last executing test programs: 25.007998735s ago: executing program 1 (id=487): socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x4, 0x0, 0x4000000000b47, 0x9, 0x1, 0x80000001, 0x3}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000), &(0x7f0000000280)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0xa, 0x801, 0x84) accept4(r2, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_open_dev$I2C(&(0x7f0000000440), 0x0, 0x80) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x7, 0x8, 0xfffff038}, {0x6}]}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0xc03e) 21.708979739s ago: executing program 1 (id=495): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) msgrcv(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x8, 0x0) 20.485345695s ago: executing program 1 (id=497): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0x400000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 20.225490146s ago: executing program 4 (id=499): syz_open_procfs(0xffffffffffffffff, &(0x7f0000002440)='net/dev_mcast\x00') socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x9) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x400c, @loopback, 0xc}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x5}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000780)=ANY=[], 0x8) sendmsg$inet6(r0, &(0x7f0000004800)={0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000004680)="d6", 0x1}], 0x1}, 0x40002) 19.076174445s ago: executing program 4 (id=501): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) pread64(r0, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) 17.772530058s ago: executing program 4 (id=502): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x40000007, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x4, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x5, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x5, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x2, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x10000002, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0x80, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0xd, 0x3, 0x88, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x4a0, 0xa, 0x0, 0x1, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 16.912002352s ago: executing program 3 (id=506): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 14.53534159s ago: executing program 1 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 13.567165099s ago: executing program 3 (id=510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, 0x0) 12.260209212s ago: executing program 2 (id=512): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80800) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f00000004c0)={{0x2, 0x3}, {0x0, 0x6}, 0x7f, 0x7, 0x7}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x80000001, 0x7fb, 0x8, 0x100201}, 0x0, &(0x7f0000000240)={0x1e, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x2000000a}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0xfffffffffffffffc, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x9) 12.140697437s ago: executing program 4 (id=513): socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x100000) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 11.305518915s ago: executing program 2 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) 10.190171552s ago: executing program 2 (id=516): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a6b000/0x1000)=nil, &(0x7f0000cf1000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ca2000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000167000/0x3000)=nil, 0x0}, 0x68) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r2, 0x8b32, &(0x7f0000000040)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = syz_io_uring_setup(0x3ee8, &(0x7f0000000400)={0x0, 0x595f, 0x1, 0x0, 0x2fd}, &(0x7f0000000540)=0x0, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_BIND=@ipv4={0x38, 0x40, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0xaef1804eba9359ce}) io_uring_enter(r3, 0x7c65, 0xa334, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 8.961579546s ago: executing program 3 (id=518): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x4, 0x3, 0x12, "c12400"}, 0x3, 0x2, {&(0x7f0000000040)}, 0x96000}) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) 8.900811374s ago: executing program 2 (id=519): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 8.811770588s ago: executing program 0 (id=520): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000000c0)="4b0003000000", 0x6) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000140), 0x4) socket$packet(0x11, 0x2, 0x300) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) 8.023664507s ago: executing program 3 (id=521): symlinkat(0x0, 0xffffffffffffff9c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7.031340084s ago: executing program 3 (id=522): openat(0xffffffffffffff9c, 0x0, 0x0, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x1e8, 0x20a, 0x278, 0x1e8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0x0, 0x0, 0xffff00, 0xff000000], 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@loopback, @local, [0x0, 0x0, 0xff], [], 'syzkaller1\x00', 'pimreg1\x00', {}, {}, 0x3c, 0x0, 0x0, 0x8}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) 7.017470612s ago: executing program 0 (id=523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 6.830924529s ago: executing program 4 (id=524): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x9, 0x200000e, 0x80010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, 0x0, 0x0) 4.914691675s ago: executing program 0 (id=525): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000040), 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) socket(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) 4.914147439s ago: executing program 4 (id=526): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)={[{@discard}, {@dioread_lock}, {@test_dummy_encryption}]}, 0xfe, 0x244, &(0x7f0000000400)="$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") socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) ioctl$VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000340)={0x8, @pix={0xf8d7, 0x5, 0x0, 0x0, 0xfffffffc, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x90) 4.892648579s ago: executing program 1 (id=527): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40012100, 0x0) 4.81380153s ago: executing program 2 (id=528): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008009}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.325647141s ago: executing program 1 (id=529): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x200814, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0xa, 0x513, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$nfs(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) 3.140742277s ago: executing program 0 (id=530): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001440), 0x80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0x6) memfd_secret(0x80000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x86dd, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @multicast2}}}}}, 0x0) 3.015663406s ago: executing program 0 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x1, 0x100) listen(r4, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) 1.776821117s ago: executing program 0 (id=532): timerfd_create(0x1, 0x800) socket(0x11, 0x2, 0x0) r0 = syz_io_uring_setup(0x1a1c, 0x0, 0x0, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000280)={0x3d, 0x1, 0x0, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) open$dir(0x0, 0x480, 0x124) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) open(0x0, 0x143342, 0x54) syz_pidfd_open(0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7, 0xfffffffc, 0x0, 0x1f, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r1, 0xe0880) r3 = dup3(r2, r1, 0x80000) read(r3, 0x0, 0x0) 1.553071736s ago: executing program 2 (id=533): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$eJzs3LtvHMUfAPDvrl+/X54GAiQhAkOEsHjYsRMgBQ0IJIogQFAEqIztRFGcGMVGwlGUGIRCg4QiQQ2USPwFdDQIqJCQqKBHQRGkSUAUh/ZuNzmvffEj5zsn9/lIZ8/c7N7M7Ozszs74HEDHGsh+JBFbIuLXiNheiy7cYKD26+rlM+N/Xz4znkSl8tqfETEfceXymfFi02K/zXlkMI1IP0zyTBaamTt9fGxqavJUHh+ePfHO8Mzc6SeOnRg7Onl08uTowYMH9o88/dTok02pZ1avK7vPTu/Z9eIbF14aP3zh7R++zsq7JU+vr8ea9C5+ayCr+F+VqnLaw/H/m8puo9laF06621gQVqUrIrLm6sn6f6VSOVeXtj1e+GCZ3Tevc/GAdZTdm/qWeD+/L85XGkpumArcCpJodwmA9iju99nzb/Fq4fCj7S49W3sAyup9NX/VUrojzbfpKT3fNtNARBye/+fz7BXNmIcAAFjGx+OfHYrHlxr/pXFPLfBH9mNbvobSHxF3RMSdEXFXROyIiLsjqtveGxE7V5Jp3QJBeWlo8fgnvVjapKmrC9n475l8bWvh+K8Y/UV/Vx7bWq1/T3Lk2NTkvvyYDEZPXxYfuUEe3z7/8yeN0urHf9kry78YC+bluNhdmqCbGJsdqw5Km+DS+xG7u+PfSqVSqn9y7UAnEbErInav7qO3FYFjj361p9FGy9d/0cdd14QzofJlxCO19p+PUv0LyeL1yd6t19cnh/8XU5P7houzYrEffzr/SqP8V17/9ZG1/6aF53+e8sVcHuh/q369diYarFxuaZjH+d8+avhMs9bzvzd5vXo9KpZd3xubnT01EtGbHKrGF7w/en3fIl5sn9V/cG9EZHlU61/smVavcZG3/30RsSdfL7s/Ih7Iy/5gRDwUEXsb1j7i++cap22E9p+oa/8kyuf/zrO130X7z6060HX8u28a5b+y9j9QDQ3m71Svf8tYaQHXfuQAAADg1pFWZ26SdOhaOE2Hhmp/2LsjNqVT0zOzjx2ZfvfkRG2Gpz960mKma3vdfOhIMp9/Yi0+ms8VF+n783njT7uiGh8an56aaHPdodNtbtD/M793tbt0wLpbah1tdIkvtAG3n3L/TxdGz73cysIALeX72tC5lun/aavKAbSe+z90rqX6/7lS3FoA3J7c/6Fz6f/QufR/6Fyl/t8Vv7SrJEALreHr/AIbJvDq0Gr26otm5h7pBjkI5UDx70nqklb+/yBuGOi7+RK+eZPFSKNVB7PNFyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAm+S8AAP//i1LmAQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r0, 0x41, 0x800, 0x8002) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x3, 0x1, 0xe77f, 0x6, 0x4}) r2 = dup(r1) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x8, 0x8, 0xffff, 0xfffffffd}, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000040)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x7478b000) madvise(&(0x7f00000a6000/0x2000)=nil, 0x2000, 0x9) 0s ago: executing program 3 (id=534): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = msgget$private(0x0, 0x3ac) msgrcv(r1, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgsnd(r1, 0x0, 0x8, 0x800) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r2, &(0x7f0000000040)="3c5c583ecd45036a2762bb626c65640a", 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 70.220959][ T5592] cgroup: Unknown subsys name 'net' [ 70.327272][ T5592] cgroup: Unknown subsys name 'cpuset' [ 70.336476][ T5592] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.376715][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.376790][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.663963][ T5592] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.826578][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.827478][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.827956][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.829162][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.831233][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.992667][ T5603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.002906][ T5603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.013441][ T5603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.014785][ T5603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.015859][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.061993][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.063188][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.063680][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.065501][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.066061][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.112230][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.113937][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.133893][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.146285][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.147732][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.195221][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.197167][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.197660][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.198937][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.199492][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.808225][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.808386][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.808512][ T5609] bridge_slave_0: entered allmulticast mode [ 75.810053][ T5609] bridge_slave_0: entered promiscuous mode [ 75.813030][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.813193][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.813309][ T5602] bridge_slave_0: entered allmulticast mode [ 75.819256][ T5602] bridge_slave_0: entered promiscuous mode [ 75.867548][ T54] Bluetooth: hci0: command tx timeout [ 75.893754][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.893870][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.893994][ T5609] bridge_slave_1: entered allmulticast mode [ 75.896283][ T5609] bridge_slave_1: entered promiscuous mode [ 75.898219][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.898320][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.898442][ T5602] bridge_slave_1: entered allmulticast mode [ 75.900421][ T5602] bridge_slave_1: entered promiscuous mode [ 76.030978][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.033588][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.061851][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.061984][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.062066][ T5615] bridge_slave_0: entered allmulticast mode [ 76.063124][ T5615] bridge_slave_0: entered promiscuous mode [ 76.065640][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.065737][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.066102][ T5615] bridge_slave_1: entered allmulticast mode [ 76.068467][ T5615] bridge_slave_1: entered promiscuous mode [ 76.073271][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.090212][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.104679][ T54] Bluetooth: hci1: command tx timeout [ 76.166158][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.166307][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.166435][ T5618] bridge_slave_0: entered allmulticast mode [ 76.168418][ T5618] bridge_slave_0: entered promiscuous mode [ 76.176441][ T54] Bluetooth: hci2: command tx timeout [ 76.176770][ T5617] Bluetooth: hci3: command tx timeout [ 76.200743][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.200846][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.200954][ T5613] bridge_slave_0: entered allmulticast mode [ 76.204338][ T5613] bridge_slave_0: entered promiscuous mode [ 76.207841][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.208002][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.208951][ T5613] bridge_slave_1: entered allmulticast mode [ 76.210669][ T5613] bridge_slave_1: entered promiscuous mode [ 76.230083][ T5602] team0: Port device team_slave_0 added [ 76.230263][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.230364][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.230488][ T5618] bridge_slave_1: entered allmulticast mode [ 76.233976][ T5618] bridge_slave_1: entered promiscuous mode [ 76.239448][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.243538][ T5609] team0: Port device team_slave_0 added [ 76.255202][ T5617] Bluetooth: hci4: command tx timeout [ 76.263766][ T5602] team0: Port device team_slave_1 added [ 76.296955][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.299362][ T5609] team0: Port device team_slave_1 added [ 76.319454][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.373306][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.388610][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.402544][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.402560][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.402588][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.420650][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.420668][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.420691][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.440523][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.443683][ T5615] team0: Port device team_slave_0 added [ 76.444813][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.444825][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.444849][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.448533][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.448550][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.448573][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.462130][ T5613] team0: Port device team_slave_0 added [ 76.480563][ T5615] team0: Port device team_slave_1 added [ 76.499199][ T5613] team0: Port device team_slave_1 added [ 76.636491][ T5618] team0: Port device team_slave_0 added [ 76.639140][ T5618] team0: Port device team_slave_1 added [ 76.639774][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.639797][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.639816][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.656438][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.656452][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.656470][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.740250][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.740267][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.740290][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.777113][ T5602] hsr_slave_0: entered promiscuous mode [ 76.779826][ T5602] hsr_slave_1: entered promiscuous mode [ 76.782391][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.782406][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.782429][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.783557][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.783568][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.783591][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.795103][ T5609] hsr_slave_0: entered promiscuous mode [ 76.796139][ T5609] hsr_slave_1: entered promiscuous mode [ 76.796875][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 76.796959][ T5609] Cannot create hsr debugfs directory [ 76.813108][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.813123][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.813145][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.882328][ T5615] hsr_slave_0: entered promiscuous mode [ 76.883354][ T5615] hsr_slave_1: entered promiscuous mode [ 76.887674][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 76.887696][ T5615] Cannot create hsr debugfs directory [ 77.035878][ T5613] hsr_slave_0: entered promiscuous mode [ 77.036525][ T5613] hsr_slave_1: entered promiscuous mode [ 77.036928][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 77.036946][ T5613] Cannot create hsr debugfs directory [ 77.042448][ T5618] hsr_slave_0: entered promiscuous mode [ 77.043112][ T5618] hsr_slave_1: entered promiscuous mode [ 77.043526][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 77.043543][ T5618] Cannot create hsr debugfs directory [ 77.509240][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.522359][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.524638][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.538462][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.539671][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.544708][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.546518][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.556580][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.633034][ T5602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.641899][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.643257][ T5602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.648721][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.652777][ T5602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.669318][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.670196][ T5602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.678690][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.777085][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.781487][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.802503][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.815601][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.819419][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.826552][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.827342][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.837407][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.931260][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.944120][ T5617] Bluetooth: hci0: command tx timeout [ 77.944383][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.945760][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.948124][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.948825][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.951637][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.952317][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.957605][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.052026][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.089069][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.136029][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.139032][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.139747][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.142002][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.142934][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.146852][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.153706][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.174902][ T5617] Bluetooth: hci1: command tx timeout [ 78.199083][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.208815][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.211521][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.239646][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.252519][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.252614][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.255120][ T5617] Bluetooth: hci2: command tx timeout [ 78.255157][ T5617] Bluetooth: hci3: command tx timeout [ 78.281857][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.281952][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.289477][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.319480][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.319573][ T1232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.334364][ T54] Bluetooth: hci4: command tx timeout [ 78.351462][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.351527][ T1232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.352843][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.352899][ T1232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.395141][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.395223][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.445747][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.526655][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.556177][ T5609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.577451][ T2140] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.577551][ T2140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.612941][ T2140] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.613041][ T2140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.710732][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.830890][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.861990][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.862089][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.927760][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.928433][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.606446][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.697789][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.849970][ T5602] veth0_vlan: entered promiscuous mode [ 79.898011][ T5602] veth1_vlan: entered promiscuous mode [ 80.014811][ T54] Bluetooth: hci0: command tx timeout [ 80.030922][ T5602] veth0_macvtap: entered promiscuous mode [ 80.064807][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.081252][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.082938][ T5602] veth1_macvtap: entered promiscuous mode [ 80.166919][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.190026][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.205951][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.254887][ T54] Bluetooth: hci1: command tx timeout [ 80.271928][ T5613] veth0_vlan: entered promiscuous mode [ 80.296404][ T5618] veth0_vlan: entered promiscuous mode [ 80.310183][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.310315][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.310350][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.325586][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.332837][ T5613] veth1_vlan: entered promiscuous mode [ 80.336054][ T5617] Bluetooth: hci2: command tx timeout [ 80.336129][ T54] Bluetooth: hci3: command tx timeout [ 80.378782][ T5618] veth1_vlan: entered promiscuous mode [ 80.416245][ T54] Bluetooth: hci4: command tx timeout [ 80.423246][ T5615] veth0_vlan: entered promiscuous mode [ 80.476502][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.476523][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.519732][ T5615] veth1_vlan: entered promiscuous mode [ 80.556741][ T5609] veth0_vlan: entered promiscuous mode [ 80.571026][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.571046][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.588675][ T5609] veth1_vlan: entered promiscuous mode [ 80.622165][ T5618] veth0_macvtap: entered promiscuous mode [ 80.629119][ T5618] veth1_macvtap: entered promiscuous mode [ 80.643999][ T5613] veth0_macvtap: entered promiscuous mode [ 80.670896][ T5613] veth1_macvtap: entered promiscuous mode [ 80.681327][ T5615] veth0_macvtap: entered promiscuous mode [ 80.698156][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.720432][ T5615] veth1_macvtap: entered promiscuous mode [ 80.733456][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.748915][ T5602] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.799403][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.811747][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.835371][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.835418][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.835452][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.835484][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.839224][ T5609] veth0_macvtap: entered promiscuous mode [ 80.873982][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.909884][ T5609] veth1_macvtap: entered promiscuous mode [ 80.935732][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.018760][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.050041][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.126875][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.126894][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.198025][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.199017][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.258629][ T5795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.261470][ T5795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.364392][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384519][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384561][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384595][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384625][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384657][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384688][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384718][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384750][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384802][ T51] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.384834][ T51] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.384865][ T51] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.384896][ T51] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.384928][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384961][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384991][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.445535][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.445556][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.589418][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.589439][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.735598][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.735616][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.736769][ T5798] syzkaller0: entered promiscuous mode [ 81.736789][ T5798] syzkaller0: entered allmulticast mode [ 81.786875][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.786894][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.951512][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.951532][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.067579][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.067598][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.094352][ T54] Bluetooth: hci0: command tx timeout [ 82.119593][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.119613][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.334180][ T54] Bluetooth: hci1: command tx timeout [ 82.416185][ T54] Bluetooth: hci3: command tx timeout [ 82.416222][ T54] Bluetooth: hci2: command tx timeout [ 82.495072][ T54] Bluetooth: hci4: command tx timeout [ 82.574526][ T5809] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.979543][ T5817] bridge_slave_0: left allmulticast mode [ 82.979567][ T5817] bridge_slave_0: left promiscuous mode [ 82.979928][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.065409][ T5817] bridge_slave_1: left allmulticast mode [ 83.065435][ T5817] bridge_slave_1: left promiscuous mode [ 83.069179][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.170700][ T5817] bond0: (slave bond_slave_0): Releasing backup interface [ 83.208082][ T5817] bond0: (slave bond_slave_1): Releasing backup interface [ 83.263854][ T5817] team0: Port device team_slave_0 removed [ 83.314561][ T5817] team0: Port device team_slave_1 removed [ 83.315250][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.315263][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.353044][ T5817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.353070][ T5817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.413149][ T5817] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.525085][ T5827] bridge_slave_0: left allmulticast mode [ 83.525112][ T5827] bridge_slave_0: left promiscuous mode [ 83.525493][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.596830][ T5827] bridge_slave_1: left allmulticast mode [ 83.596848][ T5827] bridge_slave_1: left promiscuous mode [ 83.596965][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.670623][ T5827] bond0: (slave bond_slave_0): Releasing backup interface [ 83.693201][ T5827] bond0: (slave bond_slave_1): Releasing backup interface [ 83.731042][ T5827] team0: Port device team_slave_0 removed [ 83.753446][ T5827] team0: Port device team_slave_1 removed [ 83.762615][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.762631][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.785926][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.793757][ T5827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.813379][ T5827] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.885443][ T5831] team0: Mode changed to "loadbalance" [ 84.243311][ T5853] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.147300][ T5869] loop2: detected capacity change from 0 to 32768 [ 85.180511][ T5869] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 85.180548][ T5869] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 85.358577][ T5869] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 85.596897][ T5725] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 85.617617][ T5725] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 87.963512][ T1220] cfg80211: failed to load regulatory.db [ 88.175713][ T5725] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 2558ms [ 88.176226][ T5725] gfs2: fsid=syz:syz.0: jid=0: Done [ 88.176710][ T5869] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 88.204395][ T5869] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 90.448260][ T5696] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 91.528710][ T5696] usb 3-1: New USB device found: idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 91.531484][ T5696] usb 3-1: config 9 interface 0 has no altsetting 0 [ 91.557466][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.557493][ T5696] usb 3-1: Product: syz [ 91.557507][ T5696] usb 3-1: Manufacturer: syz [ 91.557520][ T5696] usb 3-1: SerialNumber: syz [ 91.800094][ T5908] netlink: 'syz.2.32': attribute type 1 has an invalid length. [ 91.939047][ T5917] netlink: 'syz.2.32': attribute type 10 has an invalid length. [ 91.939242][ T5917] netlink: 40 bytes leftover after parsing attributes in process `syz.2.32'. [ 92.194798][ T5917] dummy0: entered promiscuous mode [ 92.228178][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 92.421981][ T5696] snd-usb-caiaq 3-1:9.0: can't set alt interface. [ 92.422012][ T5696] usb 3-1: unable to init card! (ret=-5) [ 92.455992][ T5696] snd-usb-caiaq 3-1:9.0: probe with driver snd-usb-caiaq failed with error -5 [ 92.478843][ T5915] loop0: detected capacity change from 0 to 32768 [ 92.517925][ T5696] usb 3-1: USB disconnect, device number 2 [ 92.583997][ T5915] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.34 (5915) [ 92.687758][ T5915] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.687793][ T5915] BTRFS info (device loop0): using sha256 checksum algorithm [ 92.866163][ T5915] BTRFS info (device loop0): enabling ssd optimizations [ 92.866194][ T5915] BTRFS info (device loop0): turning on async discard [ 92.866210][ T5915] BTRFS info (device loop0): enabling free space tree [ 94.337311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 94.425730][ T5949] loop4: detected capacity change from 0 to 32768 [ 94.433230][ T5949] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.38 (5949) [ 94.481665][ T5949] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 94.481698][ T5949] BTRFS info (device loop4): using sha256 checksum algorithm [ 94.601362][ T5965] loop3: detected capacity change from 0 to 512 [ 94.606584][ T5965] ======================================================= [ 94.606584][ T5965] WARNING: The mand mount option has been deprecated and [ 94.606584][ T5965] and is ignored by this kernel. Remove the mand [ 94.606584][ T5965] option from the mount to silence this warning. [ 94.606584][ T5965] ======================================================= [ 94.698746][ T5949] BTRFS info (device loop4): rebuilding free space tree [ 94.751260][ T5965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.917827][ T5949] BTRFS info (device loop4): disabling free space tree [ 94.917881][ T5949] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 94.917894][ T5949] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 94.932516][ T5949] BTRFS info (device loop4): setting nodatasum [ 94.932542][ T5949] BTRFS info (device loop4): setting nodatacow [ 94.932557][ T5949] BTRFS info (device loop4): enabling ssd optimizations [ 94.932571][ T5949] BTRFS info (device loop4): using spread ssd allocation scheme [ 94.932587][ T5949] BTRFS info (device loop4): turning off barriers [ 94.932671][ T5949] BTRFS info (device loop4): turning on flush-on-commit [ 94.932688][ T5949] BTRFS info (device loop4): turning on sync discard [ 94.932702][ T5949] BTRFS info (device loop4): force clearing of disk cache [ 95.139075][ T33] audit: type=1800 audit(1790147426.160:2): pid=5949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.38" name="file1" dev="loop4" ino=261 res=0 errno=0 [ 95.186452][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.402546][ T5978] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 95.402571][ T5978] overlayfs: failed to set xattr on upper [ 95.402579][ T5978] overlayfs: ...falling back to redirect_dir=nofollow. [ 95.402586][ T5978] overlayfs: ...falling back to index=off. [ 95.402592][ T5978] overlayfs: ...falling back to uuid=null. [ 95.547587][ T5602] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.593112][ T5609] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 96.063534][ T5982] loop3: detected capacity change from 0 to 4096 [ 96.101552][ T5982] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 96.272951][ T5982] ntfs3(loop3): ino=a, mi_enum_attr [ 96.284208][ T5982] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 96.295993][ T5982] ntfs3(loop3): Failed to read $UpCase (-5). [ 96.407188][ T5992] loop2: detected capacity change from 0 to 256 [ 96.488546][ T5994] tipc: Started in network mode [ 96.488575][ T5994] tipc: Node identity 7f000001, cluster identity 4711 [ 96.490984][ T5994] tipc: Enabled bearer , priority 10 [ 96.508174][ T5992] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.535392][ T5994] tipc: Enabling of bearer rejected, failed to enable media [ 96.845438][ T6008] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.608589][ T1220] tipc: Node number set to 2130706433 [ 98.213930][ T6026] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.464462][ T6038] loop3: detected capacity change from 0 to 256 [ 99.550638][ T6038] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 99.602969][ T6038] exFAT-fs (loop3): valid_size(562949953421322) is greater than size(10) [ 99.776397][ T6047] FAULT_INJECTION: forcing a failure. [ 99.776397][ T6047] name failslab, interval 1, probability 0, space 0, times 1 [ 99.776445][ T6047] CPU: 0 UID: 0 PID: 6047 Comm: syz.0.64 Not tainted syzkaller #0 PREEMPT(full) [ 99.776466][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.776488][ T6047] Call Trace: [ 99.776495][ T6047] [ 99.776507][ T6047] dump_stack_lvl+0xe8/0x150 [ 99.776552][ T6047] should_fail_ex+0x3eb/0x540 [ 99.776580][ T6047] should_failslab+0xa8/0x100 [ 99.776604][ T6047] ? __kernfs_new_node+0xe6/0x980 [ 99.776627][ T6047] kmem_cache_alloc_noprof+0x9c/0x600 [ 99.776659][ T6047] ? __kernfs_new_node+0xe6/0x980 [ 99.776689][ T6047] __kernfs_new_node+0xe6/0x980 [ 99.776720][ T6047] ? __pfx___kernfs_new_node+0x10/0x10 [ 99.776743][ T6047] ? kernfs_root+0x1c/0x230 [ 99.776770][ T6047] ? kernfs_root+0x1c/0x230 [ 99.776792][ T6047] ? kernfs_root+0x1c/0x230 [ 99.776817][ T6047] kernfs_new_node+0xeb/0x140 [ 99.776844][ T6047] kernfs_create_link+0xe3/0x240 [ 99.776876][ T6047] sysfs_do_create_link_sd+0x83/0x110 [ 99.776899][ T6047] driver_sysfs_add+0xec/0x210 [ 99.776921][ T6047] really_probe+0x142/0xae0 [ 99.776946][ T6047] __driver_probe_device+0x1e8/0x360 [ 99.776969][ T6047] driver_probe_device+0x4f/0x240 [ 99.776993][ T6047] __driver_attach+0x339/0x600 [ 99.777016][ T6047] bus_for_each_dev+0x23b/0x2c0 [ 99.777042][ T6047] ? __pfx___driver_attach+0x10/0x10 [ 99.777061][ T6047] ? __pfx_bus_for_each_dev+0x10/0x10 [ 99.777089][ T6047] ? do_raw_spin_unlock+0xf5/0x200 [ 99.777113][ T6047] bus_add_driver+0x384/0x6a0 [ 99.777145][ T6047] driver_register+0x23a/0x320 [ 99.777171][ T6047] usb_gadget_register_driver_owner+0xf9/0x270 [ 99.777203][ T6047] raw_ioctl+0x1541/0x41c0 [ 99.777231][ T6047] ? tomoyo_path_number_perm+0x219/0x5f0 [ 99.777260][ T6047] ? do_vfs_ioctl+0x116f/0x1530 [ 99.777286][ T6047] ? __pfx_raw_ioctl+0x10/0x10 [ 99.777342][ T6047] ? __fget_files+0x2a/0x420 [ 99.777364][ T6047] ? __fget_files+0x2a/0x420 [ 99.777382][ T6047] ? __fget_files+0x2a/0x420 [ 99.777405][ T6047] ? bpf_lsm_file_ioctl+0x9/0x20 [ 99.777428][ T6047] ? __pfx_raw_ioctl+0x10/0x10 [ 99.777449][ T6047] __se_sys_ioctl+0xfc/0x170 [ 99.777475][ T6047] do_syscall_64+0x166/0x520 [ 99.777499][ T6047] ? trace_irq_disable+0x3b/0x140 [ 99.777521][ T6047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.777539][ T6047] ? clear_bhb_loop+0x70/0xc0 [ 99.777569][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.777588][ T6047] RIP: 0033:0x7f0ef0d9ddeb [ 99.777613][ T6047] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 99.777629][ T6047] RSP: 002b:00007f0ef1c57f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.777650][ T6047] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f0ef0d9ddeb [ 99.777663][ T6047] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 99.777674][ T6047] RBP: 00007f0ef1c58fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 99.777686][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.777697][ T6047] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.777724][ T6047] [ 99.789314][ T6047] raw-gadget.0 gadget.0: really_probe: driver_sysfs_add failed [ 99.793879][ T6047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.797742][ T6047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.802257][ T6052] loop1: detected capacity change from 0 to 131072 [ 101.037675][ T6052] F2FS-fs (loop1): invalid crc value [ 101.533700][ T6052] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 101.550216][ T6052] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 101.599370][ T6052] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 101.605430][ T6052] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 101.631780][ T6052] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 102.893031][ T6034] IPVS: starting estimator thread 0... [ 102.935724][ T6089] Bluetooth: MGMT ver 1.23 [ 102.974270][ T6091] IPVS: using max 33 ests per chain, 79200 per kthread [ 103.066226][ T6093] loop4: detected capacity change from 0 to 4096 [ 103.083060][ T6093] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 103.209662][ T6093] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 103.209763][ T6093] ntfs3(loop4): Failed to load $Extend (-22). [ 103.209780][ T6093] ntfs3(loop4): Failed to initialize $Extend. [ 104.414327][ T5696] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 104.586916][ T5696] usb 5-1: New USB device found: idVendor=046d, idProduct=c08a, bcdDevice=0.40 [ 104.589098][ T5696] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 439, setting to 64 [ 104.589129][ T5696] usb 5-1: config 1 interface 0 has no altsetting 0 [ 104.622194][ T5696] usb 5-1: string descriptor 0 read error: -22 [ 104.622337][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.681056][ T6093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 104.718105][ T6106] FAULT_INJECTION: forcing a failure. [ 104.718105][ T6106] name fail_futex, interval 1, probability 0, space 0, times 1 [ 104.718136][ T6106] CPU: 0 UID: 0 PID: 6106 Comm: syz.3.85 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.718162][ T6106] Tainted: [L]=SOFTLOCKUP [ 104.718169][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.718180][ T6106] Call Trace: [ 104.718187][ T6106] [ 104.718196][ T6106] dump_stack_lvl+0xe8/0x150 [ 104.718230][ T6106] should_fail_ex+0x3eb/0x540 [ 104.718260][ T6106] get_futex_key+0x1b4/0x1580 [ 104.718289][ T6106] ? __lock_acquire+0x747/0x2de0 [ 104.718324][ T6106] ? __pfx_get_futex_key+0x10/0x10 [ 104.718356][ T6106] ? update_se+0x90/0xff0 [ 104.718380][ T6106] futex_wait_setup+0x4a/0x590 [ 104.718406][ T6106] ? __futex_wait+0xdb/0x470 [ 104.718431][ T6106] __futex_wait+0x175/0x470 [ 104.718452][ T6106] ? update_protect_slice+0x128/0x210 [ 104.718480][ T6106] ? __pfx___futex_wait+0x10/0x10 [ 104.718506][ T6106] ? __pfx_futex_wake_mark+0x10/0x10 [ 104.718532][ T6106] ? try_to_wake_up+0x8c5/0x14d0 [ 104.718567][ T6106] futex_wait+0x121/0x390 [ 104.718602][ T6106] ? __pfx_futex_wait+0x10/0x10 [ 104.718634][ T6106] ? do_utimes+0x257/0x2c0 [ 104.718656][ T6106] ? kmem_cache_free+0x182/0x650 [ 104.718683][ T6106] do_futex+0x3e7/0x4e0 [ 104.718706][ T6106] ? __pfx_do_futex+0x10/0x10 [ 104.718732][ T6106] __se_sys_futex+0x3a8/0x450 [ 104.718756][ T6106] ? __pfx___se_sys_futex+0x10/0x10 [ 104.718782][ T6106] ? __x64_sys_futex+0x21/0xf0 [ 104.718804][ T6106] do_syscall_64+0x166/0x520 [ 104.718832][ T6106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.718851][ T6106] ? clear_bhb_loop+0x70/0xc0 [ 104.718874][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.718893][ T6106] RIP: 0033:0x7f6698f9e159 [ 104.718912][ T6106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.718928][ T6106] RSP: 002b:00007f6699ea10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 104.718950][ T6106] RAX: ffffffffffffffda RBX: 00007f6699225fa8 RCX: 00007f6698f9e159 [ 104.718965][ T6106] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6699225fa8 [ 104.718978][ T6106] RBP: 00007f6699225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 104.718990][ T6106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.719001][ T6106] R13: 00007f6699226038 R14: 00007fffb00a9b80 R15: 00007fffb00a9c68 [ 104.719030][ T6106] [ 104.996581][ T6093] ntfs3(loop4): ino=5, "/" indx_read_ra [ 105.123252][ T6122] ntfs3(loop4): ino=5, "/" indx_read_ra [ 105.167827][ T6115] ntfs3(loop4): ino=5, "/" indx_read_ra [ 105.177769][ T2140] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22. [ 105.248969][ T6115] ntfs3(loop4): ino=3, ntfs_set_state failed, -22. [ 105.249002][ T6115] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 105.677115][ T6132] capability: warning: `syz.3.90' uses 32-bit capabilities (legacy support in use) [ 105.777266][ T6139] loop1: detected capacity change from 0 to 256 [ 105.803134][ T6139] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.803153][ T6139] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 105.865799][ T6139] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 105.867985][ T6139] exFAT-fs (loop1): failed to load alloc-bitmap [ 105.867995][ T6139] exFAT-fs (loop1): failed to recognize exfat type [ 105.992458][ T6141] process 'syz.3.92' launched './file1' with NULL argv: empty string added [ 106.390785][ T5696] usbhid 5-1:1.0: can't add hid device: -71 [ 106.390891][ T5696] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 106.471579][ T5696] usb 5-1: USB disconnect, device number 2 [ 106.954277][ T5696] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.024363][ T6160] FAULT_INJECTION: forcing a failure. [ 107.024363][ T6160] name failslab, interval 1, probability 0, space 0, times 0 [ 107.024396][ T6160] CPU: 1 UID: 0 PID: 6160 Comm: syz.3.95 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.024423][ T6160] Tainted: [L]=SOFTLOCKUP [ 107.024430][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.024441][ T6160] Call Trace: [ 107.024449][ T6160] [ 107.024458][ T6160] dump_stack_lvl+0xe8/0x150 [ 107.024495][ T6160] should_fail_ex+0x3eb/0x540 [ 107.024526][ T6160] should_failslab+0xa8/0x100 [ 107.024550][ T6160] ? do_getname+0x2e/0x250 [ 107.024576][ T6160] kmem_cache_alloc_noprof+0x9c/0x600 [ 107.024605][ T6160] ? do_futex+0x3e7/0x4e0 [ 107.024624][ T6160] ? do_getname+0x2e/0x250 [ 107.024655][ T6160] do_getname+0x2e/0x250 [ 107.024679][ T6160] ? getname_flags+0x11/0x20 [ 107.024707][ T6160] do_sys_openat2+0xce/0x200 [ 107.024735][ T6160] ? __se_sys_futex+0x3a8/0x450 [ 107.024754][ T6160] ? __pfx_do_sys_openat2+0x10/0x10 [ 107.024786][ T6160] ? rcu_is_watching+0x16/0xb0 [ 107.024816][ T6160] __x64_sys_openat+0x138/0x170 [ 107.024847][ T6160] do_syscall_64+0x166/0x520 [ 107.024873][ T6160] ? trace_irq_disable+0x3b/0x140 [ 107.024897][ T6160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.024917][ T6160] ? clear_bhb_loop+0x70/0xc0 [ 107.024940][ T6160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.024960][ T6160] RIP: 0033:0x7f6698f5e98e [ 107.024977][ T6160] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.024993][ T6160] RSP: 002b:00007f6699e7fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.025015][ T6160] RAX: ffffffffffffffda RBX: 00007f6699e806c0 RCX: 00007f6698f5e98e [ 107.025029][ T6160] RDX: 0000000000000002 RSI: 00007f6699e7ff90 RDI: ffffffffffffff9c [ 107.025042][ T6160] RBP: 00007f669903506b R08: 0000000000000000 R09: 0000000000000000 [ 107.025054][ T6160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.025066][ T6160] R13: 00007f6699226128 R14: 00007f6699226090 R15: 00007fffb00a9c68 [ 107.025096][ T6160] [ 107.418108][ T5696] usb 2-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 107.646314][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.646342][ T5696] usb 2-1: Product: syz [ 107.646355][ T5696] usb 2-1: Manufacturer: syz [ 107.646367][ T5696] usb 2-1: SerialNumber: syz [ 107.884952][ T6174] loop0: detected capacity change from 0 to 16 [ 107.908374][ T6173] netlink: 'syz.0.102': attribute type 8 has an invalid length. [ 108.124663][ T5696] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 108.124726][ T5696] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 109.961566][ T5696] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 111.190277][ T5696] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 111.192007][ T5696] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 111.192073][ T5696] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 111.249218][ T5696] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 111.295592][ T5696] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 111.325936][ T5696] usb 2-1: USB disconnect, device number 2 [ 112.205207][ T6214] syzkaller0: entered promiscuous mode [ 112.205228][ T6214] syzkaller0: entered allmulticast mode [ 112.679481][ T6222] loop2: detected capacity change from 0 to 1024 [ 113.738886][ T6237] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 113.738910][ T6237] overlayfs: failed to set xattr on upper [ 113.738918][ T6237] overlayfs: ...falling back to redirect_dir=nofollow. [ 113.738926][ T6237] overlayfs: ...falling back to index=off. [ 113.738933][ T6237] overlayfs: ...falling back to uuid=null. [ 114.406787][ T6246] kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 114.871033][ T6246] kvm: requested 161752 ns i8254 timer period limited to 200000 ns [ 114.905197][ T6246] kvm: requested 141638 ns i8254 timer period limited to 200000 ns [ 114.905925][ T6246] kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 114.932366][ T6246] kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 114.932522][ T6246] kvm: requested 83809 ns i8254 timer period limited to 200000 ns [ 114.932716][ T6246] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 114.932863][ T6246] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 114.961640][ T6246] kvm: requested 14247 ns i8254 timer period limited to 200000 ns [ 114.967346][ T6246] kvm: requested 178514 ns i8254 timer period limited to 200000 ns [ 115.424728][ T6266] syzkaller0: entered promiscuous mode [ 115.424751][ T6266] syzkaller0: entered allmulticast mode [ 116.330698][ T6292] loop2: detected capacity change from 0 to 256 [ 116.336737][ T6292] exfat: Deprecated parameter 'namecase' [ 116.336802][ T6292] exfat: Deprecated parameter 'namecase' [ 116.953521][ T6292] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 117.030014][ T33] audit: type=1804 audit(1790147448.050:3): pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.136" name=2F6E6577726F6F742F33332FE91F7189591E9233614B2F627573 dev="loop2" ino=118 res=1 errno=0 [ 118.152549][ T6315] loop4: detected capacity change from 0 to 8 [ 118.402784][ T6315] unable to read xattr id index table [ 118.653563][ T6311] loop4: detected capacity change from 0 to 512 [ 118.668084][ T6311] EXT4-fs (loop4): Test dummy encryption mode enabled [ 118.668106][ T6311] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.668118][ T6311] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.261569][ T6311] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.142: bad orphan inode 131083 [ 119.261777][ T6311] loop4: lost filesystem error report for type 5 error -117 [ 119.268728][ T6311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.400110][ T6311] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 119.499703][ T6315] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 13: comm syz.4.142: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 119.713352][ T5609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.741724][ T6348] loop1: detected capacity change from 0 to 1024 [ 119.813815][ T6344] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff817131a2 (__mcheck_cpu_init_prepare_banks+0x1f2/0x3d0) [ 119.813879][ T6344] Call Trace: [ 119.813887][ T6344] [ 119.813902][ T6344] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 119.813930][ T6344] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 119.813958][ T6344] ? do_raw_spin_lock+0x12b/0x2f0 [ 119.813984][ T6344] mce_cpu_restart+0x11a/0x2c0 [ 119.814008][ T6344] ? __pfx_mce_cpu_restart+0x10/0x10 [ 119.814026][ T6344] smp_call_function_many_cond+0xfb8/0x1500 [ 119.814058][ T6344] ? __pfx_mce_cpu_restart+0x10/0x10 [ 119.814085][ T6344] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 119.814112][ T6344] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 119.814140][ T6344] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 119.814164][ T6344] ? __timer_delete_sync+0x4a7/0x520 [ 119.814195][ T6344] set_bank+0x3a8/0x4e0 [ 119.814228][ T6344] ? __pfx_set_bank+0x10/0x10 [ 119.814250][ T6344] ? sysfs_file_kobj+0x1e4/0x230 [ 119.814270][ T6344] ? sysfs_kf_write+0x166/0x260 [ 119.814294][ T6344] ? __pfx_sysfs_kf_write+0x10/0x10 [ 119.814311][ T6344] kernfs_fop_write_iter+0x3a4/0x540 [ 119.814345][ T6344] vfs_write+0x612/0xba0 [ 119.814375][ T6344] ? __pfx_vfs_write+0x10/0x10 [ 119.814400][ T6344] ? __fget_files+0x3a2/0x420 [ 119.814418][ T6344] ? __fget_files+0x2a/0x420 [ 119.814442][ T6344] ? fdget+0x1ac/0x250 [ 119.814469][ T6344] ksys_write+0x150/0x270 [ 119.814493][ T6344] ? __pfx_ksys_write+0x10/0x10 [ 119.814519][ T6344] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 119.814554][ T6344] do_syscall_64+0x166/0x520 [ 119.814580][ T6344] ? trace_irq_disable+0x3b/0x140 [ 119.814603][ T6344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.814623][ T6344] ? clear_bhb_loop+0x70/0xc0 [ 119.814647][ T6344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.814666][ T6344] RIP: 0033:0x7f222799e159 [ 119.814690][ T6344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.814706][ T6344] RSP: 002b:00007f22287c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.814727][ T6344] RAX: ffffffffffffffda RBX: 00007f2227c25fa0 RCX: 00007f222799e159 [ 119.814741][ T6344] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 119.814753][ T6344] RBP: 00007f2227a3506b R08: 0000000000000000 