last executing test programs: 3m30.333631448s ago: executing program 4 (id=27): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 3m29.226448131s ago: executing program 4 (id=29): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) recvmmsg(r2, &(0x7f0000005100), 0x0, 0x12141, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f00000000c0)) 3m28.246741231s ago: executing program 4 (id=30): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) 3m26.817091187s ago: executing program 4 (id=34): syz_mount_image$udf(&(0x7f00000003c0), &(0x7f0000000400)='./file1\x00', 0x804000, &(0x7f00000006c0)=ANY=[], 0x1, 0xc2d, &(0x7f0000000700)="$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") creat(&(0x7f0000001340)='./bus\x00', 0x44) mount(&(0x7f0000001380)=@loop={'/dev/loop', 0x0}, &(0x7f00000013c0)='./bus\x00', 0x0, 0x321001, 0x0) r0 = open(&(0x7f0000001400)='./bus\x00', 0x64842, 0x9a) pwritev2(r0, &(0x7f0000001440)=[{&(0x7f0000001480)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) rename(&(0x7f00000015c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001900)={0x1, &(0x7f0000001940)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) 3m25.173527575s ago: executing program 4 (id=38): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000340), 0x400000000000284, 0x2, 0x0) 3m24.322478731s ago: executing program 4 (id=40): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001") 3m24.151272409s ago: executing program 32 (id=40): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001") 12.241731568s ago: executing program 5 (id=530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000006640), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) 11.230467522s ago: executing program 0 (id=535): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff7f000000bc8f3939f631b83ecbac4500fdf4f2f78d", 0x1a}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x40800) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000006c0)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000007c0)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 10.721532133s ago: executing program 0 (id=540): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580), 0x60100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f00000005c0)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000019600)={0x0, 0x0, &(0x7f0000019640)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x801}, 0x4000891) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./security\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)="04080076657273696f6e00020500000004080070726f66696c650007050400662f6f00040600666c6167730007020000000002000000000200000000080200000000020000000002000000000200000000", 0x51) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000040)=0xcda) 10.684707747s ago: executing program 5 (id=541): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000340), 0x400000000000284, 0x2, 0x0) 9.242110875s ago: executing program 0 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(0x0, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x7) 8.933832416s ago: executing program 1 (id=545): openat$dm_control(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000004400)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004440)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000004480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000044c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000004500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000004580), 0x651, 0x0) recvmmsg(r1, &(0x7f00000045c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004600)=0x6) r3 = add_key$user(&(0x7f0000004640), &(0x7f0000004680)={'syz', 0x1}, &(0x7f00000046c0)='b', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000004700), &(0x7f0000004740)={'syz', 0x3}, &(0x7f0000004780)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000004880)={r3, r4, r3}, &(0x7f00000048c0)=""/174, 0xae, &(0x7f0000004980)={&(0x7f00000049c0)={'sm3\x00'}}) 8.063032695s ago: executing program 3 (id=546): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, r0) 7.902384892s ago: executing program 1 (id=548): syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000340)='./file1\x00', 0x10800, &(0x7f0000000380)=ANY=[@ANYRES64=0x0], 0x2, 0x195, &(0x7f00000003c0)="$eJzskj9v00AYxn9nGydBEIHElIUMEX8GiOMAYoMx7GwsRIkJEQ6Q2BIkioQRQhkYECOfgK+BxBegQ1Wpa+eojbp0qVzd+Ww57Ufo/YY897733nPve/HbaBpVgNPNcsBzFDZ1doTAAW6LLLe2Mv2ldVfrT6AG/Nd1L3T+m9ZGNF+42ZImN1UC+mEYzJrAscpF88U7lYqefbVYK6u9zXIgF6+BNE1TmRuCLOcaHOU1NjAt1TQcuKWGSAsfOYgM7gLtePKxHc0XD8aT/igYBe99u/vEe+R5j/32m3EYeNmvKLWhR0HqfaBSpUDuXwG+6/iQbUSpNclVEDVeFWdd/YbUBeexSmeVOtLvb9FXxc3/L3jJHWRbn5LcR2ZbysVBjdRDYOug45T6y+6qqo2HfAiHKwQiP1bDKTzyf1IFflJy7z5NuJ7trXRNS2tP6x+tB6A+rf2T7U/GkX780NG9BFw+9+N41pHXZivBFyCOZ76V5/wbSfnB5K2/re3h/lkX3tZgMBgMBoPBYDAYLhtnAQAA///CnXTs") 7.766433166s ago: executing program 2 (id=549): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="f7", 0x7ffff000}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 7.760039866s ago: executing program 3 (id=550): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff7f000000bc8f3939f631b83ecbac4500fdf4f2f78d", 0x1a}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x40800) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000006c0)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000007c0)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 7.691887913s ago: executing program 5 (id=551): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000180)='27', 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x80040, 0x0) 7.533868679s ago: executing program 3 (id=552): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x46, 0xc11, &(0x7f0000000580)="$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") connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x1, 0xb7, 0x8, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 7.383756885s ago: executing program 1 (id=553): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @remote}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x16, {0x2, 0x4e22, @private=0xa010102}, 'vlan0\x00'}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) 6.916550972s ago: executing program 1 (id=554): ioprio_set$pid(0x2, 0x0, 0x2007) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="8b", 0x1}], 0x1, 0x74, 0xfffff168, 0x8) 6.130492933s ago: executing program 0 (id=555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001c00b3002bbd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000b3060a00020081"], 0x30}, 0x1, 0x0, 0x0, 0x4004045}, 0x4040004) 6.047735901s ago: executing program 1 (id=556): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000300), 0x10106, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6.001305856s ago: executing program 3 (id=557): r0 = socket(0xa, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000001c0), &(0x7f0000000200)=""/10, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000280)="ced7855bf692e9d25b"}, 0x20) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="e5", 0x1}], 0x1}], 0x1, 0x40800) openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x569882, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r2, 0x403, &(0x7f0000000000)={0x0}) 5.946485712s ago: executing program 0 (id=558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2901, 0x0) close(r1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[], 0x16) 5.943093772s ago: executing program 1 (id=559): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @remote, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendto$inet6(r1, &(0x7f0000000240)="f0a207b6342af2734ec98939b5d71e991e455056dc7100f78a96a0919c89c5cb4e5bf8a84a9e0ce00985621bf83b65a1107685de0f1adda1b97919bdc264e6ce00d7659f1d15b37ab9f56fe094f7921e8bac0479d5ab4df0d127d3ae98bb03c5aefb403db06d3498f367b6585edd31c0e3d98c337f78bef5dd0f275aea88921608dbe472e52bad152ab7f11428142f023643067d364e82b11c6ff580a2a42df598fd89c267808d1193e9df490ea88534873f22d556b10895cf835423aee3bb4e0a983e58fac24e9a98ac6f48a71d4e10f09b9589fec6a4c7ffe5ff3662ba2bebb8e0b0e0c4371eacba1508b3b85f321beda51ddafe7a56609eeea9ce34f8ec47e66cb288f821d8d3a2d93612bf188594131b1874739dea4f2e99b730f7ea991af7b2fa340e98f3e0d508bff08734de35d38467b2c3ab0978aa43b9df246571564e6d5bf534e691932b8f884e6919eef91bcc597b8c767692e208e0ab9c2cc3cae203550592b69680208e72b11434509d8a0552bdbfdff4bf81255b3a7af8cad38440a9395ee79c488819f1b6fa3d6506d7621f4ee6fbed105720e858d19c0f13555ad0d35f0ac2feef858015630a41be32e3afaa7301bca8dd3d7c2904126195cd35ca0b9437a751733c4ee78e85a571a7a48de3541ef922ed95e3c583a3acdf97504d04342962d9fa656ae8ee70634c75e5e5e3319b4debfe7b3fba3ef5e00abe46590267d77c604946df96861efaab9dd17c92b47e130319c0b65e49cec7f7048ff70727d359f893d9836668ab027cdeb87c3189f65ee6e60e37a77bff2cc4f1dcd82649cf7bb819e350c7ef9e9e41f0734ba211aa5f032af215b74aeda7df9c23838ea67fe9c55b6c429683bac6e2103359327693ad2117c11f0f3bda009ff882ad9d5bccbffd45e4405376df99db490a1eb9543b8855c1a1d6b31ae10b65de3c023c649a76a705c6007c4f64ba9bbf59d4a57eacfa9426c23319d167cfefb973205f18a799af109495db0735d2446e5a684a84522d84619a973970209bad4c8c17720f023424dadeaa0cd9b3a5e3239dce8453b7db7e49f0e50c8c1c65fc49fea74c63beace0d4ddc54d63c329674ae01bb0b36f6c4ce49e698d79416c0444dc2a76540219abb088095e7c97deb8939919f6cdcc9b58de9210e5219496ba5d", 0x341, 0x10, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.483997379s ago: executing program 2 (id=560): r0 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f00000004c0), 0x0, r0) 5.426352275s ago: executing program 0 (id=561): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x2000048, &(0x7f0000000380)={[{@oldalloc}, {@debug}, {@noinit_itable}]}, 0x1, 0x4be, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='.\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a40)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000a80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000bc0), 0x10106, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000c80)={0xd0000002}) fchmodat(0xffffffffffffff9c, &(0x7f0000000cc0)='.\x00', 0xfffffe41) setns(0xc9, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x28, r5, 0x809, 0x70bd2f, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000890}, 0x24080888) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) setns(0xc9, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) fchown(r0, 0x0, 0xee01) 5.345267773s ago: executing program 2 (id=562): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff7f000000bc8f3939f631b83ecbac4500fdf4f2f78d", 0x1a}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x40800) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000006c0)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000007c0)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 5.190382049s ago: executing program 2 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000003c0)=r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) 4.119991208s ago: executing program 2 (id=564): prlimit64(0x0, 0xe, &(0x7f0000000940)={0x9, 0xff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4011}, 0xc0c4) sched_setscheduler(0x0, 0x1, &(0x7f0000000980)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000009c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a40)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000ac0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000b00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b40)=0x6) mount$cgroup(0x0, &(0x7f0000000b80)='.\x00', &(0x7f0000000bc0), 0x2208000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='/dev/loop0,', 0xb) 4.118102479s ago: executing program 5 (id=565): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@private0, @in=@dev}}, {{@in6=@private1}, 0x0, @in6=@private1}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) userfaultfd(0x801) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b80)) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000dc0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000e00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000f00), 0x366, 0x10, &(0x7f0000000f40), 0x1dd}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000440)={'wlan1\x00', @random="0100ffffffff"}) 4.046556446s ago: executing program 3 (id=566): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010003704030000000700000000000000", @ANYRES32=r2, @ANYBLOB="0b1b0500000000001c0012800b00010062726964676500000c0002800500070040"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000540)={0x11, 0x8100, r2, 0x1, 0xe9, 0x6, @local}, 0x14) 3.838495787s ago: executing program 5 (id=567): openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) futex$unlock_wake_list32(0x0, 0x601, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x16e) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(0x0, 0x108843, 0x98) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000008c0)=0x7, 0x4) 3.757576205s ago: executing program 3 (id=568): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./sys\x00', &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='test,0x8000000000000000,0x1000', 0x1e) 3.22147316s ago: executing program 5 (id=569): mkdirat(0xffffffffffffff9c, &(0x7f0000001240)='./dbg\x00', 0x1ff) r0 = syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000001740)="$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") prlimit64(0x0, 0xe, &(0x7f0000002c80)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002cc0)=0x8) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x4, &(0x7f0000000280), 0x1, 0x76a, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000a40)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000b40)={0x1, 0x0, 0x0, 0x0}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000002d00)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000002d40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000002dc0)=@abs, 0x6e) syz_clone(0xa1209200, 0x0, 0x44, 0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000002e40), 0x651, 0x0) recvmmsg(r3, &(0x7f0000002e80), 0x4000087, 0x2, 0x0) r5 = syz_mount_image$vfat(&(0x7f0000002ec0), &(0x7f0000002f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000003000)) syz_mount_image$vfat(&(0x7f0000003040), &(0x7f0000003080)='./file0\x00', 0x2018000, &(0x7f00000030c0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES8=r0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRES16, @ANYRES64=r5], 0x1, 0x304, &(0x7f0000003140)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000003480)={0x1, &(0x7f00000034c0)=[{0x6, 0x2, 0x7, 0x7ffc0001}]}) r6 = gettid() rt_sigqueueinfo(r6, 0x21, &(0x7f0000003500)={0x20, 0x0, 0x80}) open(&(0x7f0000003580)='./bus\x00', 0x1c1242, 0x12a) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x6, 0x8012, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x60040000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003c40)='rdma.current\x00', 0x275a, 0x0) 0s ago: executing program 2 (id=570): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, {0x0}, 0x400000}) fsopen(&(0x7f0000000840)='binfmt_misc\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x6c}}, 0x0) kernel console output (not intermixed with test programs): entered blocking state [ 