last executing test programs: 27.277184726s ago: executing program 1 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x64, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x10, 0x3, '123456789012'}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "00112233445566778899aabbccddeeff00112233"}}]}]}, 0x64}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x61) 23.396473694s ago: executing program 1 (id=446): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x3, @local, 0x2}], 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000500), 0x1000) 23.223512632s ago: executing program 1 (id=448): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1d, 0x46, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x80}, {}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x56}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x2}, @map_fd={0x18, 0x3}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @ringbuf_output], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x800, 0x137) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x7}]}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000002200)=""/4110, 0x30, 0x100e, 0x1}, 0x28) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xb, 0x12, r3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 20.799840371s ago: executing program 1 (id=454): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000100)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42c01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x4040}, 0xc080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0xeeee8000, 0x102000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19.844025419s ago: executing program 1 (id=457): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file2\x00', 0xc000, 0x3d) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x2001, 0x0, 0x2}, 0x30, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="3fabb368404c1b02f70a2e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2001, r5}, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f00000001c0)=0x9c) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x1e) 14.018949382s ago: executing program 0 (id=475): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000003000000040000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x30, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x12}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 13.581217854s ago: executing program 0 (id=478): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x40, 0x10, 0x945e, 0x82, 0x2, 0xe, &(0x7f0000000380)=':D'}) 13.492135149s ago: executing program 0 (id=481): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030313737372c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030352c756d61736b3d30303030303030303030303030303030303030343030302c646973636172642c646d61736b3d30303030303030303030303030303030303034303030322c7379735f747a2c756d61736b3d30303030303030303030303030303030303030303030372c696f636861727365743d64656661756c742c6b6565705f6c6173745f646f74732c6b6565705f6c6173745f646f74732c00d8d494a7ed573339bf43d2f13a6f3acb9d4078d2bcc6642aff3ab0d1d215d383f1702360c86701afc5718f3f600daf3ac125a832536b1bd8192ffa3985667ba63d71be0bf1c4f7585a3ca3e42dd8b5e6dc51932824c25f49f9d5bbcc"], 0x1, 0x156c, &(0x7f000001aa40)="$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") open(&(0x7f0000000000)='./file2\x00', 0x0, 0xa) 13.261231654s ago: executing program 0 (id=483): ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) r0 = memfd_create(0x0, 0x7) execveat(r0, 0x0, 0x0, 0x0, 0x1000) chown(0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r1, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000040)=0x2dff) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000340)={0x94d0, 0x1, [{0x1, 0x1}]}) write$dsp(0xffffffffffffffff, 0x0, 0x0) 10.962959918s ago: executing program 4 (id=494): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = getpid() syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000010880)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) statx(r2, 0x0, 0x100, 0x1, &(0x7f0000000740)) stat(&(0x7f0000000840)='./file0\x00', 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000c00)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r6, 0x9c3fa077fa966179, 0x0, 0x25dfdbfd, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 9.892238988s ago: executing program 3 (id=495): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x34}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmmsg$inet(r2, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="dfd54040a85f2e103c0ee24cdd5d9ccc1a300ab2deae", 0x16}, {&(0x7f00000001c0)="46f459560be78ecccf4f99f3aed0e94e50e77a150b07cd6fcd58aa5de92c6a1352062ca5bc4f9dcf308ed80e9552025d71eb96b20f671b7c16843c5ecd512c26978f80deba38d15ef66d7cdc78f124b0befda17978fbf28897296b47a3c8c04a8f70c246c271049dbcf279510293a5af0625d92f903fa0cabab37c262ffac264404826ebaba79ad89139eae2e80491ec27eca549d8af261cf552740e64af64c2a3e3ff6faf6354a0889d5763b45940", 0xaf}], 0x2, &(0x7f00000002c0)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x88, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x24, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x80}, {@broadcast, 0xfff}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0x4, [{@loopback, 0x6}, {@empty, 0x7ff}, {@multicast1, 0x27}, {@remote, 0x453d}, {@broadcast, 0x1000}, {@loopback, 0x4}, {@rand_addr=0x64010102, 0x5}, {@private=0xa010102, 0x200}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x3, 0x37}]}}}], 0xb8}}, {{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000400)="ebb4baaf15ab7976977602692ace75ca5eb1be64f21d7690341c156d25015ba030817993a37dd61e1e0761c4083e5989d6ee4f7d7db2005dc44380cec441ac507e9a55546212b52317610e2b243f65c6c9d9b5c2fcb29a0df5acf5ac8b253aaf8533bcbe8a3734e4ef09ebd659196a97b94c079f0647bebb2f74ae5b53dc05ad33b7edd2f79f42f75d484eca3d3a8657aa35e254068ebad133cf3c816741f6ca012a1918632cfa1e3de71230db6f92eb242c6f3a4923b3", 0xb7}], 0x1, &(0x7f0000000540)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f00000008c0), 0x0, 0x0, 0x30}}], 0x3, 0x8040) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) 9.395926347s ago: executing program 2 (id=497): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) getdents(r0, 0x0, 0x0) 9.393974978s ago: executing program 4 (id=498): syz_usb_connect$uac2(0x5, 0xa4, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0xd, 0x0, 0xb, {0x8, 0xb, 0x1, 0x1, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8001, 0x8, 0x1c, 0x7}, [@selector_unit={0x0, 0x24, 0xb, 0x10, 0x0, "08abf1298d"}, @source_unit={0x0, 0x24, 0xa, 0x97, 0x0, 0x8, 0x9, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x34, 0xff, 0xe, {0x8, 0x25, 0x1, 0x81, 0xc, 0x3, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xd2, 0x10, 0xfc, {0x8, 0x25, 0x1, 0x100, 0x30, 0x4, 0x7}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x31, 0x0, 0x0, [{0x0, &(0x7f0000000340)=@lang_id={0x0, 0x3, 0x340a}}, {0x0, &(0x7f0000000440)=@lang_id={0x0, 0x3, 0x41b}}, {0x0, &(0x7f0000000480)=@lang_id={0x0, 0x3, 0x2809}}]}) r0 = socket(0x10, 0x80000, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c90200000000", 0x59, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7fffffff}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = socket(0x10, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', r9, 0x29, 0x7e, 0x21, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x5}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r10) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r12, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0xffffff00}}, 0x10, 