R09: 0000000000000000 [ 119.814765][ T6344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.814777][ T6344] R13: 00007f2227c26038 R14: 00007f2227c25fa0 R15: 00007ffc4cd9ad78 [ 119.814812][ T6344] [ 122.267831][ T6375] syz.0.152 (6375): drop_caches: 2 [ 122.655842][ T6392] loop0: detected capacity change from 0 to 1024 [ 122.782124][ T6392] hfsplus: failed to load extents file [ 123.899281][ T6386] loop2: detected capacity change from 0 to 32768 [ 123.918761][ T6386] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.158 (6386) [ 124.055370][ T6386] BTRFS info (device loop2 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.055404][ T6386] BTRFS info (device loop2 state S): using crc32c checksum algorithm [ 124.230362][ T1232] BTRFS warning (device loop2 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x54a13536 level 0, ignored [ 124.233114][ T6386] BTRFS error (device loop2 state ES): failed to find fsid 00fe44da-de57-406a-8241-57ec7d4412cf when attempting to open seed devices [ 124.233270][ T6386] BTRFS error (device loop2 state ES): failed to read chunk tree: -ENOENT [ 124.350596][ T6386] BTRFS error (device loop2 state ES): open_ctree failed: -ENOENT [ 125.531002][ T6457] create_pit_timer: 11 callbacks suppressed [ 125.531021][ T6457] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 131.655464][ T6498] syzkaller0: entered promiscuous mode [ 131.655487][ T6498] syzkaller0: entered allmulticast mode [ 131.801097][ T6503] overlayfs: failed to clone lowerpath [ 131.814204][ T6503] overlayfs: failed to clone lowerpath [ 132.098179][ T6513] tipc: Enabling of bearer rejected, failed to enable media [ 132.132360][ T6514] loop1: detected capacity change from 0 to 256 [ 132.217179][ T6514] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3163b44b, utbl_chksum : 0xe619d30d) [ 132.257735][ T6514] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 132.322907][ T6518] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 132.367915][ T33] audit: type=1800 audit(1790147463.390:4): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.189" name="file1" dev="loop1" ino=140 res=0 errno=0 [ 132.383322][ T6518] kvm: pic: level sensitive irq not supported [ 132.387027][ T6518] kvm: pic: non byte read [ 132.387877][ T6518] kvm: pic: level sensitive irq not supported [ 132.388580][ T6518] kvm: pic: non byte read [ 132.389653][ T6518] kvm: pic: level sensitive irq not supported [ 132.390601][ T6518] kvm: pic: non byte read [ 132.512049][ T6525] netlink: 48 bytes leftover after parsing attributes in process `syz.3.190'. [ 132.512231][ T6525] Zero length message leads to an empty skb [ 132.820021][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.820077][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.549511][ T6555] tipc: Enabling of bearer rejected, failed to enable media [ 135.671180][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 135.671207][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 135.970088][ T6537] loop0: detected capacity change from 0 to 32768 [ 135.978026][ T6537] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.183 (6537) [ 136.059314][ T6561] syzkaller0: entered promiscuous mode [ 136.059330][ T6561] syzkaller0: entered allmulticast mode [ 136.086099][ T6537] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.086148][ T6537] BTRFS info (device loop0): using sha256 checksum algorithm [ 136.248841][ T6537] BTRFS info (device loop0): enabling ssd optimizations [ 136.248870][ T6537] BTRFS info (device loop0): turning on async discard [ 136.248894][ T6537] BTRFS info (device loop0): enabling free space tree [ 136.419014][ T5602] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.605058][ T6582] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 136.605085][ T6582] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 136.633718][ T6582] vhci_hcd vhci_hcd.0: Device attached [ 136.790474][ T6553] loop1: detected capacity change from 0 to 40427 [ 136.804225][ T5696] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 136.874736][ T5696] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 136.895055][ T5733] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 136.961734][ T6553] F2FS-fs (loop1): invalid crc value [ 137.046328][ T5733] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.046912][ T5733] usb 3-1: config 0 has no interfaces? [ 137.046943][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.084638][ T5733] usb 3-1: config 0 descriptor?? [ 137.340867][ T6583] usb 37-1: recv xbuf, 0 [ 137.353959][ T5733] usb 3-1: USB disconnect, device number 3 [ 137.380217][ T2140] vhci_hcd vhci_hcd.2: stop threads [ 137.380718][ T2140] vhci_hcd vhci_hcd.2: release socket [ 137.393663][ T2140] vhci_hcd vhci_hcd.2: disconnect device [ 137.434161][ T5696] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 138.826299][ T6553] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 138.894394][ T6553] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 138.894434][ T6553] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 138.894500][ T6553] F2FS-fs (loop1): Start checkpoint disabled! [ 138.900524][ T6553] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 139.364361][ T6609] netlink: 'syz.2.213': attribute type 2 has an invalid length. [ 139.703151][ T6614] loop2: detected capacity change from 0 to 512 [ 139.720522][ T6614] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.773626][ T6614] EXT4-fs (loop2): 1 truncate cleaned up [ 139.790311][ T6614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.124116][ T6621] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 140.163242][ T6622] Cannot find del_set index 2 as target [ 140.935709][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.306961][ T6630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.608072][ T6640] x_tables: duplicate entry at hook 3 [ 143.459763][ T6648] Bluetooth: hci0: service_discovery: too big uuid_count value 10000 [ 143.566692][ T6654] netlink: 32 bytes leftover after parsing attributes in process `syz.1.220'. [ 144.762325][ T6668] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 144.850881][ T6668] kvm: pic: level sensitive irq not supported [ 144.851650][ T6668] kvm: pic: non byte read [ 144.852319][ T6668] kvm: pic: level sensitive irq not supported [ 144.852658][ T6668] kvm: pic: non byte read [ 144.853892][ T6668] kvm: pic: level sensitive irq not supported [ 144.855608][ T6668] kvm: pic: non byte read [ 144.856635][ T6668] kvm: pic: level sensitive irq not supported [ 144.856695][ T6668] kvm: pic: non byte read [ 144.858093][ T6668] kvm: pic: level sensitive irq not supported [ 144.859406][ T6668] kvm: pic: non byte read [ 144.860694][ T6668] kvm: pic: level sensitive irq not supported [ 144.861400][ T6668] kvm: pic: non byte read [ 144.861829][ T6668] kvm: pic: level sensitive irq not supported [ 144.861880][ T6668] kvm: pic: non byte read [ 144.862483][ T6668] kvm: pic: level sensitive irq not supported [ 144.862541][ T6668] kvm: pic: non byte read [ 144.864932][ T6668] kvm: pic: level sensitive irq not supported [ 144.868586][ T6668] kvm: pic: non byte read [ 145.038026][ T6676] kAFS: unable to lookup cell 'ÿ' [ 147.227421][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 147.284157][ T5696] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.455812][ T5696] usb 3-1: Using ep0 maxpacket: 8 [ 147.460735][ T5696] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 147.466578][ T5696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.466623][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.522566][ T5696] usb 3-1: config 0 descriptor?? [ 147.778980][ T5696] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 149.085674][ T5696] usb 3-1: USB disconnect, device number 4 [ 149.085750][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 150.354758][ T6717] nvmet: adding nsid 1 to subsystem testsubsys [ 150.507273][ T6720] loop2: detected capacity change from 0 to 4096 [ 150.560147][ T6720] ntfs3(loop2): Failed to load $Extend (-22). [ 150.560186][ T6720] ntfs3(loop2): Failed to initialize $Extend. [ 151.084645][ T5799] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 151.136254][ T6735] bond0: Error: CAN devices cannot be enslaved [ 152.013871][ T5799] usb 3-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 152.029927][ T5799] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.031948][ T5799] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.061302][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.061329][ T5799] usb 3-1: Product: syz [ 152.061343][ T5799] usb 3-1: Manufacturer: syz [ 152.061357][ T5799] usb 3-1: SerialNumber: syz [ 152.109343][ T5799] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 152.136663][ T5799] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 152.157843][ T5799] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 152.886195][ T5696] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 153.079535][ T5696] usb 2-1: New USB device found: idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 153.103335][ T5696] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.103397][ T5696] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 153.103545][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.608344][ T5696] usb 2-1: config 0 descriptor?? [ 153.654859][ T5696] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 153.655232][ T5696] dvb-usb: bulk message failed: -22 (3/0) [ 153.703653][ T5696] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 153.715634][ T5696] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 153.715693][ T5696] usb 2-1: media controller created [ 153.746645][ T5696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.790424][ T5696] dvb-usb: bulk message failed: -22 (6/0) [ 153.790618][ T5696] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 153.811350][ T5696] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 154.008747][ T5696] dvb-usb: schedule remote query interval to 150 msecs. [ 154.008771][ T5696] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 154.156339][ T6754] dvb-usb: bulk message failed: -22 (2/0) [ 154.553656][ T5696] dvb-usb: bulk message failed: -22 (1/0) [ 154.553709][ T5696] dvb-usb: error while querying for an remote control event. [ 154.832956][ T5733] dvb-usb: bulk message failed: -22 (1/0) [ 154.832990][ T5733] dvb-usb: error while querying for an remote control event. [ 155.009314][ T5733] dvb-usb: bulk message failed: -22 (1/0) [ 155.022690][ T5733] dvb-usb: error while querying for an remote control event. [ 155.174686][ T5696] dvb-usb: bulk message failed: -22 (1/0) [ 155.174804][ T5696] dvb-usb: error while querying for an remote control event. [ 155.379388][ T5696] dvb-usb: bulk message failed: -22 (1/0) [ 155.379910][ T5696] dvb-usb: error while querying for an remote control event. [ 155.446282][ T6732] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 155.478850][ T1220] usb 3-1: USB disconnect, device number 5 [ 155.552458][ T1220] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 155.594425][ T5696] dvb-usb: bulk message failed: -22 (1/0) [ 155.594454][ T5696] dvb-usb: error while querying for an remote control event. [ 155.664176][ T5733] usb 2-1: USB disconnect, device number 3 [ 155.744115][ T5725] dvb-usb: bulk message failed: -22 (1/0) [ 155.744152][ T5725] dvb-usb: error while querying for an remote control event. [ 155.808709][ T1220] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 155.826767][ T1220] ti_usb_3410_5052 3-1:2.0: device disconnected [ 155.985949][ T6768] FAULT_INJECTION: forcing a failure. [ 155.985949][ T6768] name failslab, interval 1, probability 0, space 0, times 0 [ 155.985993][ T6768] CPU: 1 UID: 0 PID: 6768 Comm: syz.1.260 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.986020][ T6768] Tainted: [L]=SOFTLOCKUP [ 155.986027][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.986038][ T6768] Call Trace: [ 155.986046][ T6768] [ 155.986054][ T6768] dump_stack_lvl+0xe8/0x150 [ 155.986088][ T6768] should_fail_ex+0x3eb/0x540 [ 155.986118][ T6768] should_failslab+0xa8/0x100 [ 155.986143][ T6768] __kvmalloc_node_noprof+0x171/0x820 [ 155.986166][ T6768] ? __kmalloc_cache_noprof+0x31c/0x600 [ 155.986186][ T6768] ? ip_vs_rht_alloc+0x11f/0x870 [ 155.986207][ T6768] ? ip_vs_rht_alloc+0x11f/0x870 [ 155.986237][ T6768] ip_vs_rht_alloc+0x11f/0x870 [ 155.986262][ T6768] ? ip_vs_rht_alloc+0x743/0x870 [ 155.986285][ T6768] ip_vs_conn_tab_alloc+0x60/0x110 [ 155.986309][ T6768] ip_vs_add_service+0x8be/0x2040 [ 155.986330][ T6768] ? lock_acquire+0x115/0x350 [ 155.986359][ T6768] ? ip_vs_add_service+0x1f5/0x2040 [ 155.986387][ T6768] ? rcu_read_unlock+0x87/0xa0 [ 155.986410][ T6768] do_ip_vs_set_ctl+0x8ce/0xaf0 [ 155.986436][ T6768] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 155.986483][ T6768] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.986536][ T6768] nf_setsockopt+0x26f/0x290 [ 155.986563][ T6768] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 155.986590][ T6768] do_sock_setsockopt+0x17c/0x1b0 [ 155.986620][ T6768] __x64_sys_setsockopt+0x13d/0x1b0 [ 155.986652][ T6768] do_syscall_64+0x166/0x520 [ 155.986678][ T6768] ? trace_irq_disable+0x3b/0x140 [ 155.986700][ T6768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.986720][ T6768] ? clear_bhb_loop+0x70/0xc0 [ 155.986743][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.986762][ T6768] RIP: 0033:0x7fed0bb9e159 [ 155.986780][ T6768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.986796][ T6768] RSP: 002b:00007fed09df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.986815][ T6768] RAX: ffffffffffffffda RBX: 