69.010664][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.061632][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.092094][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.123569][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.136952][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.146555][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.162721][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.208148][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.219021][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.228353][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.238535][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.249312][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.264248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.274075][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.283407][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.291174][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.311653][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.328117][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.341414][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.350415][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.362109][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.374986][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.384076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.393212][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.400294][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.430967][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.438202][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 69.445957][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 69.467184][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.485271][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.494865][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.503435][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 69.509965][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 69.517535][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.525950][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 69.532973][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.540099][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.556540][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.565964][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.576432][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.583580][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.592940][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.601824][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.611031][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.618222][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.626906][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.636147][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.652620][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.669281][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.679147][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.689357][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.700563][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.710137][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.751123][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.772605][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.781474][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.793327][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.801944][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.810699][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.820688][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.829679][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.838304][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.848806][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.857719][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.866799][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.875899][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.886266][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.895935][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.908748][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.919637][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.944562][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.956167][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.965925][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.975687][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.010654][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.028874][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.053769][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.061359][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.078375][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.100137][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.123530][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.134832][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.144507][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.151608][ T4282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.162099][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.171277][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.180262][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.187407][ T4282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.196801][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.234266][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.249278][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.272510][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.293687][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.306771][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.335294][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.347000][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.360639][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.376724][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.411623][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.424225][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.444931][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.454474][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.463524][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.471959][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.481616][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.490790][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.499517][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.507427][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.516470][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.524962][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.533218][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.560546][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.569528][ T4190] device veth0_vlan entered promiscuous mode [ 70.578986][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.588373][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.601211][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.614446][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.632217][ T4190] device veth1_vlan entered promiscuous mode [ 70.673039][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.682057][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.692010][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.702197][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.711133][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.720580][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.734085][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.758880][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.768232][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.777239][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.786768][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.796053][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.803251][ T4282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.845257][ T4190] device veth0_macvtap entered promiscuous mode [ 70.858955][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.869337][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.884321][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.898904][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.906066][ T4282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.919964][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.928850][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.950721][ T4194] device veth0_vlan entered promiscuous mode [ 70.961349][ T4190] device veth1_macvtap entered promiscuous mode [ 70.975892][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.985676][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.994762][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.003329][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.011737][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.021002][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.031656][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.049008][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.056988][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.066664][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.075539][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.084805][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.096408][ T4200] device veth0_vlan entered promiscuous mode [ 71.119135][ T4200] device veth1_vlan entered promiscuous mode [ 71.134674][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.146793][ T4194] device veth1_vlan entered promiscuous mode [ 71.157499][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.166912][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.176335][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.184589][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.198731][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.217988][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.226121][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.235230][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.245955][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.254974][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.269802][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.275341][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.276601][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.301134][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.310133][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.319979][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.328984][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.356655][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.366911][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.376630][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.387198][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.411678][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.424372][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.433093][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.441604][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.453214][ T4194] device veth0_macvtap entered promiscuous mode [ 71.468854][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.484420][ T4194] device veth1_macvtap entered promiscuous mode [ 71.504211][ T2303] Bluetooth: hci0: command 0x040f tx timeout [ 71.515527][ T2303] Bluetooth: hci1: command 0x040f tx timeout [ 71.537024][ T4200] device veth0_macvtap entered promiscuous mode [ 71.552670][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.560807][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.570544][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.580379][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.589829][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.596488][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 71.602181][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.612466][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 71.614896][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.623255][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 71.644173][ T4200] device veth1_macvtap entered promiscuous mode [ 71.710432][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.727439][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.741077][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.764944][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.778139][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.788372][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.799137][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.811140][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.821563][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.830325][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.840007][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.850335][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.859233][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.870934][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.881963][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.897551][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.909621][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.920288][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.930589][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.941821][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.954037][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.967289][ T4191] device veth0_vlan entered promiscuous mode [ 71.979852][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.001136][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.018863][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.034425][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.049394][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.059674][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.071800][ T3080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.081656][ T3080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.117156][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.120144][ T4191] device veth1_vlan entered promiscuous mode [ 72.139791][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.140228][ T4200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.158765][ T4200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.167584][ T4200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.176676][ T4200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.187286][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.195912][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.204438][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.212278][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.221516][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.232946][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.241720][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.250922][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.294988][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.311205][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.335815][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.437128][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.453409][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.493191][ T4191] device veth0_macvtap entered promiscuous mode [ 72.534794][ T4191] device veth1_macvtap entered promiscuous mode [ 72.555501][ T4313] loop1: detected capacity change from 0 to 8 [ 72.572785][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.580653][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.608836][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.619550][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.619579][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.644738][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.659358][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.667696][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.699345][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.725569][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.743742][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.767229][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.777687][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.789559][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.799816][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.815096][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.827945][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.846230][ T26] audit: type=1800 audit(1793484227.873:2): pid=4313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 72.877929][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.887718][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.897219][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.919860][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.947542][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.958268][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.969816][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.980126][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.990855][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.028921][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.051515][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.066280][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.082726][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.091474][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.107559][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.118969][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.135529][ T3080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.160795][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.177845][ T3080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.201137][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.220651][ T4323] loop1: detected capacity change from 0 to 1024 [ 73.250484][ T4323] EXT4-fs (loop1): Ignoring removed bh option [ 73.278336][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.314021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.327586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.357530][ T4189] device veth0_vlan entered promiscuous mode [ 73.377647][ T4321] loop3: detected capacity change from 0 to 1024 [ 73.387576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.398273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.410985][ T4323] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 73.414938][ T4189] device veth1_vlan entered promiscuous mode [ 73.567472][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.591889][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.672114][ T4301] Bluetooth: hci1: command 0x0419 tx timeout [ 73.678409][ T4301] Bluetooth: hci0: command 0x0419 tx timeout [ 73.684858][ T4301] Bluetooth: hci2: command 0x0419 tx timeout [ 73.690940][ T4301] Bluetooth: hci4: command 0x0419 tx timeout [ 73.697334][ T4301] Bluetooth: hci3: command 0x0419 tx timeout [ 73.727058][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.747948][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.759644][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.769292][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.846231][ T4330] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 74.117192][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.176548][ T4278] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.335951][ T4189] device veth0_macvtap entered promiscuous mode [ 74.351174][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.376385][ T4189] device veth1_macvtap entered promiscuous mode [ 74.393561][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.417556][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.424085][ T4278] usb 3-1: Using ep0 maxpacket: 8 [ 74.453340][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.473800][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.491142][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.502636][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.513822][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.524534][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.534482][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.553206][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.592176][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.679085][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.713772][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.723793][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.734414][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.744356][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.754853][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.764959][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.775457][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.787869][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.802604][ T4278] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.827549][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.844168][ T4278] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 74.880484][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.996670][ T4278] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 75.147341][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.685325][ T4278] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 75.700723][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.711431][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.718729][ T4278] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 75.726687][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.738745][ T4278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.738819][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.802456][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.827457][ T4340] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8'. [ 75.836813][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 75.842679][ T4279] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.850193][ T4340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.940015][ T4278] hub 3-1:1.0: bad descriptor, ignoring hub [ 75.948886][ T4278] hub: probe of 3-1:1.0 failed with error -5 [ 75.959105][ T4278] cdc_wdm 3-1:1.0: skipping garbage [ 75.970080][ T4278] cdc_wdm 3-1:1.0: skipping garbage [ 75.982206][ T4278] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 75.988795][ T4278] cdc_wdm 3-1:1.0: Unknown control protocol [ 76.215588][ T4278] usb 3-1: USB disconnect, device number 2 [ 76.284603][ T4352] CIFS mount error: No usable UNC path provided in device string! [ 76.284603][ T4352] [ 76.295015][ T4352] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 76.373306][ T4279] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 76.901816][ T4279] usb 2-1: config 0 has no interface number 0 [ 76.942471][ T4279] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.013939][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.064474][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.088239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.207983][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.226760][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.253046][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.293151][ T4279] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 77.687498][ T4359] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.393285][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.623432][ T26] audit: type=1326 audit(1793484233.643:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4363 comm="syz.2.12" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a8b381559 code=0x0 [ 79.368380][ T4279] usb 2-1: Product: syz [ 79.372693][ T4279] usb 2-1: Manufacturer: syz [ 79.377332][ T4279] usb 2-1: SerialNumber: syz [ 79.420714][ T4377] loop4: detected capacity change from 0 to 4096 [ 79.468855][ T4279] usb 2-1: config 0 descriptor?? [ 79.502803][ T4279] usb 2-1: can't set config #0, error -71 [ 79.513068][ T4279] usb 2-1: USB disconnect, device number 2 [ 79.610345][ T4377] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 81.242362][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.252398][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.262373][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.272371][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.282374][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.292370][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.302375][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.312370][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.322375][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.332378][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 82.105336][ T4406] ip_tables: iptables: counters copy to user failed while replacing table [ 82.572577][ T4346] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.003955][ T4346] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 83.062023][ T4346] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 83.181425][ T4346] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 83.271426][ T4346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.487895][ T4346] usb 3-1: invalid MIDI out EP 0 [ 83.820977][ T4346] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 83.926815][ T4346] usb 3-1: USB disconnect, device number 3 [ 83.989713][ T4435] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.701742][ T4309] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.290932][ T4433] udevd[4433]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.573865][ T4448] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 86.786242][ T23] cfg80211: failed to load regulatory.db [ 87.272679][ T4178] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 87.371195][ T4463] loop2: detected capacity change from 0 to 2048 [ 87.445009][ T4467] loop4: detected capacity change from 0 to 2048 [ 87.459900][ T4463] ======================================================= [ 87.459900][ T4463] WARNING: The mand mount option has been deprecated and [ 87.459900][ T4463] and is ignored by this kernel. Remove the mand [ 87.459900][ T4463] option from the mount to silence this warning. [ 87.459900][ T4463] ======================================================= [ 87.600376][ T4467] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.823427][ T4178] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 87.956427][ T4178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.200561][ T4178] usb 4-1: Product: syz [ 88.252387][ T4178] usb 4-1: Manufacturer: syz [ 88.283514][ T4178] usb 4-1: SerialNumber: syz [ 88.352552][ T4178] usb 4-1: config 0 descriptor?? [ 88.680491][ T4178] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 002 [ 89.034099][ T4189] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 89.082841][ T4189] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 89.219126][ T23] usb 4-1: USB disconnect, device number 2 [ 89.232588][ T4456] i2c i2c-1: failure sending STOP [ 89.539997][ T4489] loop0: detected capacity change from 0 to 16 [ 89.596242][ T4489] erofs: (device loop0): mounted with root inode @ nid 36. [ 89.649427][ T4478] loop2: detected capacity change from 0 to 32768 [ 89.742193][ T4189] syz-executor (4189) used greatest stack depth: 20560 bytes left [ 89.886438][ T4492] netlink: 'syz.3.41': attribute type 1 has an invalid length. [ 89.928984][ T4478] JBD2: Ignoring recovery information on journal [ 90.159989][ T4478] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 90.284432][ T4492] team0: Port device team_slave_0 removed [ 90.380631][ T4494] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.501753][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 90.964269][ T4508] loop2: detected capacity change from 0 to 512 [ 91.027790][ T4508] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 91.115100][ T4508] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 91.140507][ T4494] chnl_net:caif_netlink_parms(): no params data found [ 92.144896][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 92.267318][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 92.290272][ T4531] loop3: detected capacity change from 0 to 512 [ 92.357544][ T4531] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 92.396564][ T4531] EXT4-fs (loop3): 1 truncate cleaned up [ 92.413609][ T4531] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,acl,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 92.438464][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.468573][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.504332][ T4494] device bridge_slave_0 entered promiscuous mode [ 92.539933][ T26] audit: type=1800 audit(1793484247.563:4): pid=4531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.51" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 92.563546][ T4539] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.562989][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.605743][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.637220][ T4494] device bridge_slave_1 entered promiscuous mode [ 92.650859][ T4541] loop1: detected capacity change from 0 to 16 [ 92.745170][ T4494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.755238][ T4541] erofs: (device loop1): mounted with root inode @ nid 36. [ 92.800401][ T4494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.909095][ T4494] team0: Port device team_slave_0 added [ 92.949733][ T4494] team0: Port device team_slave_1 added [ 93.022005][ T4494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.052021][ T4494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.085772][ T4494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.136909][ T4494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.165585][ T4494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.223959][ T4551] loop2: detected capacity change from 0 to 128 [ 93.230441][ T4494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.888329][ T4551] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,discard,i_version,nobarrier,,errors=continue. Quota mode: none. [ 93.903579][ T4551] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.945940][ T4559] loop3: detected capacity change from 0 to 256 [ 93.983289][ T4556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.58'. [ 94.002918][ T4560] device veth0_to_team entered promiscuous mode [ 94.062050][ T4494] device hsr_slave_0 entered promiscuous mode [ 94.117598][ T4494] device hsr_slave_1 entered promiscuous mode [ 94.134908][ T4494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.154086][ T26] audit: type=1804 audit(1793484249.173:5): pid=4559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.59" name="/newroot/17/file0/bus" dev="loop3" ino=1048625 res=1 errno=0 [ 94.155261][ T4494] Cannot create hsr debugfs directory [ 94.205010][ T4554] device veth0_to_team left promiscuous mode [ 94.213324][ T4551] fscrypt: Error allocating hmac(sha512): -2 [ 94.242564][ T4566] loop0: detected capacity change from 0 to 512 [ 94.313009][ T4566] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 94.321346][ T4566] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 94.392503][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 94.625896][ T4577] usb251xb 0-0002: supply vdd not found, using dummy regulator [ 94.674771][ T4494] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.695992][ T4577] usb251xb 0-0002: configuring block 0 failed: -5 [ 94.823436][ T4577] usb251xb 0-0002: Failed to connect hub (-5) [ 95.083757][ T4577] usb251xb: probe of 0-0002 failed with error -5 [ 95.104398][ T4494] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.347712][ T4577] i2c i2c-0: new_device: Instantiated device usb2512b at 0x02 [ 95.416740][ T4586] ip_tables: iptables: counters copy to user failed while replacing table [ 95.521131][ T4494] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.645826][ T4590] block2mtd: erasesize must be a divisor of device size [ 96.004063][ T4494] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.017378][ T4587] loop0: detected capacity change from 0 to 4096 [ 96.097912][ T4587] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.230295][ T4600] loop3: detected capacity change from 0 to 16 [ 96.463856][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 96.560620][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.783656][ T4600] erofs: (device loop3): mounted with root inode @ nid 36. [ 97.088135][ T4494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.121305][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.139445][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.153617][ T4494] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.175834][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.191578][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.211084][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.218261][ T4344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.277769][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.515129][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.347602][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.408590][ T4178] Bluetooth: hci0: command 0x0419 tx timeout [ 99.418012][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.425212][ T4344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.599890][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.649888][ T4619] loop2: detected capacity change from 0 to 512 [ 99.659524][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.684181][ T1109] libceph: connect (1)[c::]:6789 error -101 [ 99.709093][ T1109] libceph: mon0 (1)[c::]:6789 connect error [ 99.731381][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.786052][ T4619] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 99.812845][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.837158][ T4619] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 99.852834][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.866463][ T4609] ceph: No mds server is up or the cluster is laggy [ 100.128356][ T4626] block2mtd: erasesize must be a divisor of device size [ 100.616613][ T4624] ip_tables: iptables: counters copy to user failed while replacing table [ 100.681344][ T4494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.739113][ T4494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.763061][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.771514][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.795527][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.833518][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.852480][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.885108][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.888420][ T4630] loop1: detected capacity change from 0 to 4096 [ 100.912589][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.947984][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.094056][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.685929][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.973500][ T4202] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 101.986103][ T4202] CPU: 1 PID: 4202 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 101.993718][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 102.003810][ T4202] Workqueue: hci2 hci_rx_work [ 102.008577][ T4202] Call Trace: [ 102.011890][ T4202] [ 102.014853][ T4202] dump_stack_lvl+0x188/0x250 [ 102.019579][ T4202] ? show_regs_print_info+0x20/0x20 [ 102.024821][ T4202] ? load_image+0x410/0x410 [ 102.029382][ T4202] sysfs_create_dir_ns+0x26a/0x290 [ 102.034533][ T4202] ? sysfs_warn_dup+0xa0/0xa0 [ 102.039252][ T4202] ? kthread+0x42e/0x520 [ 102.043534][ T4202] ? do_raw_spin_unlock+0x11d/0x230 [ 102.048780][ T4202] kobject_add_internal+0x5ba/0xcd0 [ 102.054020][ T4202] kobject_add+0x160/0x230 [ 102.058471][ T4202] ? kobject_init+0x1c0/0x1c0 [ 102.063193][ T4202] ? __raw_spin_lock_init+0x41/0x100 [ 102.068516][ T4202] ? klist_children_get+0x50/0x50 [ 102.073606][ T4202] ? get_device_parent+0x121/0x3e0 [ 102.078759][ T4202] device_add+0x470/0x1050 [ 102.083222][ T4202] ? device_initialize+0x2a5/0x4d0 [ 102.088401][ T4202] hci_conn_add_sysfs+0xd1/0x1e0 [ 102.093381][ T4202] le_conn_complete_evt+0xc55/0x14d0 [ 102.098756][ T4202] ? cs_le_create_conn+0x5e0/0x5e0 [ 102.103910][ T4202] ? __mutex_trylock_common+0x15c/0x260 [ 102.109519][ T4202] hci_le_meta_evt+0x285/0x3ca0 [ 102.114413][ T4202] ? hci_event_packet+0x363/0x1310 [ 102.119593][ T4202] ? __lock_acquire+0x7d40/0x7d40 [ 102.124669][ T4202] ? hci_remote_host_features_evt+0x240/0x240 [ 102.130898][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 102.136597][ T4202] ? mark_lock+0x94/0x320 [ 102.140965][ T4202] ? mutex_unlock+0x10/0x10 [ 102.145516][ T4202] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 102.151549][ T4202] ? lock_chain_count+0x20/0x20 [ 102.156445][ T4202] ? __rwlock_init+0x140/0x140 [ 102.161253][ T4202] hci_event_packet+0xe0b/0x1310 [ 102.166241][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 102.171134][ T4202] ? rcu_lock_release+0x20/0x20 [ 102.176116][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 102.181358][ T4202] hci_rx_work+0x255/0xa10 [ 102.185864][ T4202] process_one_work+0x867/0xff0 [ 102.190903][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 102.196623][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 102.201964][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 102.207032][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 102.212632][ T4202] ? wq_worker_running+0x97/0x170 [ 102.217710][ T4202] worker_thread+0xad7/0x12a0 [ 102.222553][ T4202] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 102.228498][ T4202] kthread+0x42e/0x520 [ 102.232607][ T4202] ? rcu_lock_release+0x20/0x20 [ 102.237491][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 102.242120][ T4202] ret_from_fork+0x1f/0x30 [ 102.246587][ T4202] [ 102.262641][ T4202] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 102.276835][ T4202] Bluetooth: hci2: failed to register connection device [ 102.313199][ T4630] ntfs3: loop1: Failed to load $Extend. [ 102.387738][ T4650] loop2: detected capacity change from 0 to 4096 [ 102.523008][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.549198][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.642103][ T4494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.654913][ T4650] ntfs3: loop2: Failed to load $Extend. [ 102.733286][ T4655] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 104.996563][ T4659] loop3: detected capacity change from 0 to 512 [ 105.032534][ T4669] ip_tables: iptables: counters copy to user failed while replacing table [ 105.139398][ T4659] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 105.162154][ T4659] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 106.278014][ T4694] loop3: detected capacity change from 0 to 16 [ 106.334818][ T4694] erofs: (device loop3): mounted with root inode @ nid 36. [ 106.559313][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.577944][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.668162][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.686609][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.719995][ T4494] device veth0_vlan entered promiscuous mode [ 106.807310][ T4711] ip_tables: iptables: counters copy to user failed while replacing table [ 106.841110][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.867085][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.909065][ T4494] device veth1_vlan entered promiscuous mode [ 107.131628][ T4494] device veth0_macvtap entered promiscuous mode [ 107.170111][ T4716] loop3: detected capacity change from 0 to 1024 [ 107.181629][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.204904][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.229958][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.262512][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.303135][ T4718] CIFS mount error: No usable UNC path provided in device string! [ 107.303135][ T4718] [ 107.313339][ T4718] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 107.587580][ T4716] EXT4-fs (loop3): Ignoring removed bh option [ 107.916922][ T4716] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 108.000718][ T4494] device veth1_macvtap entered promiscuous mode [ 108.025288][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.046654][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.107725][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.132827][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.300435][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.311159][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.366195][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.377931][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.821710][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.839697][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.865876][ T4699] loop2: detected capacity change from 0 to 32768 [ 108.884604][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.905677][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.127790][ T4494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.202542][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.250185][ T4740] gadgetfs: bound to dummy_udc driver [ 109.266683][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.289770][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.298410][ T4699] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.97 (4699) [ 109.339154][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.368114][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.389098][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.472264][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.565964][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.566379][ T4699] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 109.589856][ T4699] BTRFS info (device loop2): setting nodatasum [ 109.599091][ T4699] BTRFS info (device loop2): force zlib compression, level 3 [ 109.607713][ T4699] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 109.618676][ T4699] BTRFS info (device loop2): use lzo compression, level 0 [ 109.629166][ T4699] BTRFS info (device loop2): turning on flush-on-commit [ 109.651187][ T4699] BTRFS info (device loop2): enabling auto defrag [ 109.652736][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.668424][ T4699] BTRFS info (device loop2): max_inline at 4096 [ 109.668537][ T4699] BTRFS info (device loop2): using free space tree [ 109.668589][ T4699] BTRFS info (device loop2): has skinny extents [ 109.793142][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.804018][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.825412][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.926891][ T4494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.098398][ T4699] BTRFS error (device loop2): open_ctree failed: -12 [ 110.114927][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.136157][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.255622][ T9] device hsr_slave_0 left promiscuous mode [ 110.273737][ T9] device hsr_slave_1 left promiscuous mode [ 110.282150][ T4777] loop1: detected capacity change from 0 to 1024 [ 110.292502][ T4764] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.323247][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.331708][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.333402][ T4777] EXT4-fs (loop1): Ignoring removed bh option [ 110.369894][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.509906][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.542075][ T9] device bridge_slave_1 left promiscuous mode [ 110.581747][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.601745][ T9] device bridge_slave_0 left promiscuous mode [ 110.610332][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.617351][ T4777] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 110.697169][ T4790] CIFS mount error: No usable UNC path provided in device string! [ 110.697169][ T4790] [ 110.707332][ T4790] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 111.170474][ T9] device veth1_macvtap left promiscuous mode [ 111.313215][ T9] device veth0_macvtap left promiscuous mode [ 111.319364][ T9] device veth1_vlan left promiscuous mode [ 111.325718][ T9] device veth0_vlan left promiscuous mode [ 111.472641][ T4764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.502367][ T4764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.512184][ T4764] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 111.572429][ T4764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.604153][ T4764] usb 4-1: config 0 descriptor?? [ 112.006858][ T9] team0 (unregistering): Port device team_slave_1 removed [ 112.038038][ T9] team0 (unregistering): Port device team_slave_0 removed [ 112.081207][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.100730][ T4764] cp2112 0003:10C4:EA90.0001: item fetching failed at offset 6/7 [ 112.124205][ T4764] cp2112 0003:10C4:EA90.0001: parse failed [ 112.145001][ T4764] cp2112: probe of 0003:10C4:EA90.0001 failed with error -22 [ 112.202931][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.323361][ T2858] usb 4-1: USB disconnect, device number 3 [ 112.422749][ T9] bond0 (unregistering): Released all slaves [ 112.506629][ T4494] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.521205][ T4494] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.532957][ T4494] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.541955][ T4494] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.654746][ T4810] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.368243][ T4819] 9pnet_virtio: no channels available for device 127.0.0.1 [ 114.787835][ T4829] loop0: detected capacity change from 0 to 512 [ 115.105110][ T4829] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 115.341386][ T4829] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 115.376530][ T4557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.408065][ T4557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.430979][ T4837] loop3: detected capacity change from 0 to 1024 [ 115.452981][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.522495][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.530378][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.537216][ T4838] loop1: detected capacity change from 0 to 16 [ 115.541471][ T4837] EXT4-fs (loop3): Ignoring removed bh option [ 115.611676][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.625690][ T4838] erofs: (device loop1): mounted with root inode @ nid 36. [ 115.667073][ T4837] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 115.892801][ C1] sd 0:0:1:0: [sda] tag#531 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 115.903275][ C1] sd 0:0:1:0: [sda] tag#531 CDB: Security protocol out [ 115.910174][ C1] sd 0:0:1:0: [sda] tag#531 CDB[00]: b5 c9 bf 61 c5 ab 95 4a 11 ef e6 08 9e 10 3a de [ 115.919750][ C1] sd 0:0:1:0: [sda] tag#531 CDB[10]: 89 dd 30 ef 00 e3 2f b5 22 15 9f c9 cc bc 70 60 [ 115.929312][ C1] sd 0:0:1:0: [sda] tag#531 CDB[20]: da [ 118.519877][ T4877] 9pnet_virtio: no channels available for device 127.0.0.1 [ 118.601762][ T4878] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.903630][ T4904] ip_tables: iptables: counters copy to user failed while replacing table [ 121.876562][ T4912] loop0: detected capacity change from 0 to 512 [ 122.026892][ T4915] loop3: detected capacity change from 0 to 16 [ 122.143885][ T4915] erofs: (device loop3): mounted with root inode @ nid 36. [ 122.489296][ T4924] jffs2: notice: (4924) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.978426][ T4930] loop5: detected capacity change from 0 to 512 [ 124.492870][ T4930] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 