0x0}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = socket(0xa, 0x1, 0x0) r16 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r16, 0x400448c8, &(0x7f0000000180)={r15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xfc, 0xe4, 0x6, 0x5, 0xc3, 0x2, 0x7, 'syz1\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r14, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x20, r13, 0x10ada85e65c25041, 0x0, 0x0, {{0x67}, {@void, @val={0xc, 0x99, {0x9, 0xa}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x26000001) 9.300348134s ago: executing program 1 (id=499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02031b003000140006006332c5ab11c811"], 0x11fa) 9.175468439s ago: executing program 2 (id=500): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 8.928084228s ago: executing program 2 (id=501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x7fff, 0x5, 0x401, 0x7}, 0x4, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 8.866164035s ago: executing program 3 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0xe) setitimer(0x1, 0x0, &(0x7f0000000380)) r5 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888) 7.369666015s ago: executing program 3 (id=503): syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f00000000c0)=ANY=[], 0xfd, 0x10603, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x18b341, 0x84) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x82001, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 7.213083958s ago: executing program 2 (id=504): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ac0)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}], 0x18}, 0x0) 7.078277736s ago: executing program 2 (id=505): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x50, 0x21, 0x1, 0xffffffff, 0x4, {{@in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x80}}}, 0x50}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="0c81040080070000500012800e0001006970366772657461700000003c00028014000700000000000000000000000c000200000014000600fe88"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x24008004) 5.468197467s ago: executing program 4 (id=506): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 5.467980898s ago: executing program 4 (id=507): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x46) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x482, 0x0, 0xea0}, {0x487, 0x0, 0xc}]}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6020400) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x100081, 0x27, 0x2}, &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000000)) open(&(0x7f0000000000)='./file0\x00', 0x28901, 0x8) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_CLEAR_HALT(r7, 0x80045515, &(0x7f00000000c0)={0xd}) 3.101671701s ago: executing program 0 (id=508): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000ec0)={0x24, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "bcee2177"}]}}, 0x0}, 0x0) syz_usb_connect$uac2(0x2, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x71, &(0x7f00000004c0)=@string={0x71, 0x3, "3cd5b5d03c1f6bca1b9c2ae88b9a9791c943de06d2e08a396fc3468dabb864b0be11d46ca28945bbf978b3ea8ecba1b996f2a8689b2ef0bb240350e12d303272d1c16f2aa3f13b964771b6cbd484c1da15831873aee8e8233f90a9aa214835cec53475c7fee902fc1344d6cf91ce6c"}}]}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 339.907175ms ago: executing program 2 (id=509): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file2\x00', 0xc000, 0x3d) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x2001, 0x0, 0x2}, 0x30, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="3fabb368404c1b02f70a2e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2001, r5}, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f00000001c0)=0x9c) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x1e) 339.221755ms ago: executing program 3 (id=510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0xe) setitimer(0x1, 0x0, &(0x7f0000000380)) r5 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) 338.933185ms ago: executing program 4 (id=511): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x20004080}, 0x20008000) 257.445968ms ago: executing program 3 (id=512): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00003e3000/0x7000)=nil, 0x7000, 0x0, 0x400000000004, 0x100000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 45.165827ms ago: executing program 4 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0xe) setitimer(0x1, 0x0, &(0x7f0000000380)) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x888) 44.988897ms ago: executing program 3 (id=514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x7fff, 0x5, 0x401, 0x7}, 0x4, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 0s ago: executing program 0 (id=515): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440), 0x1, 0x48d, &(0x7f0000000c80)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.29' (ED25519) to the list of known hosts. [ 58.947264][ T4172] cgroup: Unknown subsys name 'net' [ 59.064146][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.508326][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.451504][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 62.499866][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 62.528117][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 62.595169][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 62.623940][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 62.673757][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.681145][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.689737][ T4185] device bridge_slave_0 entered promiscuous mode [ 62.724627][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.731793][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.740065][ T4188] device bridge_slave_0 entered promiscuous mode [ 62.747986][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.755040][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.762981][ T4185] device bridge_slave_1 entered promiscuous mode [ 62.777281][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.784499][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.792927][ T4190] device bridge_slave_0 entered promiscuous mode [ 62.803541][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.810739][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.818751][ T4188] device bridge_slave_1 entered promiscuous mode [ 62.840928][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.848029][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.855836][ T4190] device bridge_slave_1 entered promiscuous mode [ 62.905393][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.918630][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.930114][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.944211][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.951419][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.959554][ T4184] device bridge_slave_0 entered promiscuous mode [ 62.969224][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.980011][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.990826][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.012125][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.019461][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.027345][ T4184] device bridge_slave_1 entered promiscuous mode [ 63.059847][ T4190] team0: Port device team_slave_0 added [ 63.065944][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.073149][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.081345][ T4194] device bridge_slave_0 entered promiscuous mode [ 