00007fed0be25fa0 RCX: 00007fed0bb9e159 [ 155.986828][ T6768] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000007 [ 155.986838][ T6768] RBP: 00007fed0bc3506b R08: 000000000000002c R09: 0000000000000000 [ 155.986848][ T6768] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 155.986858][ T6768] R13: 00007fed0be26038 R14: 00007fed0be25fa0 R15: 00007ffecc191b58 [ 155.986886][ T6768] [ 156.627917][ T5733] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 157.142666][ T5617] Bluetooth: hci4: command 0x0405 tx timeout [ 157.473946][ T6785] loop2: detected capacity change from 0 to 512 [ 158.062399][ T6786] syzkaller0: entered promiscuous mode [ 158.062421][ T6786] syzkaller0: entered allmulticast mode [ 158.229766][ T6788] tipc: Enabled bearer , priority 0 [ 158.251121][ T6784] tipc: Resetting bearer [ 158.344104][ T6785] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.265: iget: bad i_size value: 38620345925642 [ 158.344330][ T6785] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.346883][ T6785] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.265: couldn't read orphan inode 15 (err -117) [ 158.346912][ T6785] loop2: lost filesystem error report for type 5 error -117 [ 158.375607][ T6785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.377193][ T6784] tipc: Disabling bearer [ 159.123866][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.470237][ T6832] loop1: detected capacity change from 0 to 2048 [ 162.124379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 162.650335][ T6840] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.741438][ T33] audit: type=1326 audit(1790147493.760:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.2.284" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f222799e159 code=0x0 [ 163.230957][ T6850] kvm: pic: non byte write [ 164.274696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 164.684357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 166.313382][ T6886] loop0: detected capacity change from 0 to 128 [ 168.662384][ T5696] libceph: connect (1)[c::]:6789 error -101 [ 168.662791][ T5696] libceph: mon0 (1)[c::]:6789 connect error [ 168.694180][ T6920] ceph: No mds server is up or the cluster is laggy [ 170.310988][ T6937] loop4: detected capacity change from 0 to 128 [ 170.327529][ T6937] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.332651][ T6937] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.984253][ T5696] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 171.306216][ T5696] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 171.326432][ T5696] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 171.326459][ T5696] usb 1-1: config 1 has no interface number 0 [ 171.355477][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.355503][ T5696] usb 1-1: Product: syz [ 171.355516][ T5696] usb 1-1: Manufacturer: syz [ 171.355537][ T5696] usb 1-1: SerialNumber: syz [ 171.445807][ T5696] usb 1-1: 3:1 : does not exist [ 171.445831][ T5696] usb 1-1: 3:2 : does not exist [ 172.975047][ T6964] kAFS: unable to lookup cell 'ÿ' [ 173.057078][ T6968] mmap: syz.1.317 (6968) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 173.142559][ T6294] IPVS: starting estimator thread 0... [ 173.235092][ T6969] IPVS: using max 31 ests per chain, 74400 per kthread [ 173.253825][ T5733] usb 1-1: USB disconnect, device number 2 [ 173.300786][ T6971] FAULT_INJECTION: forcing a failure. [ 173.300786][ T6971] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 173.300819][ T6971] CPU: 0 UID: 0 PID: 6971 Comm: syz.2.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.300846][ T6971] Tainted: [L]=SOFTLOCKUP [ 173.300852][ T6971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.300863][ T6971] Call Trace: [ 173.300870][ T6971] [ 173.300879][ T6971] dump_stack_lvl+0xe8/0x150 [ 173.300913][ T6971] should_fail_ex+0x3eb/0x540 [ 173.300952][ T6971] _copy_from_user+0x2d/0xb0 [ 173.300981][ T6971] proc_do_submiturb+0xbf1/0x3430 [ 173.301000][ T6971] ? lock_acquire+0x115/0x350 [ 173.301036][ T6971] ? __might_fault+0xaf/0x130 [ 173.301070][ T6971] proc_submiturb+0x134/0x1a0 [ 173.301096][ T6971] ? usbdev_ioctl+0x13f/0x21a0 [ 173.301120][ T6971] ? __pfx_proc_submiturb+0x10/0x10 [ 173.301164][ T6971] usbdev_ioctl+0x1104/0x21a0 [ 173.301194][ T6971] ? __pfx_usbdev_ioctl+0x10/0x10 [ 173.301217][ T6971] ? __fget_files+0x2a/0x420 [ 173.301238][ T6971] ? bpf_lsm_file_ioctl+0x9/0x20 [ 173.301262][ T6971] ? __pfx_usbdev_ioctl+0x10/0x10 [ 173.301287][ T6971] __se_sys_ioctl+0xfc/0x170 [ 173.301313][ T6971] do_syscall_64+0x166/0x520 [ 173.301338][ T6971] ? trace_irq_disable+0x3b/0x140 [ 173.301361][ T6971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.301381][ T6971] ? clear_bhb_loop+0x70/0xc0 [ 173.301403][ T6971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.301421][ T6971] RIP: 0033:0x7f222799e159 [ 173.301439][ T6971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.301462][ T6971] RSP: 002b:00007f22287c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.301483][ T6971] RAX: ffffffffffffffda RBX: 00007f2227c25fa0 RCX: 00007f222799e159 [ 173.301498][ T6971] RDX: 0000200000000040 RSI: 000000008038550a RDI: 0000000000000007 [ 173.301511][ T6971] RBP: 00007f2227a3506b R08: 0000000000000000 R09: 0000000000000000 [ 173.301524][ T6971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.301536][ T6971] R13: 00007f2227c26038 R14: 00007f2227c25fa0 R15: 00007ffc4cd9ad78 [ 173.301564][ T6971] [ 173.350766][ T6973] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7) [ 173.473068][ T6973] 9p: Bad value for 'wfdno' [ 173.869302][ T6987] netlink: 14 bytes leftover after parsing attributes in process `syz.3.324'. [ 174.673983][ T7009] loop2: detected capacity change from 0 to 128 [ 174.800499][ T7014] kAFS: unable to lookup cell 'ÿ' [ 175.075671][ T33] audit: type=1800 audit(1790147506.050:6): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.339" name="file1" dev="loop2" ino=146 res=0 errno=0 [ 177.554937][ T7013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.227283][ T7040] loop4: detected capacity change from 0 to 16 [ 178.360505][ T7040] erofs (device loop4): invalid ishare xattr prefix id 0 [ 178.813343][ T7055] syzkaller0: entered promiscuous mode [ 178.813365][ T7055] syzkaller0: entered allmulticast mode [ 181.193626][ T7070] kAFS: unable to lookup cell 'ÿ' [ 184.075328][ T5725] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 184.077013][ T5617] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 184.077042][ T5617] CPU: 1 UID: 0 PID: 5617 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.077069][ T5617] Tainted: [L]=SOFTLOCKUP [ 184.077076][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.077089][ T5617] Workqueue: hci4 hci_rx_work [ 184.077115][ T5617] Call Trace: [ 184.077123][ T5617] [ 184.077132][ T5617] dump_stack_lvl+0xe8/0x150 [ 184.077164][ T5617] sysfs_create_dir_ns+0x271/0x2a0 [ 184.077189][ T5617] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 184.077215][ T5617] ? do_raw_spin_unlock+0xf5/0x200 [ 184.077240][ T5617] kobject_add_internal+0x622/0xcd0 [ 184.077268][ T5617] kobject_add+0x163/0x240 [ 184.077294][ T5617] ? __pfx_kobject_add+0x10/0x10 [ 184.077320][ T5617] ? get_device_parent+0x366/0x3a0 [ 184.077354][ T5617] device_add+0x3fa/0xb80 [ 184.077385][ T5617] hci_conn_add_sysfs+0xd5/0x210 [ 184.077411][ T5617] le_conn_complete_evt+0x10b2/0x17a0 [ 184.077450][ T5617] ? le_conn_complete_evt+0x210/0x17a0 [ 184.077479][ T5617] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 184.077508][ T5617] ? __mutex_unlock_slowpath+0x731/0x900 [ 184.077542][ T5617] ? skb_pull_data+0xf0/0x200 [ 184.077567][ T5617] hci_le_enh_conn_complete_evt+0x189/0x490 [ 184.077596][ T5617] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 184.077629][ T5617] hci_event_packet+0x67a/0xf10 [ 184.077660][ T5617] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 184.077684][ T5617] ? __pfx_hci_event_packet+0x10/0x10 [ 184.077712][ T5617] ? kcov_remote_start+0x523/0x7e0 [ 184.077737][ T5617] ? hci_send_to_monitor+0xdf/0x600 [ 184.077769][ T5617] hci_rx_work+0x2b4/0x1110 [ 184.077800][ T5617] ? process_scheduled_works+0x97a/0x1630 [ 184.077829][ T5617] process_scheduled_works+0xc3d/0x1630 [ 184.077891][ T5617] ? __pfx_process_scheduled_works+0x10/0x10 [ 184.077925][ T5617] ? assign_work+0x3cf/0x5d0 [ 184.077959][ T5617] worker_thread+0xa47/0xfb0 [ 184.078002][ T5617] ? __kthread_parkme+0x71/0x1f0 [ 184.078033][ T5617] kthread+0x38b/0x480 [ 184.078056][ T5617] ? __pfx_worker_thread+0x10/0x10 [ 184.078082][ T5617] ? __pfx_kthread+0x10/0x10 [ 184.078106][ T5617] ret_from_fork+0x514/0xb70 [ 184.078129][ T5617] ? __pfx_ret_from_fork+0x10/0x10 [ 184.078146][ T5617] ? __switch_to+0xc78/0x1410 [ 184.078176][ T5617] ? __pfx_kthread+0x10/0x10 [ 184.078200][ T5617] ret_from_fork_asm+0x1a/0x30 [ 184.078247][ T5617] [ 184.078350][ T5617] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 184.078389][ T5617] Bluetooth: hci4: failed to register connection device [ 184.236165][ T5725] usb 1-1: New USB device found: idVendor=256c, idProduct=006d, bcdDevice=0.00 [ 184.237142][ T5725] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.238406][ T5725] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 184.238427][ T5725] usb 1-1: Manufacturer: syz [ 184.248893][ T5725] usb 1-1: config 0 descriptor?? [ 184.588809][ T7112] fuse: Bad value for 'fd' [ 185.724777][ T5733] usb 1-1: USB disconnect, device number 3 [ 185.979676][ T7096] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 185.979773][ T7096] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 186.002390][ T7096] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 186.012378][ T7096] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.012643][ T7096] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 186.029100][ T7096] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 186.031814][ T7096] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 186.031922][ T7096] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 186.033232][ T7096] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.033343][ T7096] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 186.037647][ T7096] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 186.254186][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 188.014100][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 188.094171][ T4925] Bluetooth: hci3: command 0x0c1a tx timeout [ 188.094227][ T4925] Bluetooth: hci2: command 0x0c1a tx timeout [ 188.095595][ T5617] Bluetooth: hci4: command 0x0405 tx timeout [ 188.095829][ T7096] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.095933][ T7096] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 188.116267][ T7096] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 188.206079][ T7096] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 188.346525][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.002628][ T7142] fuse: Bad value for 'fd' [ 190.095274][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.185625][ T5617] Bluetooth: hci4: command 0x0405 tx timeout [ 190.185755][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.185782][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.508773][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.174139][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 192.254105][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 192.254143][ T5617] Bluetooth: hci4: command 0x0405 tx timeout [ 192.659246][ T7149] loop1: detected capacity change from 0 to 32768 [ 192.855011][ T7149] (syz.1.369,7149,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 192.882477][ T7149] (syz.1.369,7149,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 193.232201][ T7149] JBD2: Ignoring recovery information on journal [ 194.259565][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.259657][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.337678][ T7149] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 194.345404][ T5617] Bluetooth: hci4: command 0x0405 tx timeout [ 194.787459][ T7179] overlayfs: failed to clone lowerpath [ 195.659859][ T5618] ocfs2: Unmounting device (7,1) on (node local) [ 196.632030][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 197.397078][ T5617] Bluetooth: hci4: command 0x0405 tx timeout [ 199.064710][ T7213] syzkaller0: entered promiscuous mode [ 199.064737][ T7213] syzkaller0: entered allmulticast mode [ 201.818512][ T7247] syzkaller0: entered promiscuous mode [ 201.818535][ T7247] syzkaller0: entered allmulticast mode [ 202.074605][ T7251] syzkaller0: entered promiscuous mode [ 202.074621][ T7251] syzkaller0: entered allmulticast mode [ 202.423952][ T7257] loop0: detected capacity change from 0 to 32768 [ 202.431680][ T7257] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.400 (7257) [ 202.450893][ T7257] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 202.450924][ T7257] BTRFS info (device loop0): using blake2b checksum algorithm [ 202.567241][ T7257] BTRFS info (device loop0): enabling ssd optimizations [ 202.567261][ T7257] BTRFS info (device loop0): turning on async discard [ 202.567269][ T7257] BTRFS info (device loop0): enabling free space tree [ 202.567291][ T7257] BTRFS info (device loop0): use zstd compression, level 3 [ 202.652288][ T7270] syzkaller0: entered promiscuous mode [ 202.652310][ T7270] syzkaller0: entered allmulticast mode [ 202.710740][ T7270] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 203.241130][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056aba400: rx timeout, send abort [ 203.243390][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056aba400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 