124.516335][ T4930] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 126.271663][ T4947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 126.365496][ T4952] ip_tables: iptables: counters copy to user failed while replacing table [ 128.538502][ T4973] loop0: detected capacity change from 0 to 512 [ 128.799489][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 128.822277][ T4973] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.152: missing EA_INODE flag [ 128.916006][ T4986] CIFS mount error: No usable UNC path provided in device string! [ 128.916006][ T4986] [ 128.926248][ T4986] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 129.247256][ T4973] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.152: error while reading EA inode 12 err=-117 [ 129.356301][ T4973] EXT4-fs (loop0): 1 orphan inode deleted [ 129.448928][ T4973] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 129.736264][ T4994] loop3: detected capacity change from 0 to 1024 [ 129.809728][ T4994] EXT4-fs (loop3): Ignoring removed bh option [ 130.804412][ T4994] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 131.452784][ T5012] vivid-000: ================= START STATUS ================= [ 131.562486][ T5012] vivid-000: Radio HW Seek Mode: Bounded [ 131.569766][ T5012] vivid-000: Radio Programmable HW Seek: false [ 131.633268][ T5012] vivid-000: RDS Rx I/O Mode: Block I/O [ 131.639637][ T5012] vivid-000: Generate RBDS Instead of RDS: false [ 131.646700][ T5012] vivid-000: RDS Reception: true [ 131.651851][ T5012] vivid-000: RDS Program Type: 0 inactive [ 131.658741][ T5012] vivid-000: RDS PS Name: inactive [ 131.665285][ T5012] vivid-000: RDS Radio Text: inactive [ 131.671034][ T5012] vivid-000: RDS Traffic Announcement: false inactive [ 131.678960][ T5012] vivid-000: RDS Traffic Program: false inactive [ 131.690425][ T5012] vivid-000: RDS Music: false inactive [ 132.153551][ T5019] ip_tables: iptables: counters copy to user failed while replacing table [ 132.257812][ T5012] vivid-000: ================== END STATUS ================== [ 132.718268][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.720686][ T5028] loop2: detected capacity change from 0 to 512 [ 132.724661][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.130265][ T5037] CIFS mount error: No usable UNC path provided in device string! [ 133.130265][ T5037] [ 133.140460][ T5037] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 135.160507][ T5028] EXT4-fs (loop2): 1 truncate cleaned up [ 135.170542][ T5041] loop0: detected capacity change from 0 to 512 [ 135.175206][ T5028] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 135.259790][ T5048] nfs: Unknown parameter 'fscontext' [ 135.343647][ T5041] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 135.567112][ T5041] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 135.864900][ T26] audit: type=1800 audit(1793484290.883:6): pid=5049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.164" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 135.999953][ T5044] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 136.422459][ T4927] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.662505][ T4927] usb 4-1: Using ep0 maxpacket: 32 [ 136.730672][ T5066] loop2: detected capacity change from 0 to 24 [ 136.775761][ T5066] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 136.850151][ T5066] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 136.862608][ T4927] usb 4-1: unable to get BOS descriptor or descriptor too short [ 136.870351][ T4927] usb 4-1: no configurations [ 136.941621][ T5066] romfs: read error for inode 0x70040 [ 137.051905][ T4927] usb 4-1: can't read configurations, error -22 [ 137.213540][ T5075] netlink: 128 bytes leftover after parsing attributes in process `syz.1.172'. [ 137.223521][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 137.238234][ T5075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.909353][ T5087] ip_tables: iptables: counters copy to user failed while replacing table [ 140.342938][ T4276] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.533779][ T5104] jffs2: notice: (5104) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 140.582505][ T4276] usb 3-1: Using ep0 maxpacket: 16 [ 140.703626][ T4276] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.884812][ T4276] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.921548][ T4276] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.009456][ T5116] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 141.180100][ T4276] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 141.446252][ T4276] usb 3-1: config 0 interface 0 has no altsetting 0 [ 141.645889][ T4276] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 141.688948][ T5118] loop1: detected capacity change from 0 to 512 [ 141.706003][ T4276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.777692][ T4276] usb 3-1: config 0 descriptor?? [ 141.874560][ T5118] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 141.906831][ T5118] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.182: invalid indirect mapped block 256 (level 1) [ 141.954138][ T5118] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.182: invalid indirect mapped block 2683928664 (level 1) [ 141.975636][ T5118] EXT4-fs (loop1): 1 truncate cleaned up [ 141.981944][ T5118] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 142.152493][ T4276] usbhid 3-1:0.0: can't add hid device: -71 [ 142.158629][ T4276] usbhid: probe of 3-1:0.0 failed with error -71 [ 142.214688][ T4276] usb 3-1: USB disconnect, device number 4 [ 142.478040][ T5141] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.182: Invalid block bitmap block 3 in block_group 0 [ 142.607298][ T5141] EXT4-fs error (device loop1): ext4_find_dest_de:2117: inode #2: block 13: comm syz.1.182: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 144.644874][ T4278] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.676594][ T5158] loop1: detected capacity change from 0 to 256 [ 144.707994][ T5158] exfat: Unknown parameter 'keep_last_dots' [ 144.792465][ T4773] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 145.042410][ T4278] usb 3-1: Using ep0 maxpacket: 32 [ 145.114012][ T5167] loop1: detected capacity change from 0 to 2048 [ 145.231807][ T5167] UDF-fs: bad mount option "ÿÿÿÿ0x0000000000000000" or missing value [ 145.243378][ T4278] usb 3-1: unable to get BOS descriptor or descriptor too short [ 145.274126][ T4278] usb 3-1: no configurations [ 145.296021][ T4278] usb 3-1: can't read configurations, error -22 [ 145.342711][ T4773] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 145.350866][ T4773] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 145.388619][ T4773] usb 4-1: config 4 has no interface number 0 [ 145.398812][ T4773] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 145.602755][ T4773] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 145.614084][ T4773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.104987][ T5178] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 146.345153][ T4773] usb 4-1: Product: syz [ 146.349393][ T4773] usb 4-1: Manufacturer: syz [ 146.354128][ T4773] usb 4-1: SerialNumber: syz [ 146.492697][ T4773] usb 4-1: can't set config #4, error -71 [ 146.517073][ T4773] usb 4-1: USB disconnect, device number 6 [ 146.836890][ T5199] netlink: 128 bytes leftover after parsing attributes in process `syz.3.198'. [ 146.846010][ T5199] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 146.855193][ T5199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.105277][ T5203] CIFS mount error: No usable UNC path provided in device string! [ 147.105277][ T5203] [ 147.115709][ T5203] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 148.012398][ T4927] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 148.086874][ T5187] loop5: detected capacity change from 0 to 32768 [ 148.553194][ T4927] usb 3-1: Using ep0 maxpacket: 16 [ 149.339103][ T5187] XFS (loop5): Mounting V5 Filesystem [ 149.343490][ T4927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.363334][ T4927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.377889][ T4927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 149.390909][ T4927] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 149.406495][ T4927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.417681][ T4927] usb 3-1: config 0 descriptor?? [ 149.459542][ T5260] netlink: 196 bytes leftover after parsing attributes in process `syz.1.209'. [ 149.540345][ T5187] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 149.857648][ T5187] XFS (loop5): Starting recovery (logdev: internal) [ 149.989645][ T5274] loop1: detected capacity change from 0 to 16 [ 150.048517][ T4927] hid-generic 0003:057E:2019.0002: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 150.124303][ T5187] XFS (loop5): Ending recovery (logdev: internal) [ 150.913066][ T5274] erofs: (device loop1): mounted with root inode @ nid 36. [ 150.933455][ T4494] XFS (loop5): Unmounting Filesystem [ 151.387314][ T5286] rxe_eth0 speed is unknown, defaulting to 1000 [ 152.262593][ T4278] usb 3-1: USB disconnect, device number 7 [ 152.456215][ T5285] fido_id[5285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 153.250388][ T5308] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 153.759843][ T5315] loop3: detected capacity change from 0 to 16 [ 153.818614][ T5320] loop0: detected capacity change from 0 to 512 [ 154.083631][ T5324] netlink: 128 bytes leftover after parsing attributes in process `syz.2.223'. [ 154.092756][ T5324] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 154.101782][ T5324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.422681][ T5318] rxe_eth0 speed is unknown, defaulting to 1000 [ 154.674504][ T5315] erofs: (device loop3): mounted with root inode @ nid 36. [ 154.743761][ T5320] FAT-fs (loop0): bogus sectors per cluster 0 [ 154.759273][ T5320] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 154.799460][ T5320] FAT-fs (loop0): Can't find a valid FAT filesystem [ 156.192404][ T1109] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 156.223249][ T5353] loop1: detected capacity change from 0 to 4096 [ 156.276521][ T5353] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 156.662853][ T5369] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 157.075034][ T1109] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.398425][ T1109] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.411491][ T1109] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 157.420824][ T1109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.984297][ T1109] rtsx_usb: probe of 6-1:1.0 failed with error -71 [ 159.177400][ T5393] 9pnet_virtio: no channels available for device 127.0.0.1 [ 159.197437][ T1109] usb 6-1: USB disconnect, device number 2 [ 161.482326][ C0] sched: RT throttling activated [ 161.716316][ T5410] device syzkaller1 entered promiscuous mode [ 162.107939][ T5416] loop3: detected capacity change from 0 to 16 [ 162.275625][ T5416] erofs: (device loop3): mounted with root inode @ nid 36. [ 162.658148][ T5428] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 163.258473][ T5432] loop3: detected capacity change from 0 to 4096 [ 163.356959][ T5432] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 164.252425][ T4278] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 164.503815][ T4278] usb 1-1: Using ep0 maxpacket: 32 [ 164.640844][ T4278] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 164.659482][ T4278] usb 1-1: config 0 has no interface number 0 [ 164.690072][ T4278] usb 1-1: config 0 interface 184 has no altsetting 0 [ 166.253799][ T4278] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 166.318088][ T4278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.342425][ T4278] usb 1-1: Product: syz [ 166.346660][ T4278] usb 1-1: Manufacturer: syz [ 166.362582][ T4278] usb 1-1: SerialNumber: syz [ 166.392638][ T4278] usb 1-1: config 0 descriptor?? [ 166.453997][ T4278] smsc75xx v1.0.0 [ 166.460018][ T5462] loop2: detected capacity change from 0 to 512 [ 166.506660][ T4278] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 166.542562][ T4278] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 166.560454][ T5462] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 166.619722][ T5462] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.630607][ T4278] usb 1-1: USB disconnect, device number 2 [ 166.684488][ T5462] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 167.178879][ T5473] loop2: detected capacity change from 0 to 16 [ 167.296372][ T5473] erofs: (device loop2): mounted with root inode @ nid 36. [ 167.446723][ T5481] block2mtd: erasesize must be a divisor of device size [ 168.784361][ T5501] loop2: detected capacity change from 0 to 4096 [ 168.932487][ T5511] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 168.977993][ T5501] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 170.544567][ T4346] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 170.822476][ T4346] usb 1-1: Using ep0 maxpacket: 8 [ 170.942686][ T4346] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.122840][ T4346] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 171.148366][ T4346] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 171.197618][ T4346] usb 1-1: Manufacturer: syz [ 171.224861][ T4346] usb 1-1: SerialNumber: syz [ 171.383832][ T4346] usb 1-1: config 0 descriptor?? [ 171.974980][ T4346] usb 1-1: can't set config #0, error -71 [ 172.004563][ T4346] usb 1-1: USB disconnect, device number 3 [ 172.206272][ T5547] loop0: detected capacity change from 0 to 256 [ 173.642568][ T5561] loop3: detected capacity change from 0 to 4096 [ 173.901345][ T5568] CIFS mount error: No usable UNC path provided in device string! [ 173.901345][ T5568] [ 173.911485][ T5568] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 174.436398][ T5561] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 175.580306][ T5573] loop0: detected capacity change from 0 to 512 [ 175.750856][ T5573] EXT4-fs (loop0): Ignoring removed oldalloc option [ 175.811896][ T5573] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802c018, mo2=0002] [ 175.827814][ T5573] System zones: 1-3, 19-19, 35-38 [ 175.901526][ T5573] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,debug,noinit_itable,,errors=continue. Quota mode: writeback. [ 176.027785][ T5573] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.067882][ T5586] loop3: detected capacity change from 0 to 2048 [ 176.375779][ T5594] 9pnet_virtio: no channels available for device 127.0.0.1 [ 176.612969][ T5586] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.950012][ T5586] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 177.015608][ T5586] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 177.028333][ T5586] EXT4-fs (loop3): This should not happen!! Data will be lost [ 177.028333][ T5586] [ 177.039904][ T5586] EXT4-fs (loop3): Total free blocks count 0 [ 177.046546][ T5586] EXT4-fs (loop3): Free/Dirty block details [ 177.052642][ T5586] EXT4-fs (loop3): free_blocks=66060288 [ 177.058313][ T5586] EXT4-fs (loop3): dirty_blocks=32 [ 177.063563][ T5586] EXT4-fs (loop3): Block reservation details [ 177.069736][ T5586] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 177.118729][ T155] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 177.137227][ T155] EXT4-fs (loop3): This should not happen!! Data will be lost [ 177.137227][ T155] [ 177.202537][ T5575] loop1: detected capacity change from 0 to 32768 [ 177.287772][ T5575] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.283 (5575) [ 177.314395][ T4276] hid-generic 0005:0B57:0B90.0003: item fetching failed at offset 0/1 [ 177.324287][ T4276] hid-generic: probe of 0005:0B57:0B90.0003 failed with error -22 [ 177.468503][ T5618] Zero length message leads