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.457768][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.465454][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.474564][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.483881][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.493528][ T1377] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.500546][ T1377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.508562][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.517459][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.525916][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.532979][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.541171][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.549835][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.560239][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.580501][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.589851][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.612815][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.621237][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.630352][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.639388][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.649207][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.658199][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.666827][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.675533][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.692687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.703126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.712233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.720663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.732904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.750261][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.762006][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.773127][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.790836][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.803054][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.819219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.837828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.858105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.868142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.878450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.887277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.896375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.904529][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.914228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.930295][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.948814][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.982703][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.991144][ T1377] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.998245][ T1377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.007635][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.037661][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.050047][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.059349][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.066490][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.074837][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.084006][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.108571][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.124112][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.134060][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.142172][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.150678][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.161698][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.175748][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.185991][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.194850][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.202670][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.210013][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.219397][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.238749][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.254920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.263591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.274186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.281925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.289516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.297791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.323707][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.332490][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.340751][ T510] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.347823][ T510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.356921][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 57.360170][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.363459][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 57.363567][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 57.385892][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.394263][ T510] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.401343][ T510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.408911][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.417997][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.427350][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.435103][ T4265] Bluetooth: hci3: command 0x041b tx timeout [ 57.442109][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.451505][ T4265] Bluetooth: hci2: command 0x041b tx timeout [ 57.461341][ T4190] device veth0_vlan entered promiscuous mode [ 57.473370][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.483499][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.491894][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.500314][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.509085][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.523024][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.544204][ T4190] device veth1_vlan entered promiscuous mode [ 57.552616][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.560803][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.577211][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.587743][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.597137][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.606986][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.615496][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.624936][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.633350][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.646584][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.661889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.669808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.685253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.719538][ T4187] device veth0_vlan entered promiscuous mode [ 57.727052][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.736193][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.746260][ T510] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.753341][ T510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.761213][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.770758][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.779779][ T510] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.786854][ T510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.795528][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.804106][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.812399][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.820756][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.829164][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.837025][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.851181][ T4190] device veth0_macvtap entered promiscuous mode [ 57.871640][ T4190] device veth1_macvtap entered promiscuous mode [ 57.887399][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.898135][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.906965][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.916186][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.927035][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.935550][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.944556][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.953329][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.962119][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.970526][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.979002][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.987275][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.996750][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.004525][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.012084][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.020109][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.034142][ T4187] device veth1_vlan entered promiscuous mode [ 58.041005][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.055653][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.066774][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.078266][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.092849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.101605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.109763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.118726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.136905][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.168420][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.177897][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.187919][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.200045][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.222415][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.244700][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.254659][ T4187] device veth0_macvtap entered promiscuous mode [ 58.265647][ T4187] device veth1_macvtap entered promiscuous mode [ 58.281174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.302564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.310825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.327211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.344051][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.367763][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.376844][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.388368][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.405597][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.416458][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.427911][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.439096][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.449981][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.462071][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.473158][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.482605][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.491695][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.500482][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.523437][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.533135][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.542357][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.551046][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.560772][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.579070][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.588070][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.597283][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.605174][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.619105][ T4186] device veth0_vlan entered promiscuous mode [ 58.635575][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.647940][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.656900][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.666610][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.674106][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.682605][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.694883][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.744595][ T4186] device veth1_vlan entered promiscuous mode [ 58.757732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.772372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.784069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.848072][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.877143][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.893219][ T4188] device veth0_vlan entered promiscuous mode [ 