204.875247][ T7291] syz.3.405 uses obsolete (PF_INET,SOCK_PACKET) [ 204.950087][ T33] audit: type=1800 audit(1790147535.970:7): pid=7252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.397" name="bus" dev="ramfs" ino=14478 res=0 errno=0 [ 205.265770][ T7299] loop2: detected capacity change from 0 to 16 [ 205.275991][ T7299] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 205.728748][ T5602] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 206.054664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 206.793818][ T7301] MINIX-fs: unable to read superblock [ 209.944695][ T7330] tipc: Started in network mode [ 209.944735][ T7330] tipc: Node identity c6406a76fe11, cluster identity 4711 [ 209.944979][ T7330] tipc: Enabled bearer , priority 0 [ 209.946533][ T7330] syzkaller0: entered promiscuous mode [ 209.946546][ T7330] syzkaller0: entered allmulticast mode [ 210.172809][ T7340] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 210.291599][ T7330] tipc: Resetting bearer [ 210.411464][ T7329] tipc: Resetting bearer [ 210.855604][ T7329] tipc: Disabling bearer [ 216.410772][ T7364] syzkaller0: entered promiscuous mode [ 216.410788][ T7364] syzkaller0: entered allmulticast mode [ 218.854061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 219.054529][ T7379] 0: reclassify loop, rule prio 0, protocol 03 [ 219.985905][ T7389] syzkaller0: entered promiscuous mode [ 219.985928][ T7389] syzkaller0: entered allmulticast mode [ 220.844739][ T7399] Device name cannot be null; rc = [-22] [ 222.187635][ T7407] loop4: detected capacity change from 0 to 32768 [ 222.224918][ T7407] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 222.261265][ T7409] netlink: 84 bytes leftover after parsing attributes in process `syz.0.438'. [ 223.040470][ T7414] syzkaller0: entered promiscuous mode [ 223.040494][ T7414] syzkaller0: entered allmulticast mode [ 224.384265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 224.962334][ T7429] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 225.069718][ T5609] ocfs2: Unmounting device (7,4) on (node local) [ 225.351364][ T7434] loop0: detected capacity change from 0 to 512 [ 225.445531][ T7434] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.441: iget: bad i_size value: 38620345925642 [ 225.445566][ T7434] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 225.458669][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 225.458683][ C0] EXT4-fs (loop0): initial error at time 1790147556: ext4_orphan_get:1403: inode 15 [ 225.458699][ C0] EXT4-fs (loop0): last error at time 1790147556: ext4_orphan_get:1403: inode 15 [ 225.493307][ T7434] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.441: couldn't read orphan inode 15 (err -117) [ 225.493341][ T7434] loop0: lost filesystem error report for type 5 error -117 [ 225.517725][ T7434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.718903][ T7436] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 227.210871][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.875527][ T33] audit: type=1800 audit(1790147558.900:8): pid=7430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.443" name="bus" dev="ramfs" ino=14885 res=0 errno=0 [ 228.242885][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 228.713445][ T7468] ubi0: attaching mtd0 [ 228.737024][ T7468] ubi0: scanning is finished [ 228.737066][ T7468] ubi0: empty MTD device detected [ 229.433856][ T7468] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 229.575226][ T7474] loop1: detected capacity change from 0 to 256 [ 229.609680][ T7474] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 256) [ 229.609964][ T7474] exFAT-fs (loop1): failed to load alloc-bitmap [ 229.609970][ T7474] exFAT-fs (loop1): failed to recognize exfat type [ 233.264962][ T7507] FAULT_INJECTION: forcing a failure. [ 233.264962][ T7507] name failslab, interval 1, probability 0, space 0, times 0 [ 233.264997][ T7507] CPU: 0 UID: 0 PID: 7507 Comm: syz.2.455 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.265024][ T7507] Tainted: [L]=SOFTLOCKUP [ 233.265031][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.265042][ T7507] Call Trace: [ 233.265051][ T7507] [ 233.265059][ T7507] dump_stack_lvl+0xe8/0x150 [ 233.265093][ T7507] should_fail_ex+0x3eb/0x540 [ 233.265124][ T7507] should_failslab+0xa8/0x100 [ 233.265192][ T7507] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 233.265215][ T7507] ? nf_nat_register_fn+0x27d/0x5e0 [ 233.265262][ T7507] ? nf_nat_register_fn+0x27d/0x5e0 [ 233.265300][ T7507] kmemdup_array+0x3f/0x80 [ 233.265333][ T7507] nf_nat_register_fn+0x27d/0x5e0 [ 233.265378][ T7507] iptable_nat_table_init+0xd4/0x300 [ 233.265413][ T7507] xt_find_table_lock+0x311/0x400 [ 233.265447][ T7507] xt_request_find_table_lock+0x26/0x100 [ 233.265478][ T7507] do_ipt_get_ctl+0x77f/0x1300 [ 233.265507][ T7507] ? do_ip_getsockopt+0x1294/0x1cf0 [ 233.265531][ T7507] ? __local_bh_enable_ip+0xd6/0x140 [ 233.265562][ T7507] ? do_ip_getsockopt+0x1034/0x1cf0 [ 233.265587][ T7507] ? __pfx_do_ipt_get_ctl+0x10/0x10 [ 233.265623][ T7507] ? __mutex_trylock_common+0x15f/0x270 [ 233.265654][ T7507] ? __pfx___mutex_trylock_common+0x10/0x10 [ 233.265686][ T7507] ? rcu_is_watching+0x16/0xb0 [ 233.265727][ T7507] ? nf_getsockopt+0x224/0x290 [ 233.265757][ T7507] ? __mutex_unlock_slowpath+0x731/0x900 [ 233.265792][ T7507] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 233.265832][ T7507] nf_getsockopt+0x26e/0x290 [ 233.265862][ T7507] ip_getsockopt+0x19e/0x230 [ 233.265890][ T7507] ? __pfx_ip_getsockopt+0x10/0x10 [ 233.265906][ T7507] ? __might_fault+0xaf/0x130 [ 233.265922][ T7507] ? sctp_getsockopt+0x9b/0xb90 [ 233.265937][ T7507] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 233.265950][ T7507] do_sock_getsockopt+0x4aa/0x640 [ 233.265968][ T7507] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 233.265991][ T7507] ? __fget_files+0x3a2/0x420 [ 233.266000][ T7507] ? __fget_files+0x2a/0x420 [ 233.266014][ T7507] __x64_sys_getsockopt+0x1a4/0x240 [ 233.266033][ T7507] do_syscall_64+0x166/0x520 [ 233.266048][ T7507] ? trace_irq_disable+0x3b/0x140 [ 233.266061][ T7507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.266072][ T7507] ? clear_bhb_loop+0x70/0xc0 [ 233.266084][ T7507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.266094][ T7507] RIP: 0033:0x7f222799e159 [ 233.266106][ T7507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.266115][ T7507] RSP: 002b:00007f22287c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 233.266127][ T7507] RAX: ffffffffffffffda RBX: 00007f2227c25fa0 RCX: 00007f222799e159 [ 233.266135][ T7507] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 233.266141][ T7507] RBP: 00007f2227a3506b R08: 00002000000000c0 R09: 0000000000000000 [ 233.266214][ T7507] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 233.266222][ T7507] R13: 00007f2227c26038 R14: 00007f2227c25fa0 R15: 00007ffc4cd9ad78 [ 233.266245][ T7507] [ 235.360814][ T7533] FAULT_INJECTION: forcing a failure. [ 235.360814][ T7533] name failslab, interval 1, probability 0, space 0, times 0 [ 235.360847][ T7533] CPU: 0 UID: 0 PID: 7533 Comm: syz.1.470 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.360874][ T7533] Tainted: [L]=SOFTLOCKUP [ 235.360881][ T7533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.360906][ T7533] Call Trace: [ 235.360914][ T7533] [ 235.360923][ T7533] dump_stack_lvl+0xe8/0x150 [ 235.360955][ T7533] should_fail_ex+0x3eb/0x540 [ 235.360985][ T7533] should_failslab+0xa8/0x100 [ 235.361011][ T7533] __kmalloc_cache_noprof+0x9e/0x600 [ 235.361032][ T7533] ? j1939_netdev_start+0x217/0xb20 [ 235.361058][ T7533] ? j1939_netdev_start+0x217/0xb20 [ 235.361091][ T7533] j1939_netdev_start+0x217/0xb20 [ 235.361116][ T7533] ? dev_get_by_index+0x22/0x2d0 [ 235.361142][ T7533] j1939_sk_bind+0x946/0xc60 [ 235.361179][ T7533] __sys_bind+0x2e3/0x410 [ 235.361206][ T7533] ? __pfx___sys_bind+0x10/0x10 [ 235.361238][ T7533] ? rcu_is_watching+0x16/0xb0 [ 235.361280][ T7533] __x64_sys_bind+0x7a/0x90 [ 235.361304][ T7533] do_syscall_64+0x166/0x520 [ 235.361329][ T7533] ? trace_irq_disable+0x3b/0x140 [ 235.361354][ T7533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.361373][ T7533] ? clear_bhb_loop+0x70/0xc0 [ 235.361396][ T7533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.361415][ T7533] RIP: 0033:0x7fed0bb9e159 [ 235.361432][ T7533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.361448][ T7533] RSP: 002b:00007fed09df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 235.361469][ T7533] RAX: ffffffffffffffda RBX: 00007fed0be25fa0 RCX: 00007fed0bb9e159 [ 235.361482][ T7533] RDX: 0000000000000018 RSI: 0000200000000080 RDI: 0000000000000005 [ 235.361494][ T7533] RBP: 00007fed0bc3506b R08: 0000000000000000 R09: 0000000000000000 [ 235.361504][ T7533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.361514][ T7533] R13: 00007fed0be26038 R14: 00007fed0be25fa0 R15: 00007ffecc191b58 [ 235.361544][ T7533] [ 235.596469][ T7541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.652173][ T7535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.286374][ T7558] block device autoloading is deprecated and will be removed. [ 239.194346][ T5696] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 239.415646][ T5696] usb 5-1: Using ep0 maxpacket: 32 [ 239.416845][ T5696] usb 5-1: New USB device found: idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 239.423839][ T5696] usb 5-1: config 0 has no interfaces? [ 239.434163][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.434189][ T5696] usb 5-1: Product: syz [ 239.434202][ T5696] usb 5-1: Manufacturer: syz [ 239.434215][ T5696] usb 5-1: SerialNumber: syz [ 239.527622][ T5696] usb 5-1: config 0 descriptor?? [ 239.620095][ T7577] null_blk: disk nullb2 created [ 239.871938][ T7595] tipc: Enabling of bearer rejected, failed to enable media [ 239.973895][ T1220] usb 5-1: USB disconnect, device number 3 [ 240.039734][ T7583] loop1: detected capacity change from 0 to 2048 [ 240.288908][ T7583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.701291][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.518962][ T7480] syz.0.456 (7480) used greatest stack depth: 18952 bytes left [ 251.135556][ T33] audit: type=1326 audit(1790147581.520:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.1.497" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed0bb9e159 code=0x0 [ 252.219691][ T7698] loop2: detected capacity change from 0 to 1024 [ 252.300998][ T7702] syzkaller0: entered promiscuous mode [ 252.301022][ T7702] syzkaller0: entered allmulticast mode [ 252.303809][ T7702] tipc: Started in network mode [ 252.303838][ T7702] tipc: Node identity 927558b820ad, cluster identity 4711 [ 252.330548][ T7702] tipc: Enabled bearer , priority 0 [ 252.393040][ T7701] tipc: Resetting bearer [ 252.404995][ T7698] udf: Unknown parameter './proc/thread-self/fail-nth' [ 252.420279][ T7698] FAULT_INJECTION: forcing a failure. [ 252.420279][ T7698] name failslab, interval 1, probability 0, space 0, times 0 [ 252.420313][ T7698] CPU: 0 UID: 0 PID: 7698 Comm: syz.2.508 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.420340][ T7698] Tainted: [L]=SOFTLOCKUP [ 252.420347][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.420358][ T7698] Call Trace: [ 252.420366][ T7698] [ 252.420374][ T7698] dump_stack_lvl+0xe8/0x150 [ 252.420408][ T7698] should_fail_ex+0x3eb/0x540 [ 252.420438][ T7698] should_failslab+0xa8/0x100 [ 252.420465][ T7698] __kvmalloc_node_noprof+0x171/0x820 [ 252.420488][ T7698] ? __kmalloc_cache_noprof+0x31c/0x600 [ 252.420509][ T7698] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 252.420537][ T7698] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 252.420573][ T7698] io_ring_ctx_alloc+0x1ad/0xb80 [ 252.420603][ T7698] ? io_prepare_config+0x8c8/0xc70 [ 252.420641][ T7698] io_uring_create+0x50/0x980 [ 252.420674][ T7698] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 252.420700][ T7698] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 252.420731][ T7698] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 252.420770][ T7698] ? __se_sys_pidfd_open+0x9b/0x260 [ 252.420793][ T7698] ? __pfx___se_sys_pidfd_open+0x10/0x10 [ 252.420828][ T7698] do_syscall_64+0x166/0x520 [ 252.420854][ T7698] ? trace_irq_disable+0x3b/0x140 [ 252.420878][ T7698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.420897][ T7698] ? clear_bhb_loop+0x70/0xc0 [ 252.420921][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.420940][ T7698] RIP: 0033:0x7f222799e159 [ 252.420958][ T7698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.420974][ T7698] RSP: 002b:00007f22287c8fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 252.420995][ T7698] RAX: ffffffffffffffda RBX: 00002000000000c0 RCX: 00007f222799e159 [ 252.421010][ T7698] RDX: 0000200000000640 RSI: 00002000000000c0 RDI: 0000000000000025 [ 252.421024][ T7698] RBP: 00007f2227a3506b R08: 0000000000000000 R09: 00007f22287c99c8 [ 252.421036][ T7698] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000640 [ 252.421049][ T7698] R13: 0000200000000000 R14: 0000200000000000 R15: 00007ffc4cd9ad78 [ 252.421080][ T7698] [ 252.572148][ T7704] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 252.605855][ T7704] pci 0000:00:07.