63.094978][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.102504][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.110691][ T4194] device bridge_slave_1 entered promiscuous mode [ 63.131270][ T4190] team0: Port device team_slave_1 added [ 63.139902][ T4188] team0: Port device team_slave_0 added [ 63.153867][ T4185] team0: Port device team_slave_0 added [ 63.167325][ T4185] team0: Port device team_slave_1 added [ 63.180157][ T4188] team0: Port device team_slave_1 added [ 63.194616][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.220990][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.228035][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.254177][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.267860][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.277221][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.284243][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.310401][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.323669][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.356504][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.366144][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.373725][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.399772][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.411325][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.418963][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.445571][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.470757][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.478054][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.505045][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.524057][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.531097][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.557236][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.580301][ T4184] team0: Port device team_slave_0 added [ 63.588270][ T4194] team0: Port device team_slave_0 added [ 63.613587][ T4194] team0: Port device team_slave_1 added [ 63.620600][ T4184] team0: Port device team_slave_1 added [ 63.639053][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.646018][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.672631][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.688675][ T4190] device hsr_slave_0 entered promiscuous mode [ 63.695419][ T4190] device hsr_slave_1 entered promiscuous mode [ 63.730578][ T4188] device hsr_slave_0 entered promiscuous mode [ 63.737408][ T4188] device hsr_slave_1 entered promiscuous mode [ 63.744146][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.752129][ T4188] Cannot create hsr debugfs directory [ 63.758043][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.764995][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.791185][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.818444][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.825412][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.851601][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.864607][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.871995][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.898236][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.924752][ T4185] device hsr_slave_0 entered promiscuous mode [ 63.932193][ T4185] device hsr_slave_1 entered promiscuous mode [ 63.939105][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.946674][ T4185] Cannot create hsr debugfs directory [ 63.994724][ T4184] device hsr_slave_0 entered promiscuous mode [ 64.001562][ T4184] device hsr_slave_1 entered promiscuous mode [ 64.008490][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.016078][ T4184] Cannot create hsr debugfs directory [ 64.067144][ T4194] device hsr_slave_0 entered promiscuous mode [ 64.074327][ T4194] device hsr_slave_1 entered promiscuous mode [ 64.081198][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.089110][ T4194] Cannot create hsr debugfs directory [ 64.138335][ T4191] Bluetooth: hci3: command 0x0409 tx timeout [ 64.138335][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 64.217934][ T1110] Bluetooth: hci0: command 0x0409 tx timeout [ 64.224038][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 64.236485][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 64.362424][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.373991][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.383646][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.393876][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.451148][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.461067][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.470780][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.487359][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.538993][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.548961][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.559732][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.589949][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.609556][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.628020][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.644776][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.670055][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.687005][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.711329][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.735078][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.752505][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.763733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.773830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.782421][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.794105][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.853844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.863380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.874538][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.881748][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.891814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.901600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.910541][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.917595][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.925861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.935440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.944899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.961820][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.978540][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.991128][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.004402][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.016284][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.024745][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.036997][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.046217][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.055186][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.078530][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.089643][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.103615][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.115694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.128985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.136755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.150632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.171225][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.199109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.213315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.224675][