58.899487][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.909649][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.922327][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.930721][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.940488][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.954292][ T4186] device veth0_macvtap entered promiscuous mode [ 58.970884][ T4188] device veth1_vlan entered promiscuous mode [ 58.986592][ T4186] device veth1_macvtap entered promiscuous mode [ 58.997417][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.005531][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.014343][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.022440][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.030415][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.038810][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.062623][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.070654][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.079795][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.098197][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.106304][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.117075][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.118916][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.128688][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.145443][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.157432][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.168495][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.179055][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.189020][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.200161][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.211163][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.220587][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.229123][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.237840][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.246514][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.255256][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.278051][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.291598][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.321779][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.330502][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.339526][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.348640][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.370981][ T4189] device veth0_vlan entered promiscuous mode [ 59.384417][ T4188] device veth0_macvtap entered promiscuous mode [ 59.398899][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.399277][ T1377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.409096][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.423259][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.428694][ T1377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.431906][ T4297] Bluetooth: hci1: command 0x040f tx timeout [ 59.445281][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.453125][ T4297] Bluetooth: hci4: command 0x040f tx timeout [ 59.459186][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.459212][ T4297] Bluetooth: hci0: command 0x040f tx timeout [ 59.467092][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.493588][ T4189] device veth1_vlan entered promiscuous mode [ 59.505304][ T4188] device veth1_macvtap entered promiscuous mode [ 59.512202][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 59.518273][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 59.535912][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.546580][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.579632][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.599008][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.614631][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.625464][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.635516][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.646174][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.662688][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.670054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.682800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.690792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.698807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.706880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.715781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.743902][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.765301][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.777281][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.787963][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.797904][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.808465][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.829291][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.852109][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.868570][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.892660][ T4189] device veth0_macvtap entered promiscuous mode [ 59.914387][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.927360][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.936957][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.950893][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.978374][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.987273][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.002623][ T4309] loop1: detected capacity change from 0 to 8 [ 60.004095][ T4189] device veth1_macvtap entered promiscuous mode [ 60.038674][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.047058][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.067053][ T1377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.085792][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.129580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.242479][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.264196][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.281995][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.293044][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.329481][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.352835][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.377750][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.405500][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.439131][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.503131][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.522576][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.583249][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.595080][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.610560][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.622092][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.633113][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.644431][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.654640][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.665379][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.680906][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.724310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.744361][ T4315] loop1: detected capacity change from 0 to 512 [ 60.750767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.772177][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.780016][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.793905][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.809581][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.866161][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.885252][ T4308] loop2: detected capacity change from 0 to 1024 [ 60.891478][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.917605][ T4315] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 60.930843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.976743][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.985543][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.018578][ T4315] EXT4-fs (loop1): 1 truncate cleaned up [ 61.042354][ T4315] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 61.067236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.172695][ T4321] loop0: detected capacity change from 0 to 512 [ 61.256557][ T1377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.267632][ T1377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.357194][ T4323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 61.454921][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.517738][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.651326][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.659557][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.683482][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 61.689840][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.697392][ T1108] Bluetooth: hci4: command 0x0419 tx timeout [ 61.703518][ T1108] Bluetooth: hci1: command 0x0419 tx timeout [ 61.709558][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 61.727890][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 61.744025][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.755085][ T4321] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 61.794064][ T510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.801615][ T4321] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.875624][ T4321] EXT4-fs (loop0): 1 truncate cleaned up [ 61.891005][ T4321] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 62.029518][ T4338] loop1: detected capacity change from 0 to 512 [ 62.089656][ T4338] EXT4-fs (loop1): Ignoring removed nobh option [ 62.097333][ T4338] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.119451][ T4338] EXT4-fs (loop1): 1 truncate cleaned up [ 62.129002][ T4338] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 62.282122][ T4346] loop3: detected capacity change from 0 to 2048 [ 62.318694][ T4346] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 62.332259][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.369090][ T4346] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 62.515210][ T4348] loop1: detected capacity change from 0 to 512 [ 62.570072][ T4348] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 62.624891][ T4348] EXT4-fs (loop1): 1 truncate cleaned up [ 62.661454][ T4348] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 62.712546][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.740370][ T7] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 62.786350][ T7] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 62.838437][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.933910][ T7] usb 5-1: config 0 descriptor?? [ 63.056461][ T25] audit: type=1800 audit(1792059188.094:2): pid=4359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 63.144290][ T4346] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 290816 lbcount: 294912 extent 129+259584 [ 63.508742][ T7] usb 5-1: USB disconnect, device number 2 [ 63.621873][ T4363] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.665844][ T4365] fuse: Bad value for 'fd' [ 63.848067][ T4370] loop3: detected capacity change from 0 to 256 [ 64.201295][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 64.221292][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 64.231285][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 64.241283][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 64.251285][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 64.261284][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 64.271283][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 64.281282][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 64.291280][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 64.301291][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 64.971003][ T4374] netlink: 'syz.0.18': attribute type 12 has an invalid length. [ 65.115920][ T4379] loop3: detected capacity change from 0 to 256 [ 65.212698][ T4379] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.231517][ T4379] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 65.270477][ T4379] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 65.289577][ T4386] loop2: detected capacity change from 0 to 512 [ 65.401440][ T1108] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 65.412686][ T4386] EXT4-fs (loop2): 1 truncate cleaned up [ 65.425188][ T4386] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 65.502661][ T4267] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.547876][ T4386] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.22: bg 0: block 465: padding at end of block bitmap is not set [ 65.712390][ T4386] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 65.748698][ T4397] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 65.761395][ T4397] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.761395][ T4397] [ 65.774919][ T4397] EXT4-fs (loop2): Total free blocks count 0 [ 65.780989][ T4397] EXT4-fs (loop2): Free/Dirty block details [ 65.787511][ T4397] EXT4-fs (loop2): free_blocks=0 [ 65.811055][ T4397] EXT4-fs (loop2): dirty_blocks=2 [ 65.811553][ T1108] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 65.821309][ T4386] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.821309][ T4386] [ 65.845975][ T1108] usb 2-1: config 0 has no interface number 0 [ 65.888526][ T4397] EXT4-fs (loop2): Block reservation details [ 65.900343][ T4397] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 66.022245][ T1108] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 66.049462][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.060170][ T1108] usb 2-1: Product: syz [ 66.094752][ T1108] usb 2-1: Manufacturer: syz [ 66.131442][ T1108] usb 2-1: SerialNumber: syz [ 66.167736][ T1108] usb 2-1: config 0 descriptor?? [ 66.304611][ T4415] loop4: detected capacity change from 0 to 512 [ 68.187894][ T4415] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.606011][ T4429] loop2: detected capacity change from 0 to 4096 [ 68.752110][ T1108] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 68.778876][ T1108] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 68.826736][ T1108] asix: probe of 2-1:0.251 failed with error -5 [ 68.858410][ T4432] capability: warning: `syz.0.31' uses deprecated v2 capabilities in a way that may be insecure [ 68.883088][ T4429] EXT4-fs (loop2): Unrecognized mount option "smackfsroot=($" or missing value [ 68.912831][ T4415] EXT4-fs (loop4): 1 truncate cleaned up [ 68.928710][ T4415] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.046887][ T4438] fuse: Bad value for 'fd' [ 69.150631][ T4444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.34'. [ 69.331751][ T4454] loop3: detected capacity change from 0 to 256 [ 69.377085][ T4458] loop2: detected capacity change from 0 to 1024 [ 69.454225][ T4454] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 70.059855][ T4484] loop3: detected capacity change from 0 to 128 [ 70.131145][ T4278] usb 2-1: USB disconnect, device number 2 [ 70.204192][ T4490] loop1: detected capacity change from 0 to 2048 [ 70.261605][ T4194] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 70.276199][ T4490] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 70.367250][ T4498] loop3: detected capacity change from 0 to 1024 [ 70.607146][ T4194] usb 3-1: not running at top speed; connect to a high speed hub [ 70.704890][ T4194] usb 3-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 70.720258][ T4194] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 70.729980][ T4194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.814086][ T4194] usb 3-1: Found UVC 1.00 device (046d:0825) [ 70.824872][ T4194] usb 3-1: No streaming interface found for terminal 2. [ 71.030363][ T4194] usb 3-1: USB disconnect, device number 2 [ 71.060898][ T4513] loop3: detected capacity change from 0 to 512 [ 71.158832][ T4513] EXT4-fs (loop3): Ignoring removed nobh option [ 71.184949][ T4513] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.55: invalid indirect mapped block 256 (level 2) [ 71.212511][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.219287][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.241083][ T4513] EXT4-fs (loop3): 2 truncates cleaned up [ 71.246968][ T4513] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 71.290455][ T4518] loop1: detected capacity change from 0 to 256 [ 71.614013][ T4515] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 73.025628][ T4561] loop3: detected capacity change from 0 to 512 [ 73.057180][ T4561] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.275674][ T4561] EXT4-fs (loop3): 1 truncate cleaned up [ 73.307298][ T4561] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.456620][ T4588] loop4: detected capacity change from 0 to 512 [ 74.509806][ T4588] EXT4-fs (loop4): Ignoring removed nobh option [ 74.565675][ T4588] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.665271][ T4588] EXT4-fs (loop4): 1 truncate cleaned up [ 74.692301][ T4588] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 75.321048][ T4611] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.329220][ T4611] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.394074][ T4616] loop2: detected capacity change from 0 to 256 [ 75.405700][ T4611] device bridge_slave_1 left promiscuous mode [ 75.420551][ T4611] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.077084][ T4616] ======================================================= [ 76.077084][ T4616] WARNING: The mand mount option has been deprecated and [ 76.077084][ T4616] and is ignored by this kernel. Remove the mand [ 76.077084][ T4616] option from the mount to silence this warning. [ 76.077084][ T4616] ======================================================= [ 76.093230][ T4611] device bridge_slave_0 left promiscuous mode [ 76.151527][ T4616] exfat: Bad value for 'uid' [ 76.173143][ T4611] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.365867][ T4631] loop2: detected capacity change from 0 to 512 [ 76.384328][ T4632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 76.441053][ T4631] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 76.498187][ T4631] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.94: invalid indirect mapped block 256 (level 1) [ 76.617810][ T4631] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.94: invalid indirect mapped block 2683928664 (level 1) [ 76.687699][ T4631] EXT4-fs (loop2): 1 truncate cleaned up [ 76.710498][ T4631] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 77.368644][ T4644] loop1: detected capacity change from 0 to 512 [ 77.459980][ T4644] EXT4-fs (loop1): Ignoring removed nobh option [ 77.494136][ T4644] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.581909][ T4649] Zero length message leads to an empty skb [ 77.588767][ T4644] EXT4-fs (loop1): 1 truncate cleaned up [ 77.621071][ T4644] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 77.866572][ T4667] loop4: detected capacity change from 0 to 256 [ 77.887242][ T4666] FAULT_INJECTION: forcing a failure. [ 77.887242][ T4666] name failslab, interval 1, probability 0, space 0, times 1 [ 77.906209][ T4666] CPU: 1 PID: 4666 Comm: syz.2.105 Not tainted syzkaller #0 [ 77.913530][ T4666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.923690][ T4666] Call Trace: [ 77.926973][ T4666] [ 77.929904][ T4666] dump_stack_lvl+0x188/0x250 [ 77.934603][ T4666] ? show_regs_print_info+0x20/0x20 [ 77.939807][ T4666] ? load_image+0x410/0x410 [ 77.944320][ T4666] ? rcu_lock_release+0x5/0x20 [ 77.949093][ T4666] should_fail+0x383/0x4b0 [ 77.953518][ T4666] should_failslab+0x5/0x20 [ 77.958034][ T4666] slab_pre_alloc_hook+0x51/0xc0 [ 77.962982][ T4666] ? __nf_conntrack_alloc+0x93/0x370 [ 77.968286][ T4666] kmem_cache_alloc+0x3d/0x280 [ 77.973056][ T4666] __nf_conntrack_alloc+0x93/0x370 [ 77.978170][ T4666] init_conntrack+0x2fd/0x1530 [ 77.982941][ T4666] ? get_l4proto+0x670/0x670 [ 77.987536][ T4666] ? early_drop+0x800/0x800 [ 77.992043][ T4666] ? nf_conntrack_find_get+0x640/0x640 [ 77.997506][ T4666] ? __siphash_unaligned+0x286/0x3d0 [ 78.002834][ T4666] nf_conntrack_in+0xd76/0x17b0 [ 78.007682][ T4666] ? nf_ct_pernet+0x240/0x240 [ 78.012350][ T4666] ? ip6t_alloc_initial_table+0x640/0x640 [ 78.018076][ T4666] ? ipv6_defrag+0x2d2/0x3a0 [ 78.022650][ T4666] ? ipv6_conntrack_in+0x20/0x20 [ 78.027569][ T4666] nf_hook_slow+0xb9/0x200 [ 78.031968][ T4666] ? rcu_read_unlock+0xa0/0xa0 [ 78.036709][ T4666] nf_hook+0x205/0x360 [ 78.040757][ T4666] ? ip6_make_skb+0x530/0x530 [ 78.045414][ T4666] ? rcu_read_unlock+0xa0/0xa0 [ 78.050165][ T4666] ip6_xmit+0xfa5/0x16e0 [ 78.054385][ T4666] ? rcu_read_unlock+0xa0/0xa0 [ 78.059139][ T4666] ? ip6_autoflowlabel+0xd0/0xd0 [ 78.064057][ T4666] ? __sk_dst_check+0x14e/0x290 [ 78.068905][ T4666] ? read_lock_is_recursive+0x10/0x10 [ 78.074260][ T4666] ? inet6_csk_route_socket+0x613/0xed0 [ 78.079791][ T4666] inet6_csk_xmit+0x405/0x680 [ 78.084451][ T4666] ? inet6_csk_addr2sockaddr+0x1d0/0x1d0 [ 78.090066][ T4666] ? csum_ipv6_magic+0x1e/0x80 [ 78.094820][ T4666] __tcp_transmit_skb+0x1ca3/0x31e0 [ 78.100009][ T4666] ? __tcp_send_ack+0x5d0/0x5d0 [ 78.104847][ T4666] ? tcp_fastopen_cookie_check+0x269/0x3c0 [ 78.110636][ T4666] tcp_connect+0x2d1a/0x4970 [ 78.115237][ T4666] tcp_v6_connect+0x11cf/0x1a10 [ 78.120085][ T4666] ? tcp_v6_pre_connect+0xf0/0xf0 [ 78.125094][ T4666] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 78.130447][ T4666] ? tcp_sendmsg_locked+0x2efb/0x3330 [ 78.135795][ T4666] ? tcp_sendmsg+0x2b/0x40 [ 78.140192][ T4666] ? __sys_sendto+0x46d/0x620 [ 78.144848][ T4666] ? __x64_sys_sendto+0xda/0xf0 [ 78.149700][ T4666] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.155754][ T4666] __inet_stream_connect+0x244/0xd80 [ 78.161043][ T4666] ? inet_dgram_connect+0x340/0x340 [ 78.166250][ T4666] tcp_sendmsg_fastopen+0x38f/0x600 [ 78.171432][ T4666] tcp_sendmsg_locked+0x2efb/0x3330 [ 78.176631][ T4666] ? aa_sk_perm+0x910/0x910 [ 78.181120][ T4666] ? mark_lock+0x94/0x320 [ 78.185428][ T4666] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 78.191394][ T4666] ? lock_chain_count+0x20/0x20 [ 78.196227][ T4666] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 78.202283][ T4666] ? tcp_free_fastopen_req+0x70/0x70 [ 78.207553][ T4666] tcp_sendmsg+0x2b/0x40 [ 78.211776][ T4666] __sys_sendto+0x46d/0x620 [ 78.216287][ T4666] ? __ia32_sys_getpeername+0x80/0x80 [ 78.221678][ T4666] ? lock_chain_count+0x20/0x20 [ 78.226514][ T4666] __x64_sys_sendto+0xda/0xf0 [ 78.231173][ T4666] do_syscall_64+0x4c/0xa0 [ 78.235570][ T4666] ? clear_bhb_loop+0x30/0x80 [ 78.240231][ T4666] ? clear_bhb_loop+0x30/0x80 [ 78.244891][ T4666] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.250776][ T4666] RIP: 0033:0x7fca5db1d559 [ 78.255173][ T4666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.274758][ T4666] RSP: 002b:00007fca5bd75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 78.283152][ T4666] RAX: ffffffffffffffda RBX: 00007fca5dda4fa0 RCX: 00007fca5db1d559 [ 78.291104][ T4666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 78.299050][ T4666] RBP: 00007fca5dbb48b0 R08: 00002000000001c0 R09: 000000000000001c [ 78.307001][ T4666] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000000 [ 78.314958][ T4666] R13: 00007fca5dda5038 R14: 00007fca5dda4fa0 R15: 00007ffcd482a3d8 [ 78.322934][ T4666] [ 79.068175][ T4680] netlink: 'syz.0.107': attribute type 3 has an invalid length. [ 79.097893][ T4682] loop3: detected capacity change from 0 to 512 [ 79.148578][ T4682] EXT4-fs (loop3): Ignoring removed nobh option [ 79.292744][ T4682] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.109: invalid indirect mapped block 256 (level 2) [ 79.334231][ T4682] EXT4-fs (loop3): 2 truncates cleaned up [ 79.341085][ T4682] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 79.359996][ T4690] loop4: detected capacity change from 0 to 512 [ 79.535686][ T4690] EXT4-fs (loop4): Ignoring removed nobh option [ 79.558414][ T4699] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.794271][ T4690] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.811195][ T4699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.966597][ T4679] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.109: bg 0: block 5: invalid block bitmap [ 79.991035][ T4679] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 80.003729][ T4679] EXT4-fs (loop3): This should not happen!! Data will be lost [ 80.003729][ T4679] [ 80.013448][ T4679] EXT4-fs (loop3): Total free blocks count 0 [ 80.019466][ T4679] EXT4-fs (loop3): Free/Dirty block details [ 80.025466][ T4679] EXT4-fs (loop3): free_blocks=0 [ 80.030472][ T4679] EXT4-fs (loop3): dirty_blocks=33 [ 80.035671][ T4679] EXT4-fs (loop3): Block reservation details [ 80.041707][ T4679] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 80.108531][ T4690] EXT4-fs (loop4): 1 truncate cleaned up [ 80.114667][ T4690] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 80.137616][ T7] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 80.236362][ T4704] loop3: detected capacity change from 0 to 512 [ 80.281686][ T4704] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 80.299274][ T4704] EXT4-fs (loop3): 1 truncate cleaned up [ 80.309225][ T4704] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 80.373724][ T4707] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 80.461579][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 80.781660][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 421, setting to 64 [ 81.076260][ T4722] loop2: detected capacity change from 0 to 164 [ 81.118501][ T7] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 81.129215][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.137566][ T7] usb 2-1: Product: syz [ 81.141961][ T7] usb 