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 252.624296][ T7704] pci 0000:00:07.0: BAR 0 [io 0xc0a0-0xc0bf] [ 252.624415][ T7704] pci 0000:00:07.0: BAR 1 [mem 0xfe802000-0xfe80203f] [ 252.692528][ T7704] pci 0000:00:07.0: BAR 1 [mem 0xc0000000-0xc000003f]: assigned [ 252.700197][ T7704] pci 0000:00:07.0: BAR 0 [io 0x1000-0x101f]: assigned [ 252.910730][ T7704] virtio-pci 0000:00:07.0: virtio_pci: leaving for legacy driver [ 253.340425][ T7701] tipc: Disabling bearer [ 253.442251][ T1220] tipc: Node number set to 3000522936 [ 256.070423][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.070459][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.658366][ T7739] syzkaller0: entered promiscuous mode [ 257.658389][ T7739] syzkaller0: entered allmulticast mode [ 257.683449][ T7744] Bluetooth: MGMT ver 1.23 [ 258.684209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!! [ 260.951834][ T7762] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 261.964405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 264.293301][ T7777] loop2: detected capacity change from 0 to 512 [ 264.296213][ T7777] EXT4-fs: Ignoring removed bh option [ 264.313521][ T7777] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 264.338555][ T7777] EXT4-fs (loop2): 1 truncate cleaned up [ 264.375526][ T7777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.770592][ T7789] loop4: detected capacity change from 0 to 128 [ 265.789981][ T7789] EXT4-fs (loop4): Test dummy encryption mode enabled [ 265.815283][ T7789] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 265.818929][ T7789] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 265.999606][ T7792] loop1: detected capacity change from 0 to 512 [ 266.654310][ T7777] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880776bac00 pfn:0x776ba [ 266.654338][ T7777] memcg:ffff8880758ed200 [ 266.654347][ T7777] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 266.654376][ T7777] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 266.654393][ T7777] raw: ffff8880776bac00 0000000000000000 00000001ffffffff ffff8880758ed200 [ 266.654403][ T7777] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 266.654418][ T7777] page_owner tracks the page as allocated [ 266.654426][ T7777] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 7777, tgid 7776 (syz.2.533), ts 266654262278 [ 266.654456][ T7777] post_alloc_hook+0x1f9/0x250 [ 266.654486][ T7777] get_page_from_freelist+0x2209/0x2280 [ 266.654503][ T7777] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 266.654522][ T7777] alloc_pages_mpol+0x21e/0x390 [ 266.654544][ T7777] alloc_pages_noprof+0xb1/0x2b0 [ 266.654565][ T7777] folio_alloc_noprof+0x1e/0x30 [ 266.654586][ T7777] filemap_alloc_folio_noprof+0x111/0x460 [ 266.654604][ T7777] page_cache_ra_order+0x569/0xee0 [ 266.654622][ T7777] do_sync_mmap_readahead+0x74b/0x960 [ 266.654642][ T7777] filemap_fault+0x7ef/0x13b0 [ 266.654661][ T7777] __do_fault+0x138/0x2a0 [ 266.654676][ T7777] do_pte_missing+0x649/0x3570 [ 266.654701][ T7777] handle_mm_fault+0x1a53/0x3750 [ 266.654721][ T7777] do_user_addr_fault+0x7f6/0x1480 [ 266.654739][ T7777] exc_page_fault+0x6a/0xc0 [ 266.654762][ T7777] asm_exc_page_fault+0x26/0x30 [ 266.654778][ T7777] page last free pid 5605 tgid 5605 ts 266633943428 stack trace: [ 266.654792][ T7777] __free_frozen_pages+0xc93/0xd90 [ 266.654818][ T7777] __slab_free+0x269/0x2c0 [ 266.654835][ T7777] qlist_free_all+0x99/0x100 [ 266.654852][ T7777] kasan_quarantine_reduce+0x148/0x160 [ 266.654869][ T7777] __kasan_slab_alloc+0x22/0x80 [ 266.654898][ T7777] kmem_cache_alloc_noprof+0x2b4/0x600 [ 266.654924][ T7777] vm_area_alloc+0x24/0x140 [ 266.654948][ T7777] mmap_region+0x1827/0x2c60 [ 266.654969][ T7777] do_mmap+0xe0a/0x1300 [ 266.654989][ T7777] vm_mmap_pgoff+0x272/0x4e0 [ 266.655006][ T7777] do_syscall_64+0x166/0x520 [ 266.655030][ T7777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.655202][ T7777] ------------[ cut here ]------------ [ 266.655218][ T7777] kernel BUG at mm/filemap.c:859! [ 266.655250][ T7777] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 266.704162][ T7782] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888076feba80 pfn:0x76feb [ 266.704192][ T7782] memcg:ffff8880758ed200 [ 266.704200][ T7782] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 266.704224][ T7782] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 266.704242][ T7782] raw: ffff888076feba80 0000000000000000 00000001ffffffff ffff8880758ed200 [ 266.704251][ T7782] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 266.704262][ T7782] page_owner tracks the page as allocated [ 266.704275][ T7782] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 7782, tgid 7776 (syz.2.533), ts 266704106473 [ 266.704303][ T7782] post_alloc_hook+0x1f9/0x250 [ 266.704332][ T7782] get_page_from_freelist+0x2209/0x2280 [ 266.704350][ T7782] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 266.704368][ T7782] alloc_pages_mpol+0x21e/0x390 [ 266.704388][ T7782] alloc_pages_noprof+0xb1/0x2b0 [ 266.704409][ T7782] folio_alloc_noprof+0x1e/0x30 [ 266.704429][ T7782] filemap_alloc_folio_noprof+0x111/0x460 [ 266.704446][ T7782] page_cache_ra_order+0x569/0xee0 [ 266.704463][ T7782] do_sync_mmap_readahead+0x74b/0x960 [ 266.704483][ T7782] filemap_fault+0x7ef/0x13b0 [ 266.704500][ T7782] __do_fault+0x138/0x2a0 [ 266.704513][ T7782] do_pte_missing+0x21d2/0x3570 [ 266.704538][ T7782] handle_mm_fault+0x1a53/0x3750 [ 266.704559][ T7782] __get_user_pages+0x1669/0x26e0 [ 266.704575][ T7782] populate_vma_page_range+0x311/0x3f0 [ 266.704592][ T7782] __mm_populate+0x25f/0x390 [ 266.704607][ T7782] page last free pid 7792 tgid 7791 ts 266542246202 stack trace: [ 266.704619][ T7782] __free_frozen_pages+0xc93/0xd90 [ 266.704642][ T7782] __slab_free+0x269/0x2c0 [ 266.704657][ T7782] qlist_free_all+0x99/0x100 [ 266.704672][ T7782] kasan_quarantine_reduce+0x148/0x160 [ 266.704689][ T7782] __kasan_slab_alloc+0x22/0x80 [ 266.704714][ T7782] __kmalloc_node_track_caller_noprof+0x446/0x720 [ 266.704730][ T7782] kvasprintf+0xeb/0x1a0 [ 266.704754][ T7782] kasprintf+0xe2/0x140 [ 266.704776][ T7782] alloc_workqueue_noprof+0x12e/0x210 [ 266.704794][ T7782] ext4_fill_super+0x4d4b/0x6610 [ 266.704813][ T7782] get_tree_bdev_flags+0x430/0x4f0 [ 266.704831][ T7782] vfs_get_tree+0x92/0x2a0 [ 266.704847][ T7782] do_new_mount+0x319/0xdc0 [ 266.704871][ T7782] __se_sys_mount+0x31d/0x420 [ 266.704885][ T7782] do_syscall_64+0x166/0x520 [ 266.704908][ T7782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.705063][ T7782] ------------[ cut here ]------------ [ 266.705069][ T7782] kernel BUG at mm/filemap.c:859! [ 267.142083][ T7777] CPU: 0 UID: 0 PID: 7777 Comm: syz.2.533 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.152942][ T7777] Tainted: [L]=SOFTLOCKUP [ 267.157262][ T7777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.167300][ T7777] RIP: 0010:__filemap_add_folio+0x1236/0x13c0 [ 267.173366][ T7777] Code: a6 be ff 4c 89 ef 48 c7 c6 c0 27 19 8c e8 92 e2 1d ff 90 0f 0b e8 4a a6 be ff 4c 89 ef 48 c7 c6 80 1c 19 8c e8 7b e2 1d ff 90 <0f> 0b e8 33 a6 be ff 4c 89 ef 48 c7 c6 c0 27 19 8c e8 64 e2 1d ff [ 267.192966][ T7777] RSP: 0018:ffffc9000660f280 EFLAGS: 00010246 [ 267.199060][ T7777] RAX: e7ff116b0301cd00 RBX: 0000000000000000 RCX: 0000000000000046 [ 267.207303][ T7777] RDX: ffffc90005bb1000 RSI: ffffffff8e6b0b18 RDI: ffff8880281b1f40 [ 267.215281][ T7777] RBP: ffffc9000660f3f8 R08: ffff8880b8624ad3 R09: 1ffff110170c495a [ 267.223256][ T7777] R10: dffffc0000000000 R11: ffffed10170c495b R12: ffff8880266e4358 [ 267.231212][ T7777] R13: ffffea0001ddae80 R14: 0000000000000002 R15: dffffc0000000000 [ 267.239255][ T7777] FS: 00007f22287c96c0(0000) GS:ffff888124caf000(0000) knlGS:0000000000000000 [ 267.248182][ T7777] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.254750][ T7777] CR2: 00007f6422680178 CR3: 000000006697a000 CR4: 00000000003526f0 [ 267.262708][ T7777] Call Trace: [ 267.265974][ T7777] [ 267.268890][ T7777] ? __pfx___filemap_add_folio+0x10/0x10 [ 267.274527][ T7777] ? percpu_ref_put+0x19/0x180 [ 267.279272][ T7777] ? percpu_ref_put+0xf9/0x180 [ 267.284032][ T7777] filemap_add_folio+0x251/0x4e0 [ 267.288946][ T7777] page_cache_ra_order+0x6d1/0xee0 [ 267.294040][ T7777] do_sync_mmap_readahead+0x74b/0x960 [ 267.299418][ T7777] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 267.305307][ T7777] ? count_memcg_event_mm+0x1d/0x250 [ 267.310573][ T7777] ? count_memcg_event_mm+0x1d/0x250 [ 267.315853][ T7777] filemap_fault+0x7ef/0x13b0 [ 267.320529][ T7777] ? lock_acquire+0x115/0x350 [ 267.325193][ T7777] ? __pfx_filemap_fault+0x10/0x10 [ 267.330284][ T7777] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 267.335737][ T7777] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 267.341115][ T7777] ? lruvec_stat_mod_folio+0x28e/0x3e0 [ 267.346597][ T7777] ? pte_alloc_one+0x1e0/0x370 [ 267.351350][ T7777] __do_fault+0x138/0x2a0 [ 267.355700][ T7777] do_pte_missing+0x649/0x3570 [ 267.360465][ T7777] handle_mm_fault+0x1a53/0x3750 [ 267.365391][ T7777] ? handle_mm_fault+0xf1/0x3750 [ 267.370309][ T7777] ? __pfx_handle_mm_fault+0x10/0x10 [ 267.375625][ T7777] ? lock_mm_and_find_vma+0xa7/0x340 [ 267.380890][ T7777] do_user_addr_fault+0x7f6/0x1480 [ 267.385981][ T7777] exc_page_fault+0x6a/0xc0 [ 267.390466][ T7777] asm_exc_page_fault+0x26/0x30 [ 267.395378][ T7777] RIP: 0010:__put_user_4+0xd/0x30 [ 267.400389][ T7777] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 87 a3 03 00 90 90 90 90 90 90 90 90 90 90 [ 267.419977][ T7777] RSP: 0018:ffffc9000660fc98 EFLAGS: 00050202 [ 267.426029][ T7777] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000076f8 [ 267.433979][ T7777] RDX: 00000000085da2bd RSI: ffffffff8e6b0b18 RDI: ffffffff8c6dba80 [ 267.441933][ T7777] RBP: ffffc9000660feb0 R08: ffffffff8220cb9f R09: 0000000000000000 [ 267.449901][ T7777] R10: 00000000ffffff97 R11: 0000000000000002 R12: 1ffff92000cc1f9c [ 267.457879][ T7777] R13: 0000000004041c00 R14: 00002000000076c0 R15: 0000000000000171 [ 267.465858][ T7777] ? __might_fault+0xaf/0x130 [ 267.470628][ T7777] __sys_sendmmsg+0x2a7/0x4d0 [ 267.475293][ T7777] ? __pfx___sys_sendmmsg+0x10/0x10 [ 267.480474][ T7777] ? do_futex+0x3e7/0x4e0 [ 267.484787][ T7777] ? rcu_is_watching+0x16/0xb0 [ 267.489532][ T7777] __x64_sys_sendmmsg+0xa0/0xc0 [ 267.494381][ T7777] do_syscall_64+0x166/0x520 [ 267.498954][ T7777] ? trace_irq_disable+0x3b/0x140 [ 267.503966][ T7777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.510008][ T7777] ? clear_bhb_loop+0x70/0xc0 [ 267.514666][ T7777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.520536][ T7777] RIP: 0033:0x7f222799e159 [ 267.524929][ T7777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.544513][ T7777] RSP: 002b:00007f22287c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 267.552906][ T7777] RAX: ffffffffffffffda RBX: 00007f2227c25fa0 RCX: 00007f222799e159 [ 267.560855][ T7777] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000007 [ 267.568804][ T7777] RBP: 00007f2227a3506b R08: 0000000000000000 R09: 0000000000000000 [ 267.576796][ T7777] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000000 [ 267.584767][ T7777] R13: 00007f2227c26038 R14: 00007f2227c25fa0 R15: 00007ffc4cd9ad78 [ 267.592728][ T7777] [ 267.595769][ T7777] Modules linked in: [ 267.599699][ T7782] Oops: invalid opcode: 0000 [#2] SMP KASAN PTI [ 267.600445][ T7777] ---[ end trace 0000000000000000 ]--- [ 267.611407][ T7782] CPU: 1 UID: 0 PID: 7782 Comm: syz.2.533 Tainted: G D L syzkaller #0 PREEMPT(full) [ 267.622265][ T7782] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 267.627371][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.628556][ T7792] EXT4-fs error (device loop1): ext4_quota_enable:7260: inode #4: comm syz.1.529: casefold flag without casefold feature [ 267.628583][ T7792] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 267.640810][ T7792] EXT4-fs (loop1): Remounting filesystem read-only [ 267.640873][ T7792] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 267.641086][ T7792] EXT4-fs (loop1): mount failed [ 267.644039][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 267.644056][ C0] EXT4-fs (loop1): initial error at time 1790147597: ext4_quota_enable:7260: inode 4 [ 267.644093][ C0] EXT4-fs (loop1): last error at time 1790147597: ext4_quota_enable:7260: inode 4 [ 267.654438][ T7779] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 267.724236][ T7782] RIP: 0010:__filemap_add_folio+0x1236/0x13c0 [ 267.730332][ T7782] Code: a6 be ff 4c 89 ef 48 c7 c6 c0 27 19 8c e8 92 e2 1d ff 90 0f 0b e8 4a a6 be ff 4c 89 ef 48 c7 c6 80 1c 19 8c e8 7b e2 1d ff 90 <0f> 0b e8 33 a6 be ff 4c 89 ef 48 c7 c6 c0 27 19 8c e8 64 e2 1d ff [ 267.749936][ ** replaying previous printk message ** [ 267.749936][ T7782] RSP: 0018:ffffc90005b5f1e0 EFLAGS: 00010246 [ 267.750644][ T7777] RIP: 0010:__filemap_add_folio+0x1236/0x13c0 [ 267.750672][ T7777] Code: a6 be ff 4c 89 ef 48 c7 c6 c0 27 19 8c e8 92 e2 1d ff 90 0f 0b e8 4a a6 be ff 4c 89 ef 48 c7 c6 80 1c 19 8c e8 7b e2 1d ff 90 <0f> 0b e8 33 a6 be ff 4c 89 ef 48 c7 c6 c0 27 19 8c e8 64 e2 1d ff [ 267.750688][ T7777] RSP: 0018:ffffc9000660f280 EFLAGS: 00010246 [ 267.750704][ T7777] RAX: e7ff116b0301cd00 RBX: 0000000000000000 RCX: 0000000000000046 [ 267.750717][ T7777] RDX: ffffc90005bb1000 RSI: ffffffff8e6b0b18 RDI: ffff8880281b1f40 [ 267.750730][ T7777] RBP: ffffc9000660f3f8 R08: ffff8880b8624ad3 R09: 1ffff110170c495a [ 267.750750][ T7777] R10: dffffc0000000000 R11: ffffed10170c495b R12: ffff8880266e4358 [ 267.750764][ T7777] R13: ffffea0001ddae80 R14: 0000000000000002 R15: dffffc0000000000 [ 267.750778][ T7777] FS: 00007f22287c96c0(0000) GS:ffff888124caf000(0000) knlGS:0000000000000000 [ 267.750794][ T7777] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.750807][ T7777] CR2: 00007f6422680178 CR3: 000000006697a000 CR4: 00000000003526f0 [ 267.750826][ T7777] Kernel panic - not syncing: Fatal exception [ 267.862734][ T7777] Kernel Offset: disabled [ 267.867139][ T7777] Rebooting in 86400 seconds..