to an empty skb [ 178.129284][ T5622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.290'. [ 178.174862][ T5622] netlink: 'syz.0.290': attribute type 7 has an invalid length. [ 178.255238][ T5622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 179.102684][ T5575] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 179.111466][ T5575] BTRFS info (device loop1): setting nodatasum [ 179.333609][ T5575] BTRFS info (device loop1): force zlib compression, level 3 [ 179.622548][ T5575] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 179.632748][ T5575] BTRFS info (device loop1): use lzo compression, level 0 [ 179.640040][ T5575] BTRFS info (device loop1): turning on flush-on-commit [ 179.648180][ T5575] BTRFS info (device loop1): enabling auto defrag [ 179.655079][ T5575] BTRFS info (device loop1): max_inline at 4096 [ 179.662239][ T5575] BTRFS info (device loop1): using free space tree [ 179.670173][ T5575] BTRFS info (device loop1): has skinny extents [ 179.898945][ T5575] BTRFS error (device loop1): open_ctree failed: -12 [ 180.012170][ T26] audit: type=1800 audit(1793484335.033:7): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.294" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 181.036954][ T5679] loop2: detected capacity change from 0 to 512 [ 181.182854][ T5679] EXT4-fs (loop2): Ignoring removed oldalloc option [ 181.259366][ T5686] loop3: detected capacity change from 0 to 512 [ 181.281174][ T5679] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802c018, mo2=0002] [ 181.317136][ T5679] System zones: 1-3, 19-19, 35-38 [ 181.376906][ T5679] EXT4-fs (loop2): mounted filesystem without journal. Opts: oldalloc,debug,noinit_itable,,errors=continue. Quota mode: writeback. [ 181.502543][ T5679] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.529863][ T5686] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #17: comm syz.3.300: iget: bogus i_mode (0) [ 181.543332][ T5686] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.300: couldn't read orphan inode 17 (err -117) [ 181.555639][ T5686] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,max_dir_size_kb=0x0000000000000009,,errors=continue. Quota mode: none. [ 182.168909][ T5702] CIFS mount error: No usable UNC path provided in device string! [ 182.168909][ T5702] [ 182.179119][ T5702] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 183.737610][ T5708] loop2: detected capacity change from 0 to 512 [ 183.882596][ T5708] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 183.905670][ T5708] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 186.011515][ T5713] Bluetooth: (null): Too short H5 packet [ 187.372689][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 187.467999][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.517751][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.577832][ T5737] loop1: detected capacity change from 0 to 1024 [ 187.585171][ T5728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.784910][ T5728] syz.2.311 (5728) used greatest stack depth: 20208 bytes left [ 187.806704][ T5737] EXT4-fs (loop1): Ignoring removed bh option [ 187.923801][ T5737] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 189.363745][ T5764] jffs2: notice: (5764) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 190.022387][ T5776] loop1: detected capacity change from 0 to 512 [ 190.195977][ T5776] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 190.241518][ T5776] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 191.138843][ T4773] Bluetooth: hci4: command 0x0406 tx timeout [ 191.154006][ T4300] Bluetooth: hci2: command 0x0406 tx timeout [ 191.160115][ T4300] Bluetooth: hci3: command 0x0406 tx timeout [ 193.192554][ T4773] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 193.452415][ T4773] usb 1-1: Using ep0 maxpacket: 32 [ 193.592672][ T4773] usb 1-1: unable to get BOS descriptor or descriptor too short [ 193.603875][ T4773] usb 1-1: no configurations [ 193.612408][ T4773] usb 1-1: can't read configurations, error -22 [ 194.945403][ T5675] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 194.968319][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.975357][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.036397][ T5675] Bluetooth: hci0: Injecting HCI hardware error event [ 195.144462][ T147] Bluetooth: hci0: hardware error 0x00 [ 195.557088][ T5823] loop5: detected capacity change from 0 to 512 [ 196.016802][ T5823] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 196.119087][ T5823] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 196.884194][ T5832] loop1: detected capacity change from 0 to 32768 [ 197.000803][ T5832] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 197.118550][ T5832] JBD2: Ignoring recovery information on journal [ 197.320060][ T5832] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 197.494751][ T5841] loop2: detected capacity change from 0 to 1024 [ 197.554580][ T5841] EXT4-fs (loop2): Ignoring removed bh option [ 197.652432][ T5832] syz.1.340 (5832) used greatest stack depth: 17728 bytes left [ 197.697517][ T5830] loop0: detected capacity change from 0 to 32768 [ 197.704376][ T5841] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 198.108141][ T5830] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 198.713782][ T4190] ocfs2: Unmounting device (7,1) on (node local) [ 198.729159][ T5830] JBD2: Ignoring recovery information on journal [ 199.799311][ T5856] loop2: detected capacity change from 0 to 512 [ 199.909999][ T5856] EXT4-fs (loop2): Test dummy encryption mode enabled [ 199.945867][ T5830] JBD2: recovery failed [ 199.950115][ T5830] (syz.0.339,5830,1):ocfs2_journal_load:1106 ERROR: Failed to load journal! [ 199.975824][ T5856] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 200.076066][ T5830] (syz.0.339,5830,0):ocfs2_check_volume:2435 ERROR: ocfs2 journal load failed! -5 [ 200.231373][ T5856] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 200.263768][ T5830] (syz.0.339,5830,0):ocfs2_check_volume:2491 ERROR: status = -5 [ 200.324817][ T5863] CIFS mount error: No usable UNC path provided in device string! [ 200.324817][ T5863] [ 200.334996][ T5863] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 200.984309][ T5830] (syz.0.339,5830,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 201.053450][ T5856] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.344: bad orphan inode 131083 [ 201.074787][ T5830] (syz.0.339,5830,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 201.346504][ T26] audit: type=1400 audit(1793484356.373:8): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="f/o" pid=5868 comm="syz.1.346" name="f/o" offset=35 [ 201.503868][ T4300] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 201.516247][ T5856] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x000000000000003d,test_dummy_encryption=v1,mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: none. [ 201.810783][ T4300] Bluetooth: hci4: Injecting HCI hardware error event [ 201.836814][ T4192] Bluetooth: hci4: hardware error 0x00 [ 202.391133][ T5856] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 203.252445][ T4756] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 203.886618][ T5898] hub 5-0:1.0: USB hub found [ 203.895875][ T5898] hub 5-0:1.0: 1 port detected [ 203.998868][ T4756] usb 2-1: Using ep0 maxpacket: 32 [ 204.732509][ T4756] usb 2-1: unable to get BOS descriptor or descriptor too short [ 204.740263][ T4756] usb 2-1: no configurations [ 204.777120][ T4756] usb 2-1: can't read configurations, error -22 [ 205.046924][ T5904] loop0: detected capacity change from 0 to 4096 [ 205.727292][ T5904] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 206.290847][ T5915] CIFS mount error: No usable UNC path provided in device string! [ 206.290847][ T5915] [ 206.301543][ T5915] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 207.097342][ T5917] loop5: detected capacity change from 0 to 256 [ 208.575906][ T26] audit: type=1400 audit(1793484362.743:9): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="f/o" pid=5919 comm="syz.3.359" name="f/o" offset=35 [ 212.896088][ T5951] loop1: detected capacity change from 0 to 4096 [ 212.908545][ T4278] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 213.482523][ T4278] Bluetooth: hci3: Injecting HCI hardware error event [ 213.489628][ T5951] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 213.501629][ T4192] Bluetooth: hci3: hardware error 0x00 [ 213.555837][ T5953] EXT4-fs (sda1): resizing filesystem from 262144 to 219 blocks [ 213.565290][ T5953] EXT4-fs warning (device sda1): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 215.494562][ T26] audit: type=1400 audit(1793484369.663:10): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="f/o" pid=5957 comm="syz.1.371" name="f/o" offset=35 [ 215.813992][ T5964] CIFS mount error: No usable UNC path provided in device string! [ 215.813992][ T5964] [ 215.824156][ T5964] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 217.332482][ T4772] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 217.592446][ T4772] usb 3-1: Using ep0 maxpacket: 8 [ 217.712618][ T4772] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 217.768258][ T4772] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 217.826125][ T4772] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 217.880385][ T4772] usb 3-1: config 250 has no interface number 0 [ 217.918595][ T4772] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 217.981711][ T4772] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 218.038486][ T4772] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 218.104763][ T4772] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 218.166135][ T4772] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 218.231519][ T4772] usb 3-1: config 250 interface 228 has no altsetting 0 [ 218.402665][ T4772] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 218.458035][ T4772] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 218.482423][ T4772] usb 3-1: Product: syz [ 218.498021][ T4772] usb 3-1: SerialNumber: syz [ 218.584123][ T4772] hub 3-1:250.228: bad descriptor, ignoring hub [ 218.603501][ T4772] hub: probe of 3-1:250.228 failed with error -5 [ 219.465683][ T4772] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 219.972419][ T4300] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 221.312750][ T4300] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.335663][ T4300] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.496247][ T4300] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 221.530523][ T4300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 221.569562][ T4300] usb 1-1: SerialNumber: syz [ 222.148453][ T4300] usb 1-1: 0:2 : does not exist [ 222.163079][ T4300] usb 1-1: USB disconnect, device number 6 [ 222.184554][ T5997] loop5: detected capacity change from 0 to 32768 [ 222.443852][ T4434] udevd[4434]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.470645][ T5997] XFS (loop5): Mounting V5 Filesystem [ 222.649354][ T5997] XFS (loop5): log mount failed [ 224.184884][ T6034] CIFS mount error: No usable UNC path provided in device string! [ 224.184884][ T6034] [ 224.195098][ T6034] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 225.852353][ T4278] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 226.182389][ T4278] usb 6-1: Using ep0 maxpacket: 32 [ 227.876349][ T4278] usb 6-1: unable to get BOS descriptor or descriptor too short [ 227.886999][ T4278] usb 6-1: no configurations [ 227.932702][ T4278] usb 6-1: can't read configurations, error -22 [ 228.948838][ T4772] usb 3-1: USB disconnect, device number 8 [ 228.974959][ T4772] usblp0: removed [ 229.361585][ T6069] CIFS mount error: No usable UNC path provided in device string! [ 229.361585][ T6069] [ 229.371824][ T6069] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 231.035383][ T6066] loop1: detected capacity change from 0 to 32768 [ 231.066232][ T6066] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.400 (6066) [ 231.121979][ T6066] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 231.122017][ T6066] BTRFS info (device loop1): setting nodatasum [ 231.122030][ T6066] BTRFS info (device loop1): force zlib compression, level 3 [ 231.122049][ T6066] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 231.122089][ T6066] BTRFS info (device loop1): use lzo compression, level 0 [ 231.122105][ T6066] BTRFS info (device loop1): turning on flush-on-commit [ 231.122118][ T6066] BTRFS info (device loop1): enabling auto defrag [ 231.122146][ T6066] BTRFS info (device loop1): max_inline at 4096 [ 231.122162][ T6066] BTRFS info (device loop1): using free space tree [ 231.122172][ T6066] BTRFS info (device loop1): has skinny extents [ 231.519575][ T6066] BTRFS info (device loop1): enabling ssd optimizations [ 232.653434][ T4278] Bluetooth: hci5: command 0x1003 tx timeout [ 232.660433][ T147] Bluetooth: hci5: sending frame failed (-49) [ 233.055156][ T6123] CIFS mount error: No usable UNC path provided in device string! [ 233.055156][ T6123] [ 233.065396][ T6123] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 233.802563][ T4278] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 234.092728][ T6129] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 234.502474][ T4278] usb 1-1: Using ep0 maxpacket: 32 [ 234.682580][ T4278] usb 1-1: unable to get BOS descriptor or descriptor too short [ 234.710717][ T4278] usb 1-1: no configurations [ 234.732351][ T4278] usb 1-1: can't read configurations, error -22 [ 234.741423][ T4276] Bluetooth: hci5: command 0x1001 tx timeout [ 234.748053][ T147] Bluetooth: hci5: sending frame failed (-49) [ 234.861181][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 235.364441][ T6164] rxe_eth0 speed is unknown, defaulting to 1000 [ 236.782834][ T4278] Bluetooth: hci5: command 0x1009 tx timeout [ 237.776288][ T6180] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 238.159704][ T6185] ip_tables: iptables: counters copy to user failed while replacing table [ 238.313635][ T6185] syz.5.431 uses obsolete (PF_INET,SOCK_PACKET) [ 238.445010][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 240.034392][ T26] audit: type=1400 audit(1793484394.173:11): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="f/o" pid=6193 comm="syz.1.435" name="f/o" offset=71 [ 240.302194][ T6202] binder: 6201:6202 ioctl ae01 f returned -22 [ 242.811127][ T6235] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 243.017871][ T6233] loop5: detected capacity change from 0 to 1024 [ 244.668029][ T26] audit: type=1400 audit(1793484398.833:12): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="f/o" pid=6232 comm="syz.3.446" name="f/o" offset=71 [ 244.992372][ T4276] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 245.145156][ T6250] loop1: detected capacity change from 0 to 16 [ 245.213156][ T6250] erofs: (device loop1): mounted with root inode @ nid 36. [ 245.482766][ T4276] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 245.508201][ T4276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 245.547391][ T4276] usb 3-1: Product: syz [ 245.569391][ T4276] usb 3-1: Manufacturer: syz [ 246.074218][ T4276] scsi host1: uas [ 246.307063][ T4276] usb 3-1: USB disconnect, device number 9 [ 246.757426][ T6262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.451'. [ 246.880841][ T6270] loop5: detected capacity change from 0 to 512 [ 247.043074][ T6273] Bluetooth: (null): Invalid header checksum [ 248.364922][ T6270] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 248.444630][ T6270] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 249.278338][ T6288] netlink: 128 bytes leftover after parsing attributes in process `syz.1.458'. [ 249.287425][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 249.297247][ T6288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.292830][ T26] audit: type=1400 audit(1793484405.463:13): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="f/o" pid=6285 comm="syz.2.460" name="f/o" offset=76 [ 252.370990][ T6300] loop1: detected capacity change from 0 to 16 [ 252.431003][ T6300] erofs: (device loop1): mounted with root inode @ nid 36. [ 252.603459][ T4276] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 252.673216][ T6302] loop3: detected capacity change from 0 to 512 [ 252.749567][ T6302] EXT4-fs (loop3): Ignoring removed oldalloc option [ 252.827987][ T6302] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802c018, mo2=0002] [ 252.852516][ T6302] System zones: 1-3, 19-19, 35-38 [ 252.918451][ T6302] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,debug,noinit_itable,,errors=continue. Quota mode: writeback. [ 252.962925][ T6302] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.982695][ T4276] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 253.022703][ T4276] usb 6-1: config 255 has 1 interface, different from the descriptor's value: 3 [ 253.422060][ T6315] netlink: 128 bytes leftover after parsing attributes in process `syz.1.468'. [ 253.432391][ T6315] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 253.445394][ T6315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.472671][ T4276] usb 6-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 253.509449][ T4276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.580595][ T4276] usb 6-1: Product: syz [ 253.759945][ T4276] usb 6-1: Manufacturer: syz [ 253.845470][ T4276] usb 6-1: SerialNumber: syz [ 254.441229][ T4276] usb 6-1: USB disconnect, device number 5 [ 255.129473][ T6325] loop0: detected capacity change from 0 to 512 [ 256.523930][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.530305][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.538094][ T26] audit: type=1400 audit(1793484410.693:14): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="f/o" pid=6327 comm="syz.3.472" name="f/o" offset=76 [ 256.856122][ T6325] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 257.589255][ T6325] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 258.595607][ T4192] Bluetooth: Wrong link type (-22) [ 258.601416][ T4192] Bluetooth: hci1: link tx timeout [ 258.606963][ T4192] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 258.618188][ T4192] Bluetooth: hci1: link tx timeout [ 258.623759][ T4192] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 258.636331][ T6350] loop2: detected capacity change from 0 to 16 [ 258.699394][ T6350] erofs: (device loop2): mounted with root inode @ nid 36. [ 258.793114][ T6356] loop0: detected capacity change from 0 to 128 [ 259.628355][ T6353] attempt to access beyond end of device [ 259.628355][ T6353] loop0: rw=2049, want=369, limit=128 [ 259.845259][ T155] attempt to access beyond end of device [ 259.845259][ T155] loop0: rw=1, want=1041, limit=128 [ 261.218022][ T26] audit: type=1400 audit(1793484415.383:15): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="f/o" pid=6360 comm="syz.1.483" name="f/o" offset=76 [ 261.264243][ T4300] Bluetooth: hci1: command 0x0406 tx timeout [ 261.659399][ T6366] loop3: detected capacity change from 0 to 4096 [ 262.016359][ T6366] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 263.122538][ T4276] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 263.781992][ T6387] ufs: You didn't specify the type of your ufs filesystem [ 263.781992][ T6387] [ 263.781992][ T6387] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 263.781992][ T6387] [ 263.781992][ T6387] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 263.826605][ T6387] ufs: ufs_fill_super(): bad magic number [ 263.848743][ T6388] loop0: detected capacity change from 0 to 512 [ 263.922600][ T6388] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 263.937388][ T4276] usb 6-1: config 1 has an invalid interface number: 236 but max is 0 [ 263.949835][ T4276] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.960814][ T4276] usb 6-1: config 1 has no interface number 0 [ 263.969895][ T6388] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 263.978029][ T4276] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 263.978060][ T4276] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.995694][ T6136] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 264.029711][ T6390] binder: 6389:6390 ioctl ae01 f returned -22 [ 264.270800][ T4276] rndis_wlan 6-1:1.236: skipping garbage [ 264.392938][ T6136] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.446675][ T6136] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.853107][ T6136] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 264.894636][ T6136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 264.971720][ T6136] usb 4-1: Product: syz [ 265.011508][ T6136] usb 4-1: Manufacturer: syz [ 265.063320][ T6396] loop1: detected capacity change from 0 to 512 [ 265.383891][ T6136] dvb_ttusb_budget: ttusb_init_controller: error [ 265.404451][ T6136] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 265.519060][ T4276] usb 6-1: bad CDC descriptors [ 267.009877][ T4276] rndis_host 6-1:1.236: skipping garbage [ 267.017137][ T4276] usb 6-1: bad CDC descriptors [ 267.022845][ T4276] cdc_acm 6-1:1.236: skipping garbage [ 267.124275][ T6396] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 267.128043][ T4276] usb 6-1: USB disconnect, device number 6 [ 267.227595][ T6136] DVB: Unable to find symbol cx22700_attach() [ 267.235203][ T6396] EXT4-fs (loop1): 1 truncate cleaned up [ 267.240942][ T6396] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 268.862986][ T26] audit: type=1400 audit(1793484422.923:16): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="f/o" pid=6407 comm="syz.0.495" name="f/o" offset=76 [ 268.926393][ T6136] DVB: Unable to find symbol tda10046_attach() [ 268.935288][ T6136] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 268.994412][ T6413] netlink: 128 bytes leftover after parsing attributes in process `syz.5.493'. [ 269.044314][ T6136] usb 4-1: USB disconnect, device number 7 [ 269.158888][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 269.779905][ T6413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.889551][ T6427] netlink: 'syz.1.503': attribute type 1 has an invalid length. [ 270.985633][ T6427] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.090871][ T6427] bond1: (slave geneve2): making interface the new active one [ 271.373694][ T6427] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 271.496283][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 272.037718][ T6435] loop2: detected capacity change from 0 to 512 [ 272.194597][ T6435] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 272.238333][ T6435] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 273.666172][ T26] audit: type=1400 audit(1793484427.823:17): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="f/o" pid=6440 comm="syz.1.507" name="f/o" offset=76 [ 275.382726][ T4278] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 275.672645][ T4278] usb 1-1: Using ep0 maxpacket: 32 [ 276.127034][ T4278] usb 1-1: unable to get BOS descriptor or descriptor too short [ 276.162728][ T4278] usb 1-1: no configurations [ 276.200980][ T4278] usb 1-1: can't read configurations, error -22 [ 277.273301][ T6470] Bluetooth: (null): Too short H5 packet [ 278.759229][ T26] audit: type=1400 audit(1793484432.863:18): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="f/o" pid=6476 comm="syz.3.518" name="f/o" offset=76 [ 279.512590][ T4346] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 281.836019][ T26] audit: type=1400 audit(1793484435.993:19): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="f/o" pid=6505 comm="syz.5.529" name="f/o" offset=81 [ 281.901825][ T6497] loop1: detected capacity change from 0 to 32768 [ 281.902971][ T4346] usb 3-1: Using ep0 maxpacket: 32 [ 282.006160][ T6514] ip6t_srh: unknown srh match flags 4000 [ 282.077363][ T6497] XFS (loop1): Mounting V5 Filesystem [ 282.095716][ T4346] usb 3-1: unable to get BOS descriptor or descriptor too short [ 282.109209][ T4346] usb 3-1: no configurations [ 282.130594][ T4346] usb 3-1: can't read configurations, error -22 [ 282.163442][ T6522] loop0: detected capacity change from 0 to 512 [ 282.270552][ T6522] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.532: inode has both inline data and extents flags [ 282.291242][ T6522] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.532: couldn't read orphan inode 15 (err -117) [ 282.304329][ T6522] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: writeback. [ 282.340354][ T6497] XFS (loop1): Ending clean mount [ 282.391083][ T6497] XFS (loop1): Quotacheck needed: Please wait. [ 282.437109][ T6525] FAULT_INJECTION: forcing a failure. [ 282.437109][ T6525] name fail_futex, interval 1, probability 0, space 0, times 1 [ 282.494100][ T6525] CPU: 0 PID: 6525 Comm: syz.0.532 Not tainted syzkaller #0 [ 282.501464][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 282.511573][ T6525] Call Trace: [ 282.514893][ T6525] [ 282.517856][ T6525] dump_stack_lvl+0x188/0x250 [ 282.522604][ T6525] ? show_regs_print_info+0x20/0x20 [ 282.527844][ T6525] ? load_image+0x410/0x410 [ 282.532387][ T6525] ? rcu_read_lock_sched_held+0x86/0x110 [ 282.538069][ T6525] ? rcu_is_watching+0x11/0xa0 [ 282.542912][ T6525] ? __update_load_avg_cfs_rq+0x685/0xa80 [ 282.548680][ T6525] should_fail+0x383/0x4b0 [ 282.553322][ T6525] get_futex_key+0x1a0/0x1200 [ 282.558037][ T6525] ? __lock_acquire+0x13b3/0x7d40 [ 282.563107][ T6525] ? futex_wait_restart+0x250/0x250 [ 282.568355][ T6525] futex_wake+0x101/0x540 [ 282.572744][ T6525] ? futex_wait+0x680/0x680 [ 282.577288][ T6525] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 282.583309][ T6525] ? verify_lock_unused+0x140/0x140 [ 282.588554][ T6525] ? verify_lock_unused+0x140/0x140 [ 282.588727][ T6497] XFS (loop1): Quotacheck: Done. [ 282.593797][ T6525] do_futex+0xd83/0x12b0 [ 282.593831][ T6525] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 282.593856][ T6525] ? _raw_spin_unlock+0x40/0x40 [ 282.593888][ T6525] ? futex_exit_release+0x1c0/0x1c0 [ 282.593916][ T6525] ? __context_tracking_exit+0x4c/0x80 [ 282.593948][ T6525] __se_sys_futex+0x389/0x420 [ 282.593979][ T6525] ? __x64_sys_futex+0xf0/0xf0 [ 282.594009][ T6525] ? __x64_sys_futex+0x1d/0xf0 [ 282.638886][ T6525] do_syscall_64+0x4c/0xa0 [ 282.643348][ T6525] ? clear_bhb_loop+0x30/0x80 [ 282.648063][ T6525] ? clear_bhb_loop+0x30/0x80 [ 282.652806][ T6525] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 282.658750][ T6525] RIP: 0033:0x7f675f147559 [ 282.663230][ T6525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.682885][ T6525] RSP: 002b:00007f675d37d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 282.691353][ T6525] RAX: ffffffffffffffda RBX: 00007f675f3ce098 RCX: 00007f675f147559 [ 282.699372][ T6525] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f675f3ce09c [ 282.707426][ T6525] RBP: 00007f675f3ce090 R08: 00173ba7b6ef0b26 R09: 0000000000000000 [ 282.715435][ T6525] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 282.723546][ T6525] R13: 00007f675f3ce128 R14: 00007ffe653e0630 R15: 00007ffe653e0718 [ 282.731568][ T6525] [ 282.756263][ T4190] XFS (loop1): Unmounting Filesystem [ 284.828783][ T26] audit: type=1400 audit(1793484438.983:20): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="f/o" pid=6544 comm="syz.0.540" name="f/o" offset=81 [ 284.849529][ T6540] loop1: detected capacity change from 0 to 4096 [ 284.967156][ T6540] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 285.061239][ T6552] loop3: detected capacity change from 0 to 2048 [ 285.228070][ T6552] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 285.361423][ T6547] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 286.231614][ T6569] loop1: detected capacity change from 0 to 8 [ 286.357527][ T6569] squashfs image failed sanity check [ 286.496174][ T6577] FAULT_INJECTION: forcing a failure. [ 286.496174][ T6577] name failslab, interval 1, probability 0, space 0, times 1 [ 286.542436][ T6577] CPU: 0 PID: 6577 Comm: syz.5.551 Not tainted syzkaller #0 [ 286.549805][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 286.559897][ T6577] Call Trace: [ 286.563213][ T6577] [ 286.566183][ T6577] dump_stack_lvl+0x188/0x250 [ 286.570915][ T6577] ? show_regs_print_info+0x20/0x20 [ 286.576164][ T6577] ? load_image+0x410/0x410 [ 286.580726][ T6577] ? __might_sleep+0xf0/0xf0 [ 286.585361][ T6577] ? __lock_acquire+0x7d40/0x7d40 [ 286.590452][ T6577] should_fail+0x383/0x4b0 [ 286.594949][ T6577] should_failslab+0x5/0x20 [ 286.599493][ T6577] slab_pre_alloc_hook+0x51/0xc0 [ 286.604576][ T6577] kmem_cache_alloc_node+0x47/0x2c0 [ 286.609899][ T6577] ? alloc_vmap_area+0x199/0x1b30 [ 286.614961][ T6577] ? __x64_sys_openat+0x135/0x160 [ 286.620032][ T6577] alloc_vmap_area+0x199/0x1b30 [ 286.624953][ T6577] ? vm_map_ram+0xba0/0xba0 [ 286.629506][ T6577] __get_vm_area_node+0x14f/0x2d0 [ 286.634577][ T6577] __vmalloc_node_range+0xef/0x8b0 [ 286.639725][ T6577] ? n_tty_open+0x19/0x150 [ 286.644176][ T6577] ? read_lock_is_recursive+0x10/0x10 [ 286.649766][ T6577] ? remove_wait_queue+0x120/0x120 [ 286.654925][ T6577] ? n_tty_open+0x19/0x150 [ 286.659407][ T6577] vzalloc+0x75/0x80 [ 286.663342][ T6577] ? n_tty_open+0x19/0x150 [ 286.667796][ T6577] n_tty_open+0x19/0x150 [ 286.672076][ T6577] tty_ldisc_setup+0xbf/0x250 [ 286.676791][ T6577] tty_init_dev+0x239/0x470 [ 286.681339][ T6577] ptmx_open+0xe1/0x2c0 [ 286.685528][ T6577] ? pty_start+0x140/0x140 [ 286.689992][ T6577] chrdev_open+0x585/0x5f0 [ 286.694458][ T6577] ? cd_forget+0x160/0x160 [ 286.698925][ T6577] ? fsnotify_perm+0x3a7/0x560 [ 286.703729][ T6577] ? cd_forget+0x160/0x160 [ 286.708183][ T6577] do_dentry_open+0x7f7/0xf90 [ 286.712897][ T6577] ? vfs_open+0x2b/0x80 [ 286.717105][ T6577] path_openat+0x2718/0x2fb0 [ 286.721770][ T6577] ? do_filp_open+0x400/0x400 [ 286.726510][ T6577] do_filp_open+0x1df/0x400 [ 286.731071][ T6577] ? vfs_tmpfile+0x300/0x300 [ 286.735757][ T6577] ? _raw_spin_unlock+0x24/0x40 [ 286.740647][ T6577] ? alloc_fd+0x59e/0x650 [ 286.745027][ T6577] do_sys_openat2+0x14b/0x500 [ 286.749738][ T6577] ? __lock_acquire+0x7d40/0x7d40 [ 286.754814][ T6577] ? do_sys_open+0xe0/0xe0 [ 286.759267][ T6577] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 286.765289][ T6577] ? lock_chain_count+0x20/0x20 [ 286.770191][ T6577] __x64_sys_openat+0x135/0x160 [ 286.775082][ T6577] do_syscall_64+0x4c/0xa0 [ 286.779532][ T6577] ? clear_bhb_loop+0x30/0x80 [ 286.784295][ T6577] ? clear_bhb_loop+0x30/0x80 [ 286.789011][ T6577] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.794945][ T6577] RIP: 0033:0x7f5bf4626559 [ 286.799400][ T6577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.819045][ T6577] RSP: 002b:00007f5bf287d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 286.827503][ T6577] RAX: ffffffffffffffda RBX: 00007f5bf48acfa0 RCX: 00007f5bf4626559 [ 286.835532][ T6577] RDX: 0000000000080040 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 286.843552][ T6577] RBP: 00007f5bf46bdb50 R08: 0000000000000000 R09: 0000000000000000 [ 286.851573][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.859582][ T6577] R13: 00007f5bf48ad038 R14: 00007f5bf48acfa0 R15: 00007ffe01dc9218 [ 286.867610][ T6577] [ 286.874269][ T6580] loop3: detected capacity change from 0 to 2048 [ 286.948810][ T6580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.281120][ T6577] syz.5.551: vmalloc error: size 9120, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 287.299590][ T6577] CPU: 1 PID: 6577 Comm: syz.5.551 Not tainted syzkaller #0 [ 287.306916][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 287.316998][ T6577] Call Trace: [ 287.320319][ T6577] [ 287.323276][ T6577] dump_stack_lvl+0x188/0x250 [ 287.327970][ T6577] ? rcu_lock_release+0x5/0x20 [ 287.332747][ T6577] ? show_regs_print_info+0x20/0x20 [ 287.338028][ T6577] ? load_image+0x410/0x410 [ 287.342552][ T6577] ? __rcu_read_unlock+0x78/0xd0 [ 287.347507][ T6577] warn_alloc+0x245/0x320 [ 287.351858][ T6577] ? zone_watermark_ok_safe+0x250/0x250 [ 287.357417][ T6577] ? __get_vm_area_node+0x164/0x2d0 [ 287.362624][ T6577] ? kfree+0xef/0x2a0 [ 287.366625][ T6577] __vmalloc_node_range+0x2b1/0x8b0 [ 287.371835][ T6577] ? read_lock_is_recursive+0x10/0x10 [ 287.377225][ T6577] ? remove_wait_queue+0x120/0x120 [ 287.382356][ T6577] ? n_tty_open+0x19/0x150 [ 287.386786][ T6577] vzalloc+0x75/0x80 [ 287.390692][ T6577] ? n_tty_open+0x19/0x150 [ 287.395129][ T6577] n_tty_open+0x19/0x150 [ 287.399425][ T6577] tty_ldisc_setup+0xbf/0x250 [ 287.404138][ T6577] tty_init_dev+0x239/0x470 [ 287.408692][ T6577] ptmx_open+0xe1/0x2c0 [ 287.412871][ T6577] ? pty_start+0x140/0x140 [ 287.417296][ T6577] chrdev_open+0x585/0x5f0 [ 287.421727][ T6577] ? cd_forget+0x160/0x160 [ 287.426157][ T6577] ? fsnotify_perm+0x3a7/0x560 [ 287.430932][ T6577] ? cd_forget+0x160/0x160 [ 287.435363][ T6577] do_dentry_open+0x7f7/0xf90 [ 287.440059][ T6577] ? vfs_open+0x2b/0x80 [ 287.444232][ T6577] path_openat+0x2718/0x2fb0 [ 287.448855][ T6577] ? do_filp_open+0x400/0x400 [ 287.453577][ T6577] do_filp_open+0x1df/0x400 [ 287.458098][ T6577] ? vfs_tmpfile+0x300/0x300 [ 287.462733][ T6577] ? _raw_spin_unlock+0x24/0x40 [ 287.467592][ T6577] ? alloc_fd+0x59e/0x650 [ 287.471934][ T6577] do_sys_openat2+0x14b/0x500 [ 287.476615][ T6577] ? __lock_acquire+0x7d40/0x7d40 [ 287.481659][ T6577] ? do_sys_open+0xe0/0xe0 [ 287.486137][ T6577] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 287.492354][ T6577] ? lock_chain_count+0x20/0x20 [ 287.497222][ T6577] __x64_sys_openat+0x135/0x160 [ 287.502086][ T6577] do_syscall_64+0x4c/0xa0 [ 287.506555][ T6577] ? clear_bhb_loop+0x30/0x80 [ 287.511271][ T6577] ? clear_bhb_loop+0x30/0x80 [ 287.515984][ T6577] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.521926][ T6577] RIP: 0033:0x7f5bf4626559 [ 287.526355][ T6577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.546054][ T6577] RSP: 002b:00007f5bf287d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 287.554476][ T6577] RAX: ffffffffffffffda RBX: 00007f5bf48acfa0 RCX: 00007f5bf4626559 [ 287.562463][ T6577] RDX: 0000000000080040 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 287.570444][ T6577] RBP: 00007f5bf46bdb50 R08: 0000000000000000 R09: 0000000000000000 [ 287.578455][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.586461][ T6577] R13: 00007f5bf48ad038 R14: 00007f5bf48acfa0 R15: 00007ffe01dc9218 [ 287.594492][ T6577] [ 287.606908][ T6577] Mem-Info: [ 287.610348][ T6577] active_anon:351 inactive_anon:8199 isolated_anon:0 [ 287.610348][ T6577] active_file:24942 inactive_file:35468 isolated_file:0 [ 287.610348][ T6577] unevictable:768 dirty:185 writeback:0 [ 287.610348][ T6577] slab_reclaimable:21780 slab_unreclaimable:97066 [ 287.610348][ T6577] mapped:31796 shmem:3288 pagetables:731 bounce:0 [ 287.610348][ T6577] kernel_misc_reclaimable:0 [ 287.610348][ T6577] free:1358041 free_pcp:8676 free_cma:0 [ 287.862604][ T6577] Node 0 active_anon:1388kB inactive_anon:32876kB active_file:99576kB inactive_file:141880kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127824kB dirty:764kB writeback:0kB shmem:11740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11600kB pagetables:2940kB all_unreclaimable? no [ 287.931209][ T6577] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 287.989569][ T6577] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 288.021939][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 288.146332][ T6577] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 288.192611][ T6577] Node 0 DMA32 free:1501504kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1388kB inactive_anon:36976kB active_file:99576kB inactive_file:141880kB unevictable:1536kB writepending:764kB present:3129332kB managed:2590800kB mlocked:0kB bounce:0kB free_pcp:22944kB local_pcp:6176kB free_cma:0kB [ 288.269616][ T6597] xt_hashlimit: size too large, truncated to 1048576 [ 288.360696][ T6577] lowmem_reserve[]: 0 0 0 0 0 [ 288.371338][ T6577] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 288.452562][ T6577] lowmem_reserve[]: 0 0 0 0 0 [ 288.457373][ T6577] Node 1 Normal free:3914220kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:8532kB local_pcp:6284kB free_cma:0kB [ 288.562356][ T6577] lowmem_reserve[]: 0 0 0 0 0 [ 288.567191][ T6577] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 288.643474][ T6577] Node 0 DMA32: 1275*4kB (ME) 1072*8kB (M) 890*16kB (UME) 747*32kB (UM) 791*64kB (UM) 451*128kB (UME) 269*256kB (M) 125*512kB (ME) 51*1024kB (UME) 7*2048kB (M) 275*4096kB (M) = 1485996kB [ 288.702046][ T6605] loop0: detected capacity change from 0 to 512 [ 288.731646][ T6577] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 288.772371][ T6605] EXT4-fs (loop0): Ignoring removed oldalloc option [ 288.783262][ T6577] Node 1 Normal: 204*4kB (UME) 36*8kB (UME) 28*16kB (UME) 213*32kB (UME) 75*64kB (UE) 27*128kB (UE) 10*256kB (U) 6*512kB (UE) 1*1024kB (E) 4*2048kB (UME) 948*4096kB (M) = 3914480kB [ 288.827384][ T6577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.844877][ T6605] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802c018, mo2=0002] [ 288.859306][ T6577] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 288.874383][ T6605] System zones: 1-3, 19-19, 35-38 [ 288.881354][ T6577] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.917916][ T6577] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 288.928083][ T6605] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,debug,noinit_itable,,errors=continue. Quota mode: writeback. [ 288.933033][ T6577] 64971 total pagecache pages [ 288.943348][ T6605] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.993175][ T6577] 0 pages in swap cache [ 288.997431][ T6577] Swap cache stats: add 82, delete 82, find 5/36 [ 289.045897][ T6577] Free swap = 124472kB [ 289.050179][ T6577] Total swap = 124996kB [ 289.078447][ T6577] 2097051 pages RAM [ 289.118603][ T6577] 0 pages HighMem/MovableOnly [ 289.183055][ T6577] 415364 pages reserved [ 289.271290][ T6577] 0 pages cma reserved [ 289.387424][ T6577] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 290.146936][ T6623] device bridge2 entered promiscuous mode [ 290.953666][ T6634] loop5: detected capacity change from 0 to 256 [ 290.976783][ T6634] exfat: Deprecated parameter 'utf8' [ 291.002501][ T6634] exfat: Deprecated parameter 'utf8' [ 291.043887][ T6634] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 291.723076][ T6638] rxe_eth0 speed is unknown, defaulting to 1000 [ 292.542519][ T26] audit: type=1326 audit(1793484446.583:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.5.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4626559 code=0x7ffc0000 [ 293.048071][ T26] audit: type=1326 audit(1793484446.583:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.5.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4626559 code=0x7ffc0000 [ 293.509120][ T26] audit: type=1326 audit(1793484446.583:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.5.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4626559 code=0x7ffc0000 [ 293.572407][ T26] audit: type=1326 audit(1793484446.583:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.5.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4626559 code=0x7ffc0000 [ 293.663700][ T6628] block2mtd: error: cannot open device /dev/loop0 [ 294.142501][ T6632] ioremap: invalid physical address 8000000000000000 [ 294.202026][ T26] audit: type=1326 audit(1793484446.583:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.5.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5bf4626559 code=0x7ffc0000 [ 294.227737][ T6632] ------------[ cut here ]------------ [ 294.267369][ T6632] WARNING: CPU: 1 PID: 6632 at arch/x86/mm/ioremap.c:200 __ioremap_caller+0x4f8/0x620 [ 294.335778][ T6632] Modules linked in: [ 294.363540][ T6632] CPU: 1 PID: 6632 Comm: syz.3.568 Not tainted syzkaller #0 [ 294.388005][ T26] audit: type=1326 audit(1793484446.583:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.5.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4626559 code=0x7ffc0000 [ 294.430426][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 294.446958][ T26] audit: type=1326 audit(1793484446.583:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.5.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4626559 code=0x7ffc0000 [ 294.472097][ T26] audit: type=1326 audit(1793484446.593:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.5.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4626559 code=0x7ffc0000 [ 294.496321][ T6632] RIP: 0010:__ioremap_caller+0x4f8/0x620 [ 294.503444][ T26] audit: type=1326 audit(1793484446.593:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.5.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4626559 code=0x7ffc0000 [ 294.521577][ T6632] Code: 85 ff 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b9 73 43 00 48 8b 74 24 60 48 c7 c7 20 bc 28 8a e8 c8 18 89 08 <0f> 0b eb 8d 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 ee 48 8b 7c [ 294.528579][ T26] audit: type=1326 audit(1793484446.593:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.5.569" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f5bf4626559 code=0x7ffc0000 [ 294.574353][ T6632] RSP: 0018:ffffc90003f17900 EFLAGS: 00010246 [ 294.589858][ T6632] RAX: 0000000000000032 RBX: 1ffff920007e2f00 RCX: 0a22a0359ecf7400 [ 294.598355][ T6632] RDX: ffffc9000e94b000 RSI: 0000000000001e83 RDI: 0000000000001e84 [ 294.612739][ T6632] RBP: ffffc90003f17a10 R08: ffff8880b8f33d7f R09: 1ffff110171e67af [ 294.623888][ T6632] R10: dffffc0000000000 R11: ffffed10171e67b0 R12: 000000000000002e [ 294.636984][ T6632] R13: 8000000000000000 R14: 0000000000020000 R15: dffffc0000000000 [ 294.645524][ T6632] FS: 00007f326bd086c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 294.654993][ T6632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.669899][ T6632] CR2: 00007f4a8b5d6158 CR3: 000000005f914000 CR4: 00000000003506f0 [ 294.678444][ T6632] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 294.692910][ T6632] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 294.701085][ T6632] Call Trace: [ 294.711601][ T6632] [ 294.716365][ T6632] ? phram_setup+0x87c/0xdf0 [ 294.721151][ T6632] ? ioremap+0x30/0x30 [ 294.730533][ T6632] phram_setup+0x87c/0xdf0 [ 294.736626][ T6632] ? __mutex_lock_common+0x147b/0x2400 [ 294.758430][ T6632] ? phram_param_call+0x70/0x70 [ 294.767471][ T6632] ? mutex_lock_io_nested+0x60/0x60 [ 294.803932][ T6632] ? read_lock_is_recursive+0x10/0x10 [ 294.816338][ T6632] param_attr_store+0x20a/0x300 [ 294.824628][ T6632] ? param_attr_show+0x170/0x170 [ 294.829632][ T6632] ? sysfs_kf_read+0x350/0x350 [ 294.834510][ T6632] module_attr_store+0x5b/0x80 [ 294.839329][ T6632] kernfs_fop_write_iter+0x3a8/0x500 [ 294.846568][ T6632] vfs_write+0x748/0xd70 [ 294.851019][ T6632] ? file_end_write+0x250/0x250 [ 294.858629][ T6632] ? mutex_lock_nested+0x17/0x20 [ 294.865169][ T6632] ? __fdget_pos+0x2bf/0x370 [ 294.869806][ T6632] ? ksys_write+0x70/0x260 [ 294.874684][ T6632] ksys_write+0x153/0x260 [ 294.879098][ T6632] ? __ia32_sys_read+0x80/0x80 [ 294.914487][ T6632] ? lockdep_hardirqs_on+0x94/0x140 [ 294.919795][ T6632] do_syscall_64+0x4c/0xa0 [ 294.981531][ T6632] ? clear_bhb_loop+0x30/0x80 [ 294.992609][ T6632] ? clear_bhb_loop+0x30/0x80 [ 294.997372][ T6632] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 295.015115][ T6632] RIP: 0033:0x7f326dab1559 [ 295.032914][ T6632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.062544][ T6632] RSP: 002b:00007f326bd08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.071936][ T6632] RAX: ffffffffffffffda RBX: 00007f326dd37fa0 RCX: 00007f326dab1559 [ 295.110287][ T6632] RDX: 000000000000001e RSI: 0000200000000880 RDI: 0000000000000003 [ 295.122520][ T6632] RBP: 00007f326db48b50 R08: 0000000000000000 R09: 0000000000000000 [ 295.142407][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.150456][ T6632] R13: 00007f326dd38038 R14: 00007f326dd37fa0 R15: 00007ffff1defdb8 [ 295.182447][ T6632] [ 295.185565][ T6632] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 295.192883][ T6632] CPU: 1 PID: 6632 Comm: syz.3.568 Not tainted syzkaller #0 [ 295.200203][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 295.210303][ T6632] Call Trace: [ 295.213621][ T6632] [ 295.216619][ T6632] dump_stack_lvl+0x188/0x250 [ 295.221349][ T6632] ? show_regs_print_info+0x20/0x20 [ 295.226605][ T6632] ? load_image+0x410/0x410 [ 295.231191][ T6632] panic+0x2f8/0x850 [ 295.235140][ T6632] ? bpf_jit_dump+0xd0/0xd0 [ 295.239714][ T6632] ? __ioremap_caller+0x4f8/0x620 [ 295.244785][ T6632] __warn+0x248/0x2b0 [ 295.248804][ T6632] ? __ioremap_caller+0x4f8/0x620 [ 295.253871][ T6632] report_bug+0x1b9/0x2e0 [ 295.258277][ T6632] handle_bug+0x3a/0x70 [ 295.262476][ T6632] exc_invalid_op+0x16/0x40 [ 295.267025][ T6632] asm_exc_invalid_op+0x16/0x20 [ 295.271920][ T6632] RIP: 0010:__ioremap_caller+0x4f8/0x620 [ 295.277602][ T6632] Code: 85 ff 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b9 73 43 00 48 8b 74 24 60 48 c7 c7 20 bc 28 8a e8 c8 18 89 08 <0f> 0b eb 8d 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 ee 48 8b 7c [ 295.297268][ T6632] RSP: 0018:ffffc90003f17900 EFLAGS: 00010246 [ 295.303384][ T6632] RAX: 0000000000000032 RBX: 1ffff920007e2f00 RCX: 0a22a0359ecf7400 [ 295.311397][ T6632] RDX: ffffc9000e94b000 RSI: 0000000000001e83 RDI: 0000000000001e84 [ 295.319413][ T6632] RBP: ffffc90003f17a10 R08: ffff8880b8f33d7f R09: 1ffff110171e67af [ 295.327430][ T6632] R10: dffffc0000000000 R11: ffffed10171e67b0 R12: 000000000000002e [ 295.335458][ T6632] R13: 8000000000000000 R14: 0000000000020000 R15: dffffc0000000000 [ 295.343504][ T6632] ? phram_setup+0x87c/0xdf0 [ 295.348146][ T6632] ? ioremap+0x30/0x30 [ 295.352301][ T6632] phram_setup+0x87c/0xdf0 [ 295.356781][ T6632] ? __mutex_lock_common+0x147b/0x2400 [ 295.362291][ T6632] ? phram_param_call+0x70/0x70 [ 295.367201][ T6632] ? mutex_lock_io_nested+0x60/0x60 [ 295.372463][ T6632] ? read_lock_is_recursive+0x10/0x10 [ 295.377886][ T6632] param_attr_store+0x20a/0x300 [ 295.382779][ T6632] ? param_attr_show+0x170/0x170 [ 295.387775][ T6632] ? sysfs_kf_read+0x350/0x350 [ 295.392600][ T6632] module_attr_store+0x5b/0x80 [ 295.397435][ T6632] kernfs_fop_write_iter+0x3a8/0x500 [ 295.403622][ T6632] vfs_write+0x748/0xd70 [ 295.407924][ T6632] ? file_end_write+0x250/0x250 [ 295.412846][ T6632] ? mutex_lock_nested+0x17/0x20 [ 295.417846][ T6632] ? __fdget_pos+0x2bf/0x370 [ 295.422478][ T6632] ? ksys_write+0x70/0x260 [ 295.427112][ T6632] ksys_write+0x153/0x260 [ 295.431507][ T6632] ? __ia32_sys_read+0x80/0x80 [ 295.436313][ T6632] ? lockdep_hardirqs_on+0x94/0x140 [ 295.441558][ T6632] do_syscall_64+0x4c/0xa0 [ 295.446011][ T6632] ? clear_bhb_loop+0x30/0x80 [ 295.450730][ T6632] ? clear_bhb_loop+0x30/0x80 [ 295.455456][ T6632] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 295.461393][ T6632] RIP: 0033:0x7f326dab1559 [ 295.465880][ T6632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.485550][ T6632] RSP: 002b:00007f326bd08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.494006][ T6632] RAX: ffffffffffffffda RBX: 00007f326dd37fa0 RCX: 00007f326dab1559 [ 295.502120][ T6632] RDX: 000000000000001e RSI: 0000200000000880 RDI: 0000000000000003 [ 295.510123][ T6632] RBP: 00007f326db48b50 R08: 0000000000000000 R09: 0000000000000000 [ 295.518131][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.526138][ T6632] R13: 00007f326dd38038 R14: 00007f326dd37fa0 R15: 00007ffff1defdb8 [ 295.534171][ T6632] [ 295.537346][ T6632] Kernel Offset: disabled [ 295.550302][ T6632] Rebooting in 86400 seconds..