2-1: Manufacturer: syz [ 81.146566][ T7] usb 2-1: SerialNumber: syz [ 81.172708][ T4686] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.192862][ T7] oti6858 2-1:1.0: oti6858 converter detected [ 81.218458][ T7] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 81.464174][ T1323] cfg80211: failed to load regulatory.db [ 81.490129][ T4729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.726734][ T4685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.744860][ T1323] usb 2-1: USB disconnect, device number 3 [ 81.822469][ T1323] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 81.850365][ T1323] oti6858 2-1:1.0: device disconnected [ 82.106308][ T4726] loop2: detected capacity change from 0 to 256 [ 82.139412][ T4746] loop3: detected capacity change from 0 to 512 [ 82.177693][ T4746] EXT4-fs (loop3): Ignoring removed nobh option [ 82.199710][ T4746] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.292797][ T4746] EXT4-fs (loop3): 1 truncate cleaned up [ 82.331396][ T4746] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 82.454740][ T4753] loop1: detected capacity change from 0 to 256 [ 82.465574][ T4753] exfat: Deprecated parameter 'utf8' [ 82.471336][ T4753] exfat: Deprecated parameter 'namecase' [ 82.477057][ T4753] exfat: Deprecated parameter 'utf8' [ 82.564453][ T4753] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 82.770286][ T4758] loop4: detected capacity change from 0 to 512 [ 82.925852][ T4758] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 83.001121][ T4758] EXT4-fs (loop4): 1 truncate cleaned up [ 83.009896][ T4758] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 84.082511][ T4785] loop2: detected capacity change from 0 to 512 [ 84.089306][ T4787] loop4: detected capacity change from 0 to 128 [ 84.107511][ T4785] EXT4-fs (loop2): Ignoring removed nobh option [ 84.131486][ T4785] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.173748][ T4785] EXT4-fs (loop2): 1 truncate cleaned up [ 84.181948][ T4785] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 84.271350][ T7] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 84.430523][ T4802] loop4: detected capacity change from 0 to 512 [ 84.494455][ T4802] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 84.504268][ T4804] input: syz0 as /devices/virtual/input/input5 [ 84.525743][ T4802] EXT4-fs (loop4): 1 truncate cleaned up [ 84.537065][ T4802] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 84.593909][ T7] usb 4-1: not running at top speed; connect to a high speed hub [ 84.651413][ T3518] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 84.681665][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 421, setting to 64 [ 84.728170][ T4813] loop2: detected capacity change from 0 to 512 [ 84.882138][ T25] audit: type=1800 audit(1792059209.864:3): pid=4816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.149" name="file3" dev="loop4" ino=16 res=0 errno=0 [ 84.941769][ T7] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 85.071963][ T3518] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.094579][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.171982][ T3518] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.247707][ T2301] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.260988][ T7] usb 4-1: Product: syz [ 85.269794][ T4813] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.291336][ T7] usb 4-1: Manufacturer: syz [ 85.301664][ T7] usb 4-1: SerialNumber: syz [ 85.309557][ T3518] usb 2-1: config 0 interface 0 has no altsetting 0 [ 85.318045][ T4813] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.347095][ T3518] usb 2-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 85.355051][ T4813] EXT4-fs (loop2): shut down requested (0) [ 85.361912][ T4782] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 85.373526][ T3518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.387637][ T7] oti6858 4-1:1.0: oti6858 converter detected [ 85.410117][ T3518] usb 2-1: config 0 descriptor?? [ 85.419114][ T7] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 85.724885][ T4832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.837579][ T4837] loop2: detected capacity change from 0 to 8 [ 85.957141][ T4781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.976281][ T4838] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffffÿ" or missing value [ 86.013499][ T4837] SQUASHFS error: zlib decompression failed, data probably corrupt [ 86.069309][ T4265] usb 4-1: USB disconnect, device number 2 [ 86.170703][ T4837] SQUASHFS error: Failed to read block 0x9b: -5 [ 86.203050][ T3518] usbhid 2-1:0.0: can't add hid device: -71 [ 86.223687][ T3518] usbhid: probe of 2-1:0.0 failed with error -71 [ 86.281584][ T4265] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 86.347337][ T4837] SQUASHFS error: Unable to read metadata cache entry [99] [ 86.364756][ T3518] usb 2-1: USB disconnect, device number 4 [ 86.381711][ T4837] SQUASHFS error: Unable to read inode 0x127 [ 86.395906][ T4265] oti6858 4-1:1.0: device disconnected [ 86.524653][ T4845] input: syz0 as /devices/virtual/input/input6 [ 86.734113][ T4850] set_capacity_and_notify: 1 callbacks suppressed [ 86.734127][ T4850] loop3: detected capacity change from 0 to 512 [ 87.862821][ T4863] loop4: detected capacity change from 0 to 512 [ 87.919803][ T4850] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.935543][ T4863] EXT4-fs (loop4): Ignoring removed nobh option [ 87.985074][ T4863] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.015893][ T4850] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.646272][ T4850] EXT4-fs (loop3): shut down requested (0) [ 88.656836][ T4863] EXT4-fs (loop4): 1 truncate cleaned up [ 88.671384][ T4863] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 89.009206][ T4878] input: syz0 as /devices/virtual/input/input7 [ 89.391455][ T4266] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 89.741895][ T4266] usb 4-1: not running at top speed; connect to a high speed hub [ 89.841658][ T4266] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 421, setting to 64 [ 90.994482][ T4266] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 91.011772][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.032389][ T4266] usb 4-1: Product: syz [ 91.036580][ T4266] usb 4-1: Manufacturer: syz [ 91.050518][ T4266] usb 4-1: SerialNumber: syz [ 91.081587][ T4882] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 91.102077][ T4266] oti6858 4-1:1.0: oti6858 converter detected [ 91.119990][ T4266] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 91.251805][ T4904] loop2: detected capacity change from 0 to 512 [ 91.336103][ T4904] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.351513][ T4266] Bluetooth: hci3: command 0x0405 tx timeout [ 91.368625][ T4907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.369174][ T4904] EXT4-fs (loop2): 1 truncate cleaned up [ 91.416484][ T4904] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.592382][ T4881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.613893][ T4267] usb 4-1: USB disconnect, device number 3 [ 91.637103][ T4267] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 91.657890][ T4267] oti6858 4-1:1.0: device disconnected [ 91.726789][ T4910] loop2: detected capacity change from 0 to 512 [ 91.813235][ T4915] loop1: detected capacity change from 0 to 128 [ 91.823730][ T4910] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.848967][ T4915] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 91.860659][ T4910] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.879139][ T4910] EXT4-fs (loop2): shut down requested (0) [ 91.884418][ T4915] VFS: Lookup of 'file0' in vfat loop1 would have caused loop [ 91.990118][ T4922] input: syz0 as /devices/virtual/input/input8 [ 92.808503][ T4935] loop1: detected capacity change from 0 to 8 [ 92.811047][ T4937] loop4: detected capacity change from 0 to 2048 [ 93.900969][ T4935] SQUASHFS error: zlib decompression failed, data probably corrupt [ 94.002925][ T4944] loop2: detected capacity change from 0 to 8 [ 94.049401][ T4935] SQUASHFS error: Failed to read block 0x9b: -5 [ 94.065954][ T4935] SQUASHFS error: Unable to read metadata cache entry [99] [ 94.075201][ T4935] SQUASHFS error: Unable to read inode 0x127 [ 94.248457][ T4937] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.263557][ T4944] squashfs image failed sanity check [ 94.302364][ T4937] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.519388][ T4937] fs-verity: sha512 using implementation "sha512-avx2" [ 94.599541][ T4957] netlink: 'syz.0.197': attribute type 29 has an invalid length. [ 94.626135][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'. [ 94.768167][ T4957] netlink: 'syz.0.197': attribute type 29 has an invalid length. [ 94.827600][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'. [ 95.203682][ T4970] loop4: detected capacity change from 0 to 512 [ 95.320993][ T4970] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.341386][ T4978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.342574][ T4970] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.353774][ T4976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.142507][ T4991] 9pnet: Insufficient options for proto=fd [ 96.151396][ T4265] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.276978][ T4998] loop3: detected capacity change from 0 to 128 [ 96.365858][ T4998] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.402575][ T5000] loop4: detected capacity change from 0 to 512 [ 96.415868][ T4998] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.507200][ T5007] FAULT_INJECTION: forcing a failure. [ 96.507200][ T5007] name failslab, interval 1, probability 0, space 0, times 0 [ 96.510946][ T5000] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 96.520201][ T5007] CPU: 0 PID: 5007 Comm: syz.1.212 Not tainted syzkaller #0 [ 96.520257][ T5007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.520267][ T5007] Call Trace: [ 96.520274][ T5007] [ 96.520281][ T5007] dump_stack_lvl+0x188/0x250 [ 96.520307][ T5007] ? show_regs_print_info+0x20/0x20 [ 96.520325][ T5007] ? load_image+0x410/0x410 [ 96.520347][ T5007] ? verify_lock_unused+0x140/0x140 [ 96.520369][ T5007] should_fail+0x383/0x4b0 [ 96.568587][ T5000] ext4 filesystem being mounted at /35/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.572478][ T5007] should_failslab+0x5/0x20 [ 96.572503][ T5007] slab_pre_alloc_hook+0x51/0xc0 [ 96.572521][ T5007] ? __sigqueue_alloc+0x3a6/0x4b0 [ 96.572537][ T5007] kmem_cache_alloc+0x3d/0x280 [ 96.572556][ T5007] __sigqueue_alloc+0x3a6/0x4b0 [ 96.572575][ T5007] __send_signal+0x223/0xd40 [ 96.572598][ T5007] send_signal+0x77e/0x8e0 [ 96.572616][ T5007] ? __rwlock_init+0x140/0x140 [ 96.572635][ T5007] ? __group_send_sig_info+0x30/0x30 [ 96.572652][ T5007] ? lockdep_hardirqs_off+0x70/0x100 [ 96.640596][ T5007] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 96.646036][ T5007] ? _raw_spin_lock+0x40/0x40 [ 96.650689][ T5007] force_sig_info_to_task+0x2f0/0x3c0 [ 96.656044][ T5007] force_sig_fault+0xd9/0x130 [ 96.660694][ T5007] ? page_fault_oops+0x890/0x890 [ 96.665606][ T5007] ? force_sig_fault_to_task+0x130/0x130 [ 96.671214][ T5007] ? __bad_area_nosemaphore+0x306/0x490 [ 96.676734][ T5007] exc_page_fault+0x60/0x100 [ 96.681304][ T5007] ? clear_bhb_loop+0x30/0x80 [ 96.685957][ T5007] asm_exc_page_fault+0x22/0x30 [ 96.690794][ T5007] RIP: 0033:0x7fd9731bb6df [ 96.695202][ T5007] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79 [ 96.714777][ T5007] RSP: 002b:00007fd971429bd8 EFLAGS: 00010283 [ 96.720816][ T5007] RAX: 0000000000000000 RBX: fffffffffffffffa RCX: 0000000000000000 [ 96.728761][ T5007] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007fd971429c00 [ 96.736715][ T5007] RBP: 00007fd971429c00 R08: 0000000000000000 R09: 0000000000000000 [ 96.744659][ T5007] R10: 0000000000000000 R11: 0000000000400243 R12: cccccccccccccccd [ 96.752604][ T5007] R13: 00007fd97345a038 R14: 00007fd973459fa0 R15: 00007ffc32030e58 [ 96.760556][ T5007] [ 96.841667][ T4265] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.869207][ T4265] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.891385][ T4265] usb 3-1: config 0 interface 0 has no altsetting 0 [ 96.916494][ T4265] usb 3-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 96.932073][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.934313][ T5021] loop3: detected capacity change from 0 to 1024 [ 96.952602][ T4265] usb 3-1: config 0 descriptor?? [ 97.787773][ T5037] loop1: detected capacity change from 0 to 8 [ 97.814939][ T5038] loop4: detected capacity change from 0 to 8 [ 97.836080][ T5037] SQUASHFS error: lzo decompression failed, data probably corrupt [ 97.844120][ T5037] SQUASHFS error: Failed to read block 0x91: -5 [ 97.850447][ T5037] SQUASHFS error: Unable to read metadata cache entry [8f] [ 97.859542][ T5037] SQUASHFS error: Unable to read inode 0x11f [ 97.983897][ T5038] SQUASHFS error: zlib decompression failed, data probably corrupt [ 97.995940][ T5038] SQUASHFS error: Failed to read block 0x9b: -5 [ 98.011441][ T5038] SQUASHFS error: Unable to read metadata cache entry [99] [ 98.064632][ T5038] SQUASHFS error: Unable to read inode 0x127 [ 98.088348][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 98.096124][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 98.122493][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 98.130612][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 98.139116][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 98.147217][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 98.155664][ T5044] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 98.626393][ T4265] usbhid 3-1:0.0: can't add hid device: -71 [ 98.636030][ T4265] usbhid: probe of 3-1:0.0 failed with error -71 [ 98.644551][ T4265] usb 3-1: USB disconnect, device number 3 [ 99.644824][ T5065] loop3: detected capacity change from 0 to 512 [ 99.676982][ T5065] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 99.738022][ T5065] EXT4-fs (loop3): 1 truncate cleaned up [ 99.751117][ T5065] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 100.542979][ T25] audit: type=1800 audit(1792059225.094:4): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.232" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 100.961244][ C0] sched: RT throttling activated [ 101.088307][ T5087] loop2: detected capacity change from 0 to 2048 [ 101.300767][ T5097] input: syz0 as /devices/virtual/input/input9 [ 101.302696][ T5087] UDF-fs: bad mount option "ÿ18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 101.332651][ T5100] loop4: detected capacity change from 0 to 512 [ 101.667126][ T5100] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 101.739851][ T5087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 101.867039][ T5115] loop4: detected capacity change from 0 to 512 [ 101.905205][ T5115] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 101.932638][ T5115] EXT4-fs (loop4): 1 truncate cleaned up [ 101.941701][ T5115] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 104.014839][ T25] audit: type=1800 audit(1792059227.324:5): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.250" name="file3" dev="loop4" ino=16 res=0 errno=0 [ 104.400188][ T5138] input: syz0 as /devices/virtual/input/input10 [ 105.165759][ T5166] loop2: detected capacity change from 0 to 16 [ 106.338229][ T5166] erofs: (device loop2): mounted with root inode @ nid 36. [ 106.405168][ T5166] attempt to access beyond end of device [ 106.405168][ T5166] loop2: rw=524288, want=1342177304, limit=16 [ 106.417289][ T5166] attempt to access beyond end of device [ 106.417289][ T5166] loop2: rw=0, want=1342177280, limit=16 [ 106.454889][ T25] audit: type=1800 audit(1792059231.504:6): pid=5166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.267" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 106.483749][ T5166] attempt to access beyond end of device [ 106.483749][ T5166] loop2: rw=524288, want=1342177320, limit=16 [ 106.513245][ T5166] attempt to access beyond end of device [ 106.513245][ T5166] loop2: rw=0, want=1342177320, limit=16 [ 106.540814][ T5178] input: syz0 as /devices/virtual/input/input11 [ 109.560071][ T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.649191][ T5247] loop3: detected capacity change from 0 to 8 [ 109.719413][ T5247] SQUASHFS error: zlib decompression failed, data probably corrupt [ 109.775771][ T5247] SQUASHFS error: Failed to read block 0x9b: -5 [ 109.794145][ T5247] SQUASHFS error: Unable to read metadata cache entry [99] [ 109.805812][ T5247] SQUASHFS error: Unable to read inode 0x127 [ 109.991724][ T26] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.010234][ T26] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.029220][ T26] usb 2-1: config 0 interface 0 has no altsetting 0 [ 110.036457][ T26] usb 2-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 110.056915][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.070359][ T26] usb 2-1: config 0 descriptor?? [ 111.741045][ T2301] Bluetooth: hci0: command 0x042b tx timeout [ 111.751470][ T26] usbhid 2-1:0.0: can't add hid device: -71 [ 111.761381][ T26] usbhid: probe of 2-1:0.0 failed with error -71 [ 111.771934][ T26] usb 2-1: USB disconnect, device number 5 [ 113.304799][ T5320] syz.0.312 sent an empty control message without MSG_MORE. [ 114.205212][ T5337] ip_tables: iptables: counters copy to user failed while replacing table [ 117.278445][ T5346] loop3: detected capacity change from 0 to 256 [ 117.681047][ T5346] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 117.702973][ T25] audit: type=1800 audit(1792059242.754:7): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.322" name="file1" dev="loop3" ino=1048649 res=0 errno=0 [ 117.751012][ T5362] ip_tables: iptables: counters copy to user failed while replacing table [ 117.761950][ T5362] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.770870][ T5359] loop1: detected capacity change from 0 to 2048 [ 118.038525][ T5359] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.072408][ T5359] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.416115][ T5380] loop2: detected capacity change from 0 to 2048 [ 118.473389][ T5380] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.497258][ T5385] loop4: detected capacity change from 0 to 128 [ 118.560794][ T5385] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=continue,nodelalloc,,errors=continue. Quota mode: none. [ 118.582491][ T5385] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.298298][ T5394] loop1: detected capacity change from 0 to 512 [ 119.431448][ T5394] EXT4-fs (loop1): Ignoring removed bh option [ 119.461886][ T5394] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 119.500346][ T5410] loop3: detected capacity change from 0 to 512 [ 119.519185][ T5394] EXT4-fs (loop1): 1 truncate cleaned up [ 119.527150][ T5394] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,abort,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 119.531005][ T5409] loop4: detected capacity change from 0 to 512 [ 119.718698][ T5410] EXT4-fs (loop3): Ignoring removed nobh option [ 120.911573][ T5409] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.913036][ T5421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.943394][ T5420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.972893][ T5409] EXT4-fs (loop4): 1 truncate cleaned up [ 120.985453][ T5410] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,nombcache,,errors=continue. Quota mode: writeback. [ 120.988656][ T5409] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.010069][ T5410] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.096743][ T5410] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.342: corrupted inode contents [ 121.180598][ T5410] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #2: comm syz.3.342: mark_inode_dirty error [ 121.412259][ T5410] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.342: corrupted inode contents [ 121.641828][ T4278] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.547440][ T5455] loop4: detected capacity change from 0 to 8 [ 122.581899][ T5458] loop3: detected capacity change from 0 to 512 [ 122.612649][ T5455] SQUASHFS error: zlib decompression failed, data probably corrupt [ 122.638273][ T5455] SQUASHFS error: Failed to read block 0x9b: -5 [ 122.649999][ T5455] SQUASHFS error: Unable to read metadata cache entry [99] [ 122.659907][ T5455] SQUASHFS error: Unable to read inode 0x127 [ 122.714501][ T4278] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.727202][ T5458] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.737519][ T4278] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.751611][ T4278] usb 3-1: config 0 interface 0 has no altsetting 0 [ 122.760239][ T4278] usb 3-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 122.763769][ T5458] EXT4-fs (loop3): 1 truncate cleaned up [ 122.848373][ T5458] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.393052][ T4278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.475545][ T4278] usb 3-1: config 0 descriptor?? [ 123.578874][ T5474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.593553][ T5472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.211620][ T4278] usbhid 3-1:0.0: can't add hid device: -71 [ 124.221494][ T1323] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 124.239446][ T4278] usbhid: probe of 3-1:0.0 failed with error -71 [ 124.334886][ T4278] usb 3-1: USB disconnect, device number 4 [ 124.491448][ T1323] usb 2-1: Using ep0 maxpacket: 16 [ 124.569164][ T5493] FAULT_INJECTION: forcing a failure. [ 124.569164][ T5493] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 124.583411][ T5493] CPU: 0 PID: 5493 Comm: syz.4.367 Not tainted syzkaller #0 [ 124.590701][ T5493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.600748][ T5493] Call Trace: [ 124.604026][ T5493] [ 124.606952][ T5493] dump_stack_lvl+0x188/0x250 [ 124.611651][ T5493] ? show_regs_print_info+0x20/0x20 [ 124.616844][ T5493] ? load_image+0x410/0x410 [ 124.621341][ T5493] should_fail+0x383/0x4b0 [ 124.625754][ T5493] prepare_alloc_pages+0x1e3/0x5b0 [ 124.630851][ T5493] __alloc_pages+0x11b/0x480 [ 124.635430][ T5493] ? zone_statistics+0x170/0x170 [ 124.640369][ T5493] ? rcu_lock_acquire+0x30/0x30 [ 124.645202][ T5493] ? alloc_pages+0x452/0x560 [ 124.649776][ T5493] __get_free_pages+0x8/0x30 [ 124.654353][ T5493] __tlb_remove_page_size+0x1f2/0x3f0 [ 124.659745][ T5493] unmap_page_range+0xfcf/0x2410 [ 124.661383][ T1323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.664690][ T5493] unmap_vmas+0x131/0x250 [ 124.679811][ T5493] ? unmap_page_range+0x2410/0x2410 [ 124.681191][ T1323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 124.685018][ T5493] exit_mmap+0x3b9/0x640 [ 124.699978][ T5493] ? vm_brk+0x20/0x20 [ 124.700711][ T1323] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 124.703974][ T5493] ? uprobe_clear_state+0x2f6/0x460 [ 124.704000][ T5493] __mmput+0x115/0x390 [ 124.704018][ T5493] exit_mm+0x632/0x7b0 [ 124.704031][ T5493] ? perf_pmu_migrate_context+0xb70/0xb70 [ 124.704054][ T5493] ? do_exit+0x2110/0x2110 [ 124.704073][ T5493] ? tty_audit_exit+0x149/0x1f0 [ 124.704092][ T5493] do_exit+0x5b8/0x2110 [ 124.704112][ T5493] ? put_task_struct+0x80/0x80 [ 124.704125][ T5493] ? preempt_schedule_common+0xa5/0xd0 [ 124.704140][ T5493] ? preempt_schedule+0xbc/0xd0 [ 124.704166][ T5493] do_group_exit+0x12c/0x2f0 [ 124.704184][ T5493] get_signal+0x7eb/0x12e0 [ 124.704217][ T5493] arch_do_signal_or_restart+0xe6/0x12a0 [ 124.704249][ T5493] ? futex_exit_release+0x1c0/0x1c0 [ 124.704268][ T5493] ? get_sigframe_size+0x10/0x10 [ 124.704286][ T5493] ? __context_tracking_exit+0x4c/0x80 [ 124.704311][ T5493] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.704335][ T5493] ? exit_to_user_mode_loop+0x3b/0x130 [ 124.704355][ T5493] exit_to_user_mode_loop+0x9e/0x130 [ 124.704371][ T5493] exit_to_user_mode_prepare+0xee/0x180 [ 124.704388][ T5493] syscall_exit_to_user_mode+0x16/0x40 [ 124.704403][ T5493] do_syscall_64+0x58/0xa0 [ 124.704420][ T5493] ? clear_bhb_loop+0x30/0x80 [ 124.704437][ T5493] ? clear_bhb_loop+0x30/0x80 [ 124.704455][ T5493] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.704473][ T5493] RIP: 0033:0x7f232b9de559 [ 124.704488][ T5493] Code: Unable to access opcode bytes at RIP 0x7f232b9de52f. [ 124.704495][ T5493] RSP: 002b:00007f2329c360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.704514][ T5493] RAX: fffffffffffffe00 RBX: 00007f232bc65fa8 RCX: 00007f232b9de559 [ 124.704526][ T5493] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f232bc65fa8 [ 124.704537][ T5493] RBP: 00007f232bc65fa0 R08: 0000000000000000 R09: 0000000000000000 [ 124.704547][ T5493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.704557][ T5493] R13: 00007f232bc66038 R14: 00007ffdcf2ae8d0 R15: 00007ffdcf2ae9b8 [ 124.704582][ T5493] [ 124.855346][ T5501] input: syz0 as /devices/virtual/input/input12 [ 125.241889][ T1323] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 125.253835][ T1323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.273026][ T1323] usb 2-1: config 0 descriptor?? [ 125.328547][ T5504] loop3: detected capacity change from 0 to 1024 [ 126.115695][ T1323] hid-generic 0003:057E:2019.0001: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 126.122189][ T5523] loop3: detected capacity change from 0 to 8 [ 126.206386][ T5523] SQUASHFS error: zlib decompression failed, data probably corrupt [ 126.237240][ T5523] SQUASHFS error: Failed to read block 0x9b: -5 [ 126.245568][ T5523] SQUASHFS error: Unable to read metadata cache entry [99] [ 126.253497][ T5523] SQUASHFS error: Unable to read