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.231802][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.245682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.254530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.267636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.276404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.285445][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.292559][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.301418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.311890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.321854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.340356][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.360643][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.367954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.375605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.385466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.396046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.405252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.414802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.424141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.432911][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.440071][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.455052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.463396][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.472466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.481798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.491185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.523438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.531226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.540704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.550515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.559708][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.566747][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.575995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.585247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.594254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.602914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.622677][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.643376][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.654265][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.672759][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.679891][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.688719][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.697463][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.706169][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.713378][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.722678][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.731658][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.740839][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.749845][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.758829][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.767223][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.775798][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.785065][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.797548][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.821474][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.838557][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.849213][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.865289][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.888054][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.914002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.929566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.953797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.964984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.973508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.982296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.991279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.000758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.010506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.019731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.028250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.036625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.046760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.066654][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.086138][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.098580][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.132323][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.148471][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.188953][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.196087][ T4250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.218229][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 66.224654][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 66.249907][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.277643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.286156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.298254][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 66.304466][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 66.323749][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.332664][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 66.391734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.401154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.410164][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.417247][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.426183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.435770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.444858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.454598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.463927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.473112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.482449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.490598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.500828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.525042][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.539560][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.551105][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.560176][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.569062][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.577629][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.586754][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.602940][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.614055][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.638454][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.647211][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.655832][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.664643][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.674877][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.683656][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.705308][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.720002][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.727924][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.735606][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.746141][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.754735][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.762998][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.776862][ T4190] device veth0_vlan entered promiscuous mode [ 66.787089][ T4188] device veth0_vlan entered promiscuous mode [ 66.825076][ T4190] device veth1_vlan entered promiscuous mode [ 66.835722][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.845993][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.856008][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.865627][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.874825][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.886051][ T4188] device veth1_vlan entered promiscuous mode [ 66.906303][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.915561][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.924670][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.957393][ T4194] device veth0_vlan entered promiscuous mode [ 66.971549][ T4184] device veth0_vlan entered promiscuous mode [ 66.980126][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.994719][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.003804][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.017134][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.025384][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.041950][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.052178][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.060393][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.074192][ T4194] device veth1_vlan entered promiscuous mode [ 67.087419][ T4184] device veth1_vlan entered promiscuous mode [ 67.115716][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.133335][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.141970][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.150996][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.159539][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.167454][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.175072][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.182846][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.191505][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.204973][ T4188] device veth0_macvtap entered promiscuous mode [ 67.218026][ T4190] device veth0_macvtap entered promiscuous mode [ 67.241384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.249823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.259948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.271439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.280145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.290185][ T4188] device veth1_macvtap entered promiscuous mode [ 67.305267][ T4194] device veth0_macvtap entered promiscuous mode [ 67.313052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.324113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.334032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.343779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.352941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.380804][ T4190] device veth1_macvtap entered promiscuous mode [ 67.390166][ T4194] device veth1_macvtap entered promiscuous mode [ 67.408610][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.420353][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.432530][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.441984][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.451160][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.460274][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.473297][ T4184] device veth0_macvtap entered promiscuous mode [ 67.483145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.491336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.500832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.510114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.519064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.527521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.536419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.545448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.555995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.564685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.579325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.587580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.596059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.604592][ T4185] device veth0_vlan entered promiscuous mode [ 67.621565][ T4184] device veth1_macvtap entered promiscuous mode [ 67.630691][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.642522][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.654776][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.673143][ T4185] device veth1_vlan entered promiscuous mode [ 67.681017][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.692017][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.702660][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.713201][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.729829][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.746364][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.757622][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.769434][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.776789][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.787488][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.795986][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.805899][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.814759][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.824744][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.833630][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.842489][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.863426][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.873999][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.884895][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.897552][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.909857][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.923323][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.932282][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.941591][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.950613][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.970699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.979610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.994884][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.007447][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.017390][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.028433][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.038523][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.049229][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.061528][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.073342][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.084134][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.094566][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.105854][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.116498][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.127939][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.140121][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.154922][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.171598][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.185199][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.194274][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.204304][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.213637][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.224742][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.233738][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.253139][ T4185] device veth0_macvtap entered promiscuous mode [ 68.263691][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.273276][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.283984][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.292816][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.302236][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 68.308642][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 68.321075][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.335043][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.344073][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.379471][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 68.385732][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 68.392218][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 68.398986][ T4185] device veth1_macvtap entered promiscuous mode [ 68.427197][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.435791][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.472637][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.482881][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.498912][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.509589][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.519740][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.530437][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.541085][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.553627][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.563739][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.574204][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.585609][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.606857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.624682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.638600][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.649183][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.661414][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.672324][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.683827][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.694581][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.706099][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.716829][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.728924][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.746931][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.756461][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.772678][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.783929][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.795407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.818348][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.827075][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.835877][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.844973][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.888270][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.896128][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.914455][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.974799][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.987557][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.017161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.091302][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.110703][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.349187][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.357057][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.377203][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.396274][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.406436][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.429840][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.514247][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.563161][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.572233][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.605301][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.617493][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.631381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.653174][ T4272] gadgetfs: bound to dummy_udc driver [ 69.667270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.714305][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.788553][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.800397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.919246][ T4285] udc-core: couldn't find an available UDC or it's busy [ 69.967581][ T4285] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 69.986557][ T4287] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.008940][ T4228] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 70.047896][ C1] gadgetfs: connected [ 70.054538][ T4228] gadgetfs: disconnected [ 70.141109][ T4287] Zero length message leads to an empty skb [ 70.298112][ C1] gadgetfs: connected [ 70.388895][ T1110] Bluetooth: hci3: command 0x0419 tx timeout [ 70.397141][ T4272] gadgetfs: suspended from state 3 [ 70.402650][ T1107] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.418204][ T1110] Bluetooth: hci4: command 0x0419 tx timeout [ 70.435334][ T4272] gadgetfs: disconnected [ 70.468854][ T4228] usb 1-1: unable to read config index 0 descriptor/all [ 70.486881][ T4228] usb 1-1: can't read configurations, error -71 [ 70.518530][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 70.524643][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 70.557779][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 70.734525][ T26] audit: type=1326 audit(1790362060.868:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.0.11" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986f4c1159 code=0x7ffc0000 [ 70.797907][ T1107] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 70.865516][ T4319] jffs2: notice: (4319) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 71.021545][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.028443][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.979106][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.998697][ T26] audit: type=1326 audit(1790362060.888:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.0.11" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986f4c1159 code=0x7ffc0000 [ 73.023967][ T26] audit: type=1326 audit(1790362060.888:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.0.11" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986f4c1159 code=0x7ffc0000 [ 73.086800][ T26] audit: type=1326 audit(1790362060.888:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.0.11" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f986f4c1159 code=0x7ffc0000 [ 73.113245][ T26] audit: type=1326 audit(1790362060.898:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.0.11" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986f4c1159 code=0x7ffc0000 [ 73.137750][ T26] audit: type=1326 audit(1790362060.898:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.0.11" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986f4c1159 code=0x7ffc0000 [ 73.165909][ T26] audit: type=1326 audit(1790362060.898:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.0.11" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986f4c1159 code=0x7ffc0000 [ 73.227978][ T1107] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 73.251597][ T1107] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 73.285168][ T4331] binder: BINDER_SET_CONTEXT_MGR already set [ 