inode 0x127 [ 126.395982][ T26] usb 2-1: USB disconnect, device number 6 [ 126.404294][ T13] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 127.202317][ T13] usb 3-1: not running at top speed; connect to a high speed hub [ 127.352267][ T13] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 421, setting to 64 [ 127.531535][ T13] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 127.556923][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.586463][ T5546] loop3: detected capacity change from 0 to 1024 [ 127.601311][ T13] usb 3-1: Product: syz [ 127.609119][ T13] usb 3-1: Manufacturer: syz [ 127.640473][ T13] usb 3-1: SerialNumber: syz [ 127.684860][ T5519] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.713006][ T13] oti6858 3-1:1.0: oti6858 converter detected [ 127.732916][ T13] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 128.035242][ T5561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.515092][ T4194] usb 3-1: USB disconnect, device number 5 [ 128.527366][ T4194] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 128.537880][ T4194] oti6858 3-1:1.0: device disconnected [ 128.548544][ T5568] loop2: detected capacity change from 0 to 512 [ 128.571550][ T13] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.765214][ T5568] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 128.783394][ T5574] loop3: detected capacity change from 0 to 8 [ 128.808847][ T5568] EXT4-fs (loop2): 1 truncate cleaned up [ 128.811059][ T5574] SQUASHFS error: zlib decompression failed, data probably corrupt [ 128.814972][ T5568] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 128.823570][ T5574] SQUASHFS error: Failed to read block 0x9b: -5 [ 128.876974][ T5574] SQUASHFS error: Unable to read metadata cache entry [99] [ 128.884674][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 129.021996][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.033750][ T5574] SQUASHFS error: Unable to read inode 0x127 [ 129.085177][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.782903][ T25] audit: type=1800 audit(1792059254.434:8): pid=5580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.393" name="file3" dev="loop2" ino=16 res=0 errno=0 [ 129.818721][ T13] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 129.979611][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.998627][ T13] usb 2-1: config 0 descriptor?? [ 130.032875][ T5585] input: syz0 as /devices/virtual/input/input13 [ 130.460224][ T5595] loop4: detected capacity change from 0 to 1024 [ 131.304853][ T13] uclogic 0003:5543:0005.0002: No inputs registered, leaving [ 131.333112][ T13] uclogic 0003:5543:0005.0002: hidraw0: USB HID v0.02 Device [HID 5543:0005] on usb-dummy_hcd.1-1/input0 [ 132.329751][ T5622] input: syz0 as /devices/virtual/input/input14 [ 132.351591][ T3518] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 132.393829][ T13] usb 2-1: USB disconnect, device number 7 [ 132.411422][ T4278] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.484240][ T5627] fido_id[5627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 132.565527][ T5633] loop1: detected capacity change from 0 to 512 [ 132.577059][ T5633] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.617000][ T5633] EXT4-fs (loop1): 1 truncate cleaned up [ 132.623171][ T5633] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.643944][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.650293][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.689931][ T5643] loop4: detected capacity change from 0 to 512 [ 132.715387][ T3518] usb 4-1: not running at top speed; connect to a high speed hub [ 132.734303][ T5643] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 132.746764][ T5645] loop1: detected capacity change from 0 to 1024 [ 132.756649][ T5643] EXT4-fs (loop4): 1 truncate cleaned up [ 132.763441][ T5643] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 132.781452][ T4278] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.792733][ T4278] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.806873][ T4278] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.813622][ T4278] usb 3-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 132.822774][ T4278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.832929][ T4278] usb 3-1: config 0 descriptor?? [ 132.961630][ T3518] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 421, setting to 64 [ 133.572799][ T25] audit: type=1800 audit(1792059258.164:9): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.421" name="file3" dev="loop4" ino=16 res=0 errno=0 [ 134.491513][ T3518] usb 4-1: string descriptor 0 read error: -71 [ 134.498907][ T3518] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 134.521314][ T3518] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.566179][ T3518] usb 4-1: can't set config #1, error -71 [ 134.580240][ T3518] usb 4-1: USB disconnect, device number 4 [ 134.653626][ T5661] FAULT_INJECTION: forcing a failure. [ 134.653626][ T5661] name failslab, interval 1, probability 0, space 0, times 0 [ 134.676810][ T5661] CPU: 0 PID: 5661 Comm: syz.4.423 Not tainted syzkaller #0 [ 134.684127][ T5661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.691429][ T4278] usbhid 3-1:0.0: can't add hid device: -71 [ 134.694185][ T5661] Call Trace: [ 134.694195][ T5661] [ 134.700513][ T4278] usbhid: probe of 3-1:0.0 failed with error -71 [ 134.703340][ T5661] dump_stack_lvl+0x188/0x250 [ 134.703368][ T5661] ? show_regs_print_info+0x20/0x20 [ 134.703385][ T5661] ? load_image+0x410/0x410 [ 134.703399][ T5661] ? obj_cgroup_charge_pages+0xbf/0x190 [ 134.703428][ T5661] should_fail+0x383/0x4b0 [ 134.703451][ T5661] should_failslab+0x5/0x20 [ 134.703468][ T5661] slab_pre_alloc_hook+0x51/0xc0 [ 134.703487][ T5661] kmem_cache_alloc_trace+0x47/0x290 [ 134.703501][ T5661] ? __hw_addr_add_ex+0x1ed/0x780 [ 134.703526][ T5661] __hw_addr_add_ex+0x1ed/0x780 [ 134.703548][ T5661] dev_addr_init+0x143/0x220 [ 134.703566][ T5661] ? dev_addr_flush+0x200/0x200 [ 134.703604][ T5661] alloc_netdev_mqs+0x110/0xc40 [ 134.703622][ T5661] ? tun_not_capable+0x1f0/0x1f0 [ 134.703645][ T5661] tun_set_iff+0x542/0xdd0 [ 134.703685][ T5661] __tun_chr_ioctl+0x762/0x1f30 [ 134.703708][ T5661] ? tun_flow_create+0x310/0x310 [ 134.703740][ T5661] ? bpf_lsm_file_ioctl+0x5/0x10 [ 134.734816][ T4278] usb 3-1: USB disconnect, device number 6 [ 134.737232][ T5661] ? security_file_ioctl+0x7c/0xa0 [ 134.737261][ T5661] ? tun_chr_poll+0x620/0x620 [ 134.815501][ T5661] __se_sys_ioctl+0xfa/0x170 [ 134.820096][ T5661] do_syscall_64+0x4c/0xa0 [ 134.824496][ T5661] ? clear_bhb_loop+0x30/0x80 [ 134.829158][ T5661] ? clear_bhb_loop+0x30/0x80 [ 134.833831][ T5661] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.839712][ T5661] RIP: 0033:0x7f232b9de559 [ 134.844120][ T5661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.863707][ T5661] RSP: 002b:00007f2329c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.872110][ T5661] RAX: ffffffffffffffda RBX: 00007f232bc65fa0 RCX: 00007f232b9de559 [ 134.880066][ T5661] RDX: 0000200000000200 RSI: 00000000400454ca RDI: 0000000000000005 [ 134.888051][ T5661] RBP: 00007f232ba758b0 R08: 0000000000000000 R09: 0000000000000000 [ 134.896007][ T5661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.903958][ T5661] R13: 00007f232bc66038 R14: 00007f232bc65fa0 R15: 00007ffdcf2ae9b8 [ 134.911923][ T5661] [ 137.583955][ T4266] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.610794][ T5705] input: syz0 as /devices/virtual/input/input15 [ 137.626974][ T5707] loop2: detected capacity change from 0 to 1024 [ 138.881429][ T4266] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.922781][ T4266] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.072961][ T4266] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.079972][ T4266] usb 4-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 139.089180][ T4266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.099600][ T4266] usb 4-1: config 0 descriptor?? [ 139.775450][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.907476][ T5741] loop1: detected capacity change from 0 to 512 [ 139.916203][ T4266] usbhid 4-1:0.0: can't add hid device: -71 [ 139.922265][ T4266] usbhid: probe of 4-1:0.0 failed with error -71 [ 139.948854][ T4266] usb 4-1: USB disconnect, device number 5 [ 139.962698][ T5741] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 140.016703][ T5741] EXT4-fs (loop1): 1 truncate cleaned up [ 140.037358][ T5741] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 140.061359][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 140.191502][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.201791][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.317637][ T7] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.331564][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.339721][ T7] usb 3-1: Product: syz [ 141.345194][ T7] usb 3-1: Manufacturer: syz [ 141.349862][ T7] usb 3-1: SerialNumber: syz [ 141.903250][ T7] usb 3-1: can't set config #1, error -71 [ 141.924003][ T7] usb 3-1: USB disconnect, device number 7 [ 142.080120][ T5769] FAULT_INJECTION: forcing a failure. [ 142.080120][ T5769] name failslab, interval 1, probability 0, space 0, times 0 [ 142.080179][ T5769] CPU: 1 PID: 5769 Comm: syz.4.467 Not tainted syzkaller #0 [ 142.080197][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.080208][ T5769] Call Trace: [ 142.080214][ T5769] [ 142.080222][ T5769] dump_stack_lvl+0x188/0x250 [ 142.080249][ T5769] ? show_regs_print_info+0x20/0x20 [ 142.080269][ T5769] ? load_image+0x410/0x410 [ 142.080290][ T5769] ? __might_sleep+0xf0/0xf0 [ 142.080308][ T5769] ? __lock_acquire+0x7d40/0x7d40 [ 142.080333][ T5769] should_fail+0x383/0x4b0 [ 142.080357][ T5769] should_failslab+0x5/0x20 [ 142.080373][ T5769] slab_pre_alloc_hook+0x51/0xc0 [ 142.080391][ T5769] ? __kernfs_new_node+0xe3/0x6b0 [ 142.080411][ T5769] kmem_cache_alloc+0x3d/0x280 [ 142.080465][ T5769] __kernfs_new_node+0xe3/0x6b0 [ 142.080488][ T5769] ? __lock_acquire+0x7d40/0x7d40 [ 142.080509][ T5769] ? kernfs_new_node+0x250/0x250 [ 142.080541][ T5769] ? kernfs_activate+0x1eb/0x210 [ 142.080564][ T5769] kernfs_new_node+0x148/0x250 [ 142.080588][ T5769] __kernfs_create_file+0x47/0x2e0 [ 142.080612][ T5769] sysfs_add_file_mode_ns+0x2d2/0x390 [ 142.080638][ T5769] sysfs_merge_group+0x182/0x320 [ 142.080660][ T5769] ? sysfs_remove_groups+0xa0/0xa0 [ 142.080680][ T5769] ? kernfs_put+0x442/0x480 [ 142.080699][ T5769] ? sysfs_create_groups+0x9c/0x120 [ 142.080719][ T5769] dpm_sysfs_add+0xce/0x270 [ 142.080739][ T5769] device_add+0x745/0x1050 [ 142.080762][ T5769] device_create+0x266/0x300 [ 142.080783][ T5769] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 142.080803][ T5769] ? _raw_spin_unlock+0x40/0x40 [ 142.080821][ T5769] ? root_device_unregister+0xf0/0xf0 [ 142.080837][ T5769] ? update_attr+0x550/0x730 [ 142.080858][ T5769] ? memcpy+0x3c/0x60 [ 142.080875][ T5769] ? is_console_locked+0x5/0x10 [ 142.080890][ T5769] ? csi_J+0x8d6/0xdb0 [ 142.080911][ T5769] vcs_make_sysfs+0x2e/0x80 [ 142.080926][ T5769] vc_allocate+0x5e4/0x700 [ 142.080950][ T5769] ? vc_cons_allocated+0x70/0x70 [ 142.080978][ T5769] con_install+0x9c/0x720 [ 142.081003][ T5769] ? show_tty_active+0x30/0x30 [ 142.081031][ T5769] tty_init_dev+0xbb/0x470 [ 142.081054][ T5769] tty_open+0x7e8/0xcd0 [ 142.081079][ T5769] ? __lock_acquire+0x7d40/0x7d40 [ 142.081102][ T5769] ? tty_compat_ioctl+0x570/0x570 [ 142.081125][ T5769] ? do_raw_spin_unlock+0x11d/0x230 [ 142.081147][ T5769] chrdev_open+0x585/0x5f0 [ 142.081169][ T5769] ? cd_forget+0x160/0x160 [ 142.081191][ T5769] ? fsnotify_perm+0x3a7/0x560 [ 142.081213][ T5769] ? cd_forget+0x160/0x160 [ 142.081228][ T5769] do_dentry_open+0x7f7/0xf90 [ 142.081247][ T5769] ? vfs_open+0x2b/0x80 [ 142.081270][ T5769] path_openat+0x2718/0x2fb0 [ 142.081310][ T5769] ? __kasan_slab_alloc+0xa9/0xc0 [ 142.081336][ T5769] ? do_filp_open+0x400/0x400 [ 142.081374][ T5769] do_filp_open+0x1df/0x400 [ 142.081398][ T5769] ? vfs_tmpfile+0x300/0x300 [ 142.081443][ T5769] ? _raw_spin_unlock+0x24/0x40 [ 142.081461][ T5769] ? alloc_fd+0x59e/0x650 [ 142.081487][ T5769] do_sys_openat2+0x14b/0x500 [ 142.081504][ T5769] ? __lock_acquire+0x7d40/0x7d40 [ 142.081525][ T5769] ? do_sys_open+0xe0/0xe0 [ 142.081543][ T5769] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 142.081566][ T5769] ? lock_chain_count+0x20/0x20 [ 142.081592][ T5769] __x64_sys_openat+0x135/0x160 [ 142.081614][ T5769] do_syscall_64+0x4c/0xa0 [ 142.081631][ T5769] ? clear_bhb_loop+0x30/0x80 [ 142.081648][ T5769] ? clear_bhb_loop+0x30/0x80 [ 142.081668][ T5769] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 142.081687][ T5769] RIP: 0033:0x7f232b99ed8e [ 142.081704][ T5769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.081717][ T5769] RSP: 002b:00007f2329c35b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 142.081739][ T5769] RAX: ffffffffffffffda RBX: 00007f2329c366c0 RCX: 00007f232b99ed8e [ 142.081752][ T5769] RDX: 0000000000000002 RSI: 00007f2329c35c00 RDI: ffffffffffffff9c [ 142.081765][ T5769] RBP: 00007f232ba758b0 R08: 0000000000000000 R09: 0000000000000000 [ 142.081776][ T5769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.081787][ T5769] R13: 00007f232bc66038 R14: 00007f232bc65fa0 R15: 00007ffdcf2ae9b8 [ 142.081816][ T5769] [ 142.824648][ T5788] loop3: detected capacity change from 0 to 512 [ 143.487266][ T5788] EXT4-fs (loop3): Ignoring removed nobh option [ 143.497412][ T5788] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.549782][ T5788] EXT4-fs (loop3): 1 truncate cleaned up [ 143.558660][ T5788] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 143.621341][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 143.891456][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 144.164035][ T5812] loop3: detected capacity change from 0 to 512 [ 144.204611][ T13] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 144.221470][ T5812] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.231672][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.248891][ T13] usb 3-1: Product: syz [ 144.258280][ T13] usb 3-1: Manufacturer: syz [ 144.268956][ T13] usb 3-1: SerialNumber: syz [ 144.271735][ T5812] EXT4-fs (loop3): 1 truncate cleaned up [ 144.279196][ T5812] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 146.054473][ T13] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 146.231128][ T13] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 146.317109][ T13] usb 3-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 146.591593][ T13] usb 3-1: USB disconnect, device number 8 [ 146.774878][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.386922][ T13] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 147.761536][ T13] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 147.772836][ T13] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 147.783962][ T13] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.796919][ T13] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.803624][ T13] usb 3-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 147.812715][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.822602][ T13] usb 3-1: config 0 descriptor?? [ 147.841588][ T5902] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 148.723808][ T13] acrux 0003:1A34:F705.0003: ignoring exceeding usage max [ 148.810287][ T13] acrux 0003:1A34:F705.0003: No inputs registered, leaving [ 148.820842][ T13] acrux 0003:1A34:F705.0003: hidraw0: USB HID v0.10 Joystick [HID 1a34:f705] on usb-dummy_hcd.2-1/input0 [ 148.832907][ T13] acrux 0003:1A34:F705.0003: no inputs found [ 148.838904][ T13] acrux 0003:1A34:F705.0003: Failed to enable force feedback support, error: -19 [ 149.050455][ T13] usb 3-1: USB disconnect, device number 9 [ 149.331981][ T5955] fido_id[5955]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 150.379212][ T5990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.390934][ T5989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.618508][ T6022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.795105][ T6021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.689560][ T6069] loop4: detected capacity change from 0 to 512 [ 152.906217][ T6069] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 152.940523][ T6069] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.575: invalid indirect mapped block 256 (level 1) [ 152.958367][ T6069] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.575: invalid indirect mapped block 2683928664 (level 1) [ 152.960041][ T6080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.992656][ T6069] EXT4-fs (loop4): 1 truncate cleaned up [ 152.998521][ T6069] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 153.041976][ T6078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.785985][ T6122] netlink: 32 bytes leftover after parsing attributes in process `syz.3.596'. [ 156.293218][ T6150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.555628][ T6229] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6229] [ 159.493723][ T6252] overlayfs: failed to clone upperpath [ 160.476370][ T6279] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6279] [ 160.833678][ T6299] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 160.849172][ T6299] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 161.559314][ T2301] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 161.888750][ T6338] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6338] [ 162.136366][ T2301] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.175531][ T2301] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.200200][ T2301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.207189][ T2301] usb 3-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 162.221748][ T2301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.239361][ T2301] usb 3-1: config 0 descriptor?? [ 162.629719][ T6379] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6379] [ 162.830600][ T6402] fuse: Bad value for 'fd' [ 163.618451][ T2301] usbhid 3-1:0.0: can't add hid device: -71 [ 163.627527][ T2301] usbhid: probe of 3-1:0.0 failed with error -71 [ 163.734683][ T2301] usb 3-1: USB disconnect, device number 10 [ 163.948184][ T6436] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6436] [ 164.149875][ T6442] rxe_eth0 speed is unknown, defaulting to 1000 [ 164.627690][ T13] hid-generic 0000:0008:0000.0004: unknown main item tag 0x0 [ 164.638954][ T13] hid-generic 0000:0008:0000.0004: unknown main item tag 0x0 [ 164.659371][ T13] hid-generic 0000:0008:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 165.164822][ T6522] tipc: Started in network mode [ 165.170978][ T6522] tipc: Node identity 4, cluster identity 4711 [ 165.182920][ T6522] tipc: Node number set to 4 [ 165.249307][ T6524] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6524] [ 165.334884][ T6526] tipc: Can't bind to reserved service type 0 [ 165.640470][ T6534] overlayfs: failed to clone upperpath [ 167.162330][ T2301] hid-generic 0000:0008:0000.0005: unknown main item tag 0x0 [ 167.226281][ T2301] hid-generic 0000:0008:0000.0005: unknown main item tag 0x0 [ 167.269995][ T2301] hid-generic 0000:0008:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 167.577243][ T6597] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6597] [ 168.195822][ T6599] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 168.223109][ T6599] overlayfs: failed to set xattr on upper [ 168.229382][ T6599] overlayfs: ...falling back to index=off,metacopy=off. [ 168.359374][ T25] audit: type=1800 audit(1792059293.404:10): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.758" name="file2" dev="sda1" ino=2047 res=0 errno=0 [ 168.413473][ T4267] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 168.433169][ T4267] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 168.561657][ T6620] loop4: detected capacity change from 0 to 512 [ 168.650683][ T6620] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 168.712976][ T6620] EXT4-fs (loop4): 1 truncate cleaned up [ 168.720599][ T6620] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 169.911539][ T6645] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6645] [ 170.616368][ T6665] netlink: 65173 bytes leftover after parsing attributes in process `syz.1.775'. [ 170.919892][ T6681] tipc: Trying to set illegal importance in message [ 171.216534][ T6691] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6691] [ 171.252177][ T6696] netlink: 65173 bytes leftover after parsing attributes in process `syz.0.786'. [ 171.394026][ T6711] overlayfs: failed to clone upperpath [ 171.699008][ T4266] hid-generic 0000:0008:0000.0007: unknown main item tag 0x0 [ 171.708008][ T4266] hid-generic 0000:0008:0000.0007: unknown main item tag 0x0 [ 171.930452][ T4266] hid-generic 0000:0008:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 172.438144][ T6732] fido_id[6732]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 172.808536][ T6757] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6757] [ 173.781824][ T6775] loop2: detected capacity change from 0 to 512 [ 173.807344][ T6775] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 173.818248][ T6775] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003e01c, mo2=0002] [ 173.835154][ T6775] System zones: 1-12 [ 173.869643][ T6775] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.819: invalid indirect mapped block 8 (level 2) [ 173.901493][ T6775] EXT4-fs (loop2): 1 truncate cleaned up [ 173.907155][ T6775] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nojournal_checksum,nomblk_io_submit,data_err=ignore,max_batch_time=0x0000000000000001,nodelalloc,noauto_da_alloc,,errors=continue. Quota mode: none. [ 174.147705][ T6804] loop2: detected capacity change from 0 to 8 [ 174.200648][ T6804] SQUASHFS error: zlib decompression failed, data probably corrupt [ 174.211075][ T6804] SQUASHFS error: Failed to read block 0x9b: -5 [ 174.223015][ T6804] SQUASHFS error: Unable to read metadata cache entry [99] [ 174.230439][ T6804] SQUASHFS error: Unable to read inode 0x127 [ 175.164740][ T6825] overlayfs: failed to clone lowerpath [ 175.671405][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 175.831345][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 175.838880][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 175.839489][ T6851] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6851] [ 175.931185][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 177.077598][ T6886] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6886] [ 178.172066][ T6918] loop4: detected capacity change from 0 to 512 [ 178.407852][ T6918] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 178.433996][ T6918] ext4 filesystem being mounted at /121/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.509116][ T6930] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6930] [ 180.099332][ T6960] ip_tables: iptables: counters copy to user failed while replacing table [ 181.486139][ T6973] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6973] [ 182.100228][ T6981] trusted_key: encrypted_key: insufficient parameters specified [ 182.137101][ T6981] trusted_key: encrypted_key: insufficient parameters specified [ 183.562226][ T7021] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7021] [ 184.851382][ T4267] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 185.191802][ T7076] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7076] [ 185.262010][ T4267] usb 3-1: not running at top speed; connect to a high speed hub [ 185.352192][ T4267] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 421, setting to 64 [ 185.612214][ T4267] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 185.665571][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.732674][ T4267] usb 3-1: Product: syz [ 185.743097][ T4267] usb 3-1: Manufacturer: syz [ 185.748144][ T4267] usb 3-1: SerialNumber: syz [ 185.791807][ T7039] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 185.826475][ T4267] oti6858 3-1:1.0: oti6858 converter detected [ 185.835124][ T4267] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 186.081818][ T7101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.314068][ T7038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.324782][ T13] usb 3-1: USB disconnect, device number 11 [ 186.334462][ T13] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 186.342888][ T13] oti6858 3-1:1.0: device disconnected [ 186.499111][ T7107] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 186.506565][ T7107] overlayfs: failed to set xattr on upper [ 186.513076][ T7107] overlayfs: ...falling back to index=off,metacopy=off. [ 187.341364][ T4267] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 187.447661][ T7152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.472502][ T7151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.651299][ T4267] usb 3-1: Using ep0 maxpacket: 16 [ 187.771369][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.782759][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 187.794326][ T4267] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 188.479172][ T4267] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 188.488343][ T4267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.506009][ T4267] usb 3-1: config 0 descriptor?? [ 188.833366][ T7187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.845189][ T7186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.985713][ T4267] hid-generic 0003:057E:2019.0008: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 190.075784][ T1323] usb 3-1: USB disconnect, device number 12 [ 190.402310][ T7199] fido_id[7199]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 