73.304784][ T1107] usb 4-1: config 0 descriptor?? [ 73.310937][ T26] audit: type=1326 audit(1790362060.898:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.0.11" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986f4c1159 code=0x7ffc0000 [ 73.341521][ T4331] binder: 4330:4331 ioctl 4018620d 200000004a80 returned -16 [ 73.349305][ T1107] usb 4-1: can't set config #0, error -71 [ 73.374019][ T1107] usb 4-1: USB disconnect, device number 2 [ 73.418193][ T26] audit: type=1326 audit(1790362060.898:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.0.11" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f986f4c1159 code=0x7ffc0000 [ 73.490284][ T26] audit: type=1326 audit(1790362060.898:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.0.11" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f986f4c1159 code=0x7ffc0000 [ 76.773627][ T4357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17'. [ 76.931128][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 77.185762][ T4371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.967892][ T4233] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.238127][ T4233] usb 2-1: Using ep0 maxpacket: 8 [ 79.368050][ T4233] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 79.389538][ T4233] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 79.539692][ T4233] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 79.731059][ T4233] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 79.875057][ T4233] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 80.026955][ T4233] usb 2-1: config 168 interface 0 has no altsetting 0 [ 80.168629][ T4233] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 80.332958][ T4233] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 80.536600][ T4233] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 80.681806][ T4233] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 80.897756][ T4233] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 81.010717][ T4233] usb 2-1: config 168 interface 0 has no altsetting 0 [ 81.127807][ T4233] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 81.154179][ T4466] capability: warning: `syz.0.36' uses deprecated v2 capabilities in a way that may be insecure [ 81.175216][ T4233] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 81.223994][ T4233] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 81.246054][ T4233] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 81.300337][ T4233] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 81.354203][ T4233] usb 2-1: config 168 interface 0 has no altsetting 0 [ 82.192120][ T4478] loop3: detected capacity change from 0 to 512 [ 82.247296][ T4233] usb 2-1: string descriptor 0 read error: -71 [ 82.273362][ T4233] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 82.299089][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.387848][ T4233] usb 2-1: can't set config #168, error -71 [ 82.413009][ T4233] usb 2-1: USB disconnect, device number 2 [ 82.581092][ T4494] loop1: detected capacity change from 0 to 256 [ 82.683020][ T4496] loop2: detected capacity change from 0 to 256 [ 82.739423][ T4494] ======================================================= [ 82.739423][ T4494] WARNING: The mand mount option has been deprecated and [ 82.739423][ T4494] and is ignored by this kernel. Remove the mand [ 82.739423][ T4494] option from the mount to silence this warning. [ 82.739423][ T4494] ======================================================= [ 82.767523][ T4492] loop0: detected capacity change from 0 to 8192 [ 82.807894][ T4478] EXT4-fs (loop3): Test dummy encryption mode enabled [ 82.816425][ T4478] EXT4-fs (loop3): Ignoring removed bh option [ 82.932582][ T4478] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.071665][ T4492] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 83.156377][ T4492] loop0: partition table partially beyond EOD, truncated [ 83.235336][ T4496] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 83.486816][ T4492] loop0: p1 start 100663296 is beyond EOD, truncated [ 83.496717][ T4478] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.549061][ T4492] loop0: p2 size 134217732 extends beyond EOD, truncated [ 83.624752][ T4496] attempt to access beyond end of device [ 83.624752][ T4496] loop2: rw=524288, want=34359738496, limit=256 [ 83.640098][ T4496] attempt to access beyond end of device [ 83.640098][ T4496] loop2: rw=0, want=34359738496, limit=256 [ 83.657416][ T4492] loop0: p4 size 14876672 extends beyond EOD, truncated [ 83.678008][ T26] kauditd_printk_skb: 84 callbacks suppressed [ 83.678021][ T26] audit: type=1800 audit(1790362073.808:96): pid=4496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.48" name="file1" dev="loop2" ino=1048591 res=0 errno=0 [ 83.701773][ T4496] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 83.743247][ T4492] loop0: p5 size 134217732 extends beyond EOD, truncated [ 83.751729][ T4496] exFAT-fs (loop2): Filesystem has been set read-only [ 83.779816][ T4478] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.40: inode has both inline data and extents flags [ 83.829598][ T4492] loop0: p6 size 14876672 extends beyond EOD, truncated [ 83.887654][ T4478] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.40: couldn't read orphan inode 15 (err -117) [ 83.959082][ T4478] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,init_itable=0x0000000000000001,test_dummy_encryption,nouid32,max_dir_size_kb=0x0000000000000003,bh,data=journal,,errors=continue. Quota mode: none. [ 84.364204][ T4506] udevd[4506]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 84.366258][ T4507] udevd[4507]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 84.599159][ T4528] process 'syz.0.59' launched './file1' with NULL argv: empty string added [ 84.642680][ T4505] udevd[4505]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 84.656938][ T4396] udevd[4396]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 84.674091][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 85.163385][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 85.180770][ T4507] udevd[4507]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 85.193810][ T4506] udevd[4506]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 85.219116][ T4396] udevd[4396]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 85.323427][ T4532] udevd[4532]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 86.325742][ T4551] loop3: detected capacity change from 0 to 512 [ 86.356151][ T4552] loop1: detected capacity change from 0 to 512 [ 86.389851][ T7] cfg80211: failed to load regulatory.db [ 86.430719][ T4551] EXT4-fs (loop3): Unrecognized mount option "smackfshat=ext4" or missing value [ 86.518194][ T4552] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 86.596642][ T4552] System zones: 1-12 [ 86.642232][ T4552] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.62: missing EA_INODE flag [ 86.719110][ T4552] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.62: error while reading EA inode 12 err=-117 [ 86.778342][ T4552] EXT4-fs (loop1): 1 orphan inode deleted [ 86.781703][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.797748][ T4552] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 86.971203][ T26] audit: type=1800 audit(1790362077.108:97): pid=4562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.62" name="file0" dev="loop1" ino=19 res=0 errno=0 [ 87.092385][ T4234] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.182173][ T21] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 