191.281298][ T4267] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 192.221456][ T4267] usb 3-1: not running at top speed; connect to a high speed hub [ 192.301470][ T4267] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 421, setting to 64 [ 192.355994][ T7285] fuse: Bad value for 'fd' [ 192.472356][ T4267] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 192.481965][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.181825][ T4267] usb 3-1: Product: syz [ 193.186011][ T4267] usb 3-1: Manufacturer: syz [ 193.190607][ T4267] usb 3-1: SerialNumber: syz [ 193.211764][ T7233] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 193.232541][ T4267] oti6858 3-1:1.0: oti6858 converter detected [ 193.242863][ T4267] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 193.289929][ T7296] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 193.493443][ T7323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.770697][ T7228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.830592][ T4194] usb 3-1: USB disconnect, device number 13 [ 193.902210][ T4194] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 194.079082][ T4194] oti6858 3-1:1.0: device disconnected [ 194.198222][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.204564][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.881769][ T7401] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 195.891149][ T7401] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 197.074653][ T7459] process 'syz.1.1087' launched './file0' with NULL argv: empty string added [ 197.091291][ T4267] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 198.312238][ T4267] usb 3-1: unable to get BOS descriptor or descriptor too short [ 198.391405][ T4267] usb 3-1: config 255 has an invalid interface number: 200 but max is 0 [ 198.409995][ T4267] usb 3-1: config 255 has no interface number 0 [ 198.416403][ T4267] usb 3-1: config 255 interface 200 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 198.437827][ T4267] usb 3-1: config 255 interface 200 has no altsetting 0 [ 198.503520][ T7503] overlayfs: failed to clone upperpath [ 198.565005][ T7507] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 198.621438][ T4267] usb 3-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=e0.37 [ 198.630733][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.640151][ T4267] usb 3-1: Product: syz [ 198.644853][ T4267] usb 3-1: Manufacturer: syz [ 198.649513][ T4267] usb 3-1: SerialNumber: syz [ 198.747292][ T7511] overlayfs: failed to clone lowerpath [ 198.773515][ T7513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.796702][ T7512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.173923][ T7521] loop4: detected capacity change from 0 to 512 [ 199.379400][ T7521] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 199.549721][ T7521] EXT4-fs (loop4): 1 truncate cleaned up [ 199.573187][ T4267] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 199.579452][ T4267] gspca_stv06xx: st6422 sensor detected [ 199.585191][ T7521] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 199.880769][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 199.891398][ T4267] STV06xx: probe of 3-1:255.200 failed with error -71 [ 199.991456][ T4267] usb 3-1: unknown interface protocol 0xe7, assuming v1 [ 200.006256][ T4267] usb 3-1: 200:1 : does not exist [ 200.012286][ T4267] usb 3-1: 200:2 : does not exist [ 200.062206][ T4267] usb 3-1: USB disconnect, device number 14 [ 200.913175][ T5364] udevd[5364]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:255.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.190810][ T7590] FAULT_INJECTION: forcing a failure. [ 201.190810][ T7590] name fail_futex, interval 1, probability 0, space 0, times 1 [ 201.193863][ T7580] syz.3.1138 (7580) used greatest stack depth: 18608 bytes left [ 201.205042][ T7590] CPU: 1 PID: 7590 Comm: syz.2.1141 Not tainted syzkaller #0 [ 201.219588][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.229643][ T7590] Call Trace: [ 201.232925][ T7590] [ 201.235871][ T7590] dump_stack_lvl+0x188/0x250 [ 201.240593][ T7590] ? rcu_lock_release+0x5/0x20 [ 201.245366][ T7590] ? show_regs_print_info+0x20/0x20 [ 201.250570][ T7590] ? load_image+0x410/0x410 [ 201.255089][ T7590] should_fail+0x383/0x4b0 [ 201.259517][ T7590] futex_lock_pi_atomic+0x11e/0x10f0 [ 201.264813][ T7590] ? __rwlock_init+0x140/0x140 [ 201.269588][ T7590] futex_lock_pi+0x37b/0xbf0 [ 201.274211][ T7590] ? futex_requeue+0x1920/0x1920 [ 201.279163][ T7590] ? __lock_acquire+0x13b3/0x7d40 [ 201.284228][ T7590] ? futex_wait+0x680/0x680 [ 201.288738][ T7590] ? verify_lock_unused+0x140/0x140 [ 201.293948][ T7590] ? verify_lock_unused+0x140/0x140 [ 201.299159][ T7590] do_futex+0xda0/0x12b0 [ 201.303410][ T7590] ? vfs_write+0xaa6/0xd70 [ 201.307850][ T7590] ? futex_exit_release+0x1c0/0x1c0 [ 201.313052][ T7590] ? __context_tracking_exit+0x4c/0x80 [ 201.318519][ T7590] __se_sys_futex+0x389/0x420 [ 201.323208][ T7590] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 201.329198][ T7590] ? __x64_sys_futex+0xf0/0xf0 [ 201.333977][ T7590] ? __x64_sys_futex+0x1d/0xf0 [ 201.338764][ T7590] do_syscall_64+0x4c/0xa0 [ 201.343183][ T7590] ? clear_bhb_loop+0x30/0x80 [ 201.347860][ T7590] ? clear_bhb_loop+0x30/0x80 [ 201.352538][ T7590] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.358432][ T7590] RIP: 0033:0x7fca5db1d559 [ 201.362849][ T7590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.382468][ T7590] RSP: 002b:00007fca5bd75028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 201.390901][ T7590] RAX: ffffffffffffffda RBX: 00007fca5dda4fa0 RCX: 00007fca5db1d559 [ 201.398883][ T7590] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 201.406859][ T7590] RBP: 00007fca5dbb48b0 R08: 0000000000000000 R09: 0000000000000000 [ 201.414830][ T7590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.422800][ T7590] R13: 00007fca5dda5038 R14: 00007fca5dda4fa0 R15: 00007ffcd482a3d8 [ 201.430788][ T7590] [ 201.487819][ T7601] ------------[ cut here ]------------ [ 201.495297][ T7601] fmt: 'level=%s [ 201.495297][ T7601] ' current_buffer: ' <...>-4889 [001] ..... 89.213626: dwc3_ctrl_req: Get Device Status(Length = 0) [ 201.495297][ T7601] <...>-1970561396 [001] .p.35 89.268919: Unknown type 25955 [ 201.495297][ T7601] -0 [001] ..... 89.294151: initcall_level: level=' [ 201.495401][ T7601] WARNING: CPU: 0 PID: 7601 at kernel/trace/trace.c:3867 trace_check_vprintf+0xd4a/0x1080 [ 201.775857][ T7601] Modules linked in: [ 201.800369][ T7601] CPU: 1 PID: 7601 Comm: syz.2.1146 Not tainted syzkaller #0 [ 201.839987][ T7601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.863008][ T7601] RIP: 0010:trace_check_vprintf+0xd4a/0x1080 [ 201.921311][ T7601] Code: e8 3b 41 fc ff c6 05 37 8b da 0c 01 48 8b 7c 24 40 e8 5a 04 00 00 48 c7 c7 40 3f 2f 8a 48 8b 74 24 60 48 89 c2 e8 86 47 3a 08 <0f> 0b e9 1c fe ff ff 48 8b 4c 24 38 80 e1 07 38 c1 0f 8c ca f7 ff [ 201.952264][ T7601] RSP: 0018:ffffc900033b7a20 EFLAGS: 00010246 [ 202.141445][ T7601] RAX: 61d9db7af8e37e00 RBX: 0000000000000000 RCX: 0000000000080000 [ 202.150615][ T7601] RDX: ffffc90005dd1000 RSI: 0000000000007292 RDI: 0000000000007293 [ 202.160050][ T7601] RBP: ffff8880626b80d8 R08: ffff8880b8e2795b R09: 1ffff110171c4f2b [ 202.225370][ T7601] R10: dffffc0000000000 R11: ffffed10171c4f2c R12: ffffffff8a200540 [ 202.235688][ T7601] R13: ffffc900033b7b60 R14: dffffc0000000000 R15: 0000000000000002 [ 202.258594][ T7601] FS: 00007fca5bd756c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 202.371032][ T7601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.377851][ T7601] CR2: 000020000037f030 CR3: 0000000031317000 CR4: 00000000003506f0 [ 202.385992][ T7601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.471358][ T7601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 202.479479][ T7601] Call Trace: [ 202.492778][ T7601] [ 202.497249][ T7601] trace_event_printf+0xea/0x140 [ 202.502441][ T7601] ? trace_print_seq+0x160/0x160 [ 202.507397][ T7601] ? trace_raw_output_prep+0x200/0x200 [ 202.513271][ T7601] trace_raw_output_initcall_level+0x93/0xd0 [ 202.519272][ T7601] tracing_read_pipe+0x52f/0xae0 [ 202.524333][ T7601] ? s_show+0x300/0x300 [ 202.528980][ T7601] vfs_read+0x2ff/0xd50 [ 202.533244][ T7601] ? __lock_acquire+0x7d40/0x7d40 [ 202.538371][ T7601] ? kernel_read+0x1e0/0x1e0 [ 202.544385][ T7601] ? mutex_lock_nested+0x17/0x20 [ 202.549342][ T7601] ? __fdget_pos+0x2bf/0x370 [ 202.569486][ T7601] ? ksys_read+0x70/0x260 [ 202.574866][ T7601] ksys_read+0x153/0x260 [ 202.579161][ T7601] ? vfs_write+0xd70/0xd70 [ 202.583706][ T7601] ? lockdep_hardirqs_on+0x94/0x140 [ 202.588920][ T7601] do_syscall_64+0x4c/0xa0 [ 202.593933][ T7601] ? clear_bhb_loop+0x30/0x80 [ 202.598617][ T7601] ? clear_bhb_loop+0x30/0x80 [ 202.603390][ T7601] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.609294][ T7601] RIP: 0033:0x7fca5db1d559 [ 202.613773][ T7601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.634478][ T7601] RSP: 002b:00007fca5bd75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.643107][ T7601] RAX: ffffffffffffffda RBX: 00007fca5dda4fa0 RCX: 00007fca5db1d559 [ 202.651078][ T7601] RDX: 0000000000004000 RSI: 0000200000002200 RDI: 0000000000000004 [ 202.659179][ T7601] RBP: 00007fca5dbb48b0 R08: 0000000000000000 R09: 0000000000000000 [ 202.667192][ T7601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.675293][ T7601] R13: 00007fca5dda5038 R14: 00007fca5dda4fa0 R15: 00007ffcd482a3d8 [ 202.683432][ T7601] [ 202.686547][ T7601] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 202.693818][ T7601] CPU: 1 PID: 7601 Comm: syz.2.1146 Not tainted syzkaller #0 [ 202.701165][ T7601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.711209][ T7601] Call Trace: [ 202.714481][ T7601] [ 202.717392][ T7601] dump_stack_lvl+0x188/0x250 [ 202.722051][ T7601] ? show_regs_print_info+0x20/0x20 [ 202.727226][ T7601] ? load_image+0x410/0x410 [ 202.731714][ T7601] panic+0x2f8/0x850 [ 202.735595][ T7601] ? bpf_jit_dump+0xd0/0xd0 [ 202.740086][ T7601] ? trace_check_vprintf+0xd4a/0x1080 [ 202.745440][ T7601] __warn+0x248/0x2b0 [ 202.749400][ T7601] ? trace_check_vprintf+0xd4a/0x1080 [ 202.754770][ T7601] report_bug+0x1b9/0x2e0 [ 202.759094][ T7601] handle_bug+0x3a/0x70 [ 202.763231][ T7601] exc_invalid_op+0x16/0x40 [ 202.767751][ T7601] asm_exc_invalid_op+0x16/0x20 [ 202.772596][ T7601] RIP: 0010:trace_check_vprintf+0xd4a/0x1080 [ 202.778570][ T7601] Code: e8 3b 41 fc ff c6 05 37 8b da 0c 01 48 8b 7c 24 40 e8 5a 04 00 00 48 c7 c7 40 3f 2f 8a 48 8b 74 24 60 48 89 c2 e8 86 47 3a 08 <0f> 0b e9 1c fe ff ff 48 8b 4c 24 38 80 e1 07 38 c1 0f 8c ca f7 ff [ 202.798174][ T7601] RSP: 0018:ffffc900033b7a20 EFLAGS: 00010246 [ 202.804227][ T7601] RAX: 61d9db7af8e37e00 RBX: 0000000000000000 RCX: 0000000000080000 [ 202.812208][ T7601] RDX: ffffc90005dd1000 RSI: 0000000000007292 RDI: 0000000000007293 [ 202.820185][ T7601] RBP: ffff8880626b80d8 R08: ffff8880b8e2795b R09: 1ffff110171c4f2b [ 202.828138][ T7601] R10: dffffc0000000000 R11: ffffed10171c4f2c R12: ffffffff8a200540 [ 202.836093][ T7601] R13: ffffc900033b7b60 R14: dffffc0000000000 R15: 0000000000000002 [ 202.844095][ T7601] trace_event_printf+0xea/0x140 [ 202.849022][ T7601] ? trace_print_seq+0x160/0x160 [ 202.853942][ T7601] ? trace_raw_output_prep+0x200/0x200 [ 202.859383][ T7601] trace_raw_output_initcall_level+0x93/0xd0 [ 202.865349][ T7601] tracing_read_pipe+0x52f/0xae0 [ 202.870273][ T7601] ? s_show+0x300/0x300 [ 202.874418][ T7601] vfs_read+0x2ff/0xd50 [ 202.878564][ T7601] ? __lock_acquire+0x7d40/0x7d40 [ 202.883588][ T7601] ? kernel_read+0x1e0/0x1e0 [ 202.888165][ T7601] ? mutex_lock_nested+0x17/0x20 [ 202.893082][ T7601] ? __fdget_pos+0x2bf/0x370 [ 202.897649][ T7601] ? ksys_read+0x70/0x260 [ 202.901962][ T7601] ksys_read+0x153/0x260 [ 202.906186][ T7601] ? vfs_write+0xd70/0xd70 [ 202.910580][ T7601] ? lockdep_hardirqs_on+0x94/0x140 [ 202.915764][ T7601] do_syscall_64+0x4c/0xa0 [ 202.920159][ T7601] ? clear_bhb_loop+0x30/0x80 [ 202.924812][ T7601] ? clear_bhb_loop+0x30/0x80 [ 202.929471][ T7601] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.935348][ T7601] RIP: 0033:0x7fca5db1d559 [ 202.939756][ T7601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.959358][ T7601] RSP: 002b:00007fca5bd75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.967754][ T7601] RAX: ffffffffffffffda RBX: 00007fca5dda4fa0 RCX: 00007fca5db1d559 [ 202.975814][ T7601] RDX: 0000000000004000 RSI: 0000200000002200 RDI: 0000000000000004 [ 202.983792][ T7601] RBP: 00007fca5dbb48b0 R08: 0000000000000000 R09: 0000000000000000 [ 202.991749][ T7601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.999703][ T7601] R13: 00007fca5dda5038 R14: 00007fca5dda4fa0 R15: 00007ffcd482a3d8 [ 203.007699][ T7601] [ 203.010828][ T7601] Kernel Offset: disabled [ 203.017150][ T7601] Rebooting in 86400 seconds..