87.223472][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.244784][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.284242][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 87.347876][ T4234] usb 3-1: Using ep0 maxpacket: 16 [ 87.377888][ T21] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 87.387189][ T21] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 88.188087][ T21] usb 4-1: Manufacturer: syz [ 88.197524][ T21] usb 4-1: config 0 descriptor?? [ 88.257885][ T4234] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.518324][ T4234] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.728031][ T4234] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.741848][ T21] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 88.800114][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.824586][ T21] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 88.899163][ T4234] usb 3-1: Product: syz [ 88.947732][ T4234] usb 3-1: Manufacturer: syz [ 88.973950][ T4617] loop0: detected capacity change from 0 to 256 [ 88.986669][ T4234] usb 3-1: SerialNumber: syz [ 89.009067][ T21] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 89.059966][ T4617] exfat: Deprecated parameter 'utf8' [ 89.069761][ T4617] exfat: Deprecated parameter 'utf8' [ 89.096644][ T4617] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 89.298158][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.338189][ T4234] usb 3-1: 0:2 : does not exist [ 89.393862][ T4234] usb 3-1: USB disconnect, device number 2 [ 89.475508][ T4551] loop3: detected capacity change from 0 to 512 [ 89.519980][ T4551] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.68: iget: bad i_size value: 38620345925642 [ 89.612485][ T4551] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.68: couldn't read orphan inode 15 (err -117) [ 89.631203][ T4551] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.656238][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.672573][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.716164][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.825502][ T4633] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.68: bg 0: block 5: invalid block bitmap [ 89.839124][ T21] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 89.859198][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.867221][ T21] usb 5-1: SerialNumber: syz [ 90.784718][ T4633] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 544 with error 28 [ 90.805146][ T4633] EXT4-fs (loop3): This should not happen!! Data will be lost [ 90.805146][ T4633] [ 90.815282][ T4633] EXT4-fs (loop3): Total free blocks count 0 [ 90.827818][ T4233] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 90.842290][ T4633] EXT4-fs (loop3): Free/Dirty block details [ 90.850741][ T4633] EXT4-fs (loop3): free_blocks=0 [ 90.878381][ T4633] EXT4-fs (loop3): dirty_blocks=548 [ 90.883615][ T4633] EXT4-fs (loop3): Block reservation details [ 90.889831][ T4633] EXT4-fs (loop3): i_reserved_data_blocks=548 [ 91.017816][ T4233] usb 4-1: device descriptor read/64, error -32 [ 91.070395][ T21] usb 5-1: 0:2 : does not exist [ 91.178002][ T21] usb 5-1: USB disconnect, device number 2 [ 92.575406][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.971729][ T4409] usb 4-1: USB disconnect, device number 3 [ 93.197912][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.273780][ T4730] loop3: detected capacity change from 0 to 256 [ 93.328836][ T4730] exfat: Deprecated parameter 'utf8' [ 93.382011][ T4730] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 93.623018][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.741556][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.782670][ T13] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.828237][ T4748] netlink: 36 bytes leftover after parsing attributes in process `syz.1.98'. [ 93.853000][ T13] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.893470][ T13] usb 5-1: New USB device found, idVendor=0135, idProduct=0000, bcdDevice= 0.00 [ 93.946419][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.027729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 95.857673][ C0] sched: RT throttling activated [ 95.907713][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #21a!!! [ 95.917715][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!! [ 95.927700][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!! [ 95.937701][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!! [ 95.947700][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 95.957719][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 95.967698][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 95.977702][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 95.987698][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!! [ 96.778153][ T13] usb 5-1: can't set config #1, error -71 [ 96.839095][ T13] usb 5-1: USB disconnect, device number 3 [ 98.047878][ T26] audit: type=1326 audit(1790362088.178:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4790 comm="syz.0.100" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f986f4c1159 code=0x0 [ 98.166150][ T4797] 9pnet: Insufficient options for proto=fd [ 100.046659][ T4809] loop2: detected capacity change from 0 to 16 [ 102.875072][ T26] audit: type=1400 audit(1790362093.008:99): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4810 comm="syz.3.109" [ 102.908175][ T4809] erofs: (device loop2): mounted with root inode @ nid 36. [ 104.269401][ T4814] loop4: detected capacity change from 0 to 4096 [ 104.903956][ T4814] EXT4-fs (loop4): Test dummy encryption mode enabled [ 104.946371][ T4814] EXT4-fs (loop4): inline encryption not supported [ 104.998246][ T4814] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 105.310734][ T4814] EXT4-fs: failed to create workqueue [ 105.423081][ T4814] EXT4-fs (loop4): mount failed [ 106.492188][ T4882] loop2: detected capacity change from 0 to 256 [ 106.896468][ T13] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 107.760799][ T4895] loop2: detected capacity change from 0 to 512 [ 107.840172][ T4895] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.126: iget: bad i_size value: 38620345925642 [ 107.855403][ T4895] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.126: couldn't read orphan inode 15 (err -117) [ 107.898204][ T4895] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.997911][ T13] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.847933][ T13] usb 4-1: not running at top speed; connect to a high speed hub [ 108.958194][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 109.039225][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 109.277985][ T13] usb 4-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40 [ 109.305164][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.335102][ T13] usb 4-1: Product: syz [ 109.347377][ T13] usb 4-1: Manufacturer: syz [ 109.361376][ T13] usb 4-1: SerialNumber: syz [ 109.458719][ T13] usb 4-1: can't set config #1, error -71 [ 109.478041][ T13] usb 4-1: USB disconnect, device number 4 [ 109.589323][ T4949] futex_wake_op: syz.4.135 tries to shift op by 144; fix this program [ 109.628213][ T4949] loop4: detected capacity change from 0 to 256 [ 111.261887][ T4949] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 111.311556][ T26] audit: type=1800 audit(1790362101.448:100): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.135" name="file1" dev="loop4" ino=1048594 res=0 errno=0 [ 112.363831][ T4965] Config c/1 of g1 needs at least one function. [ 112.371739][ T4965] udc dummy_udc.0: failed to start g1: -22 [ 113.770385][ T4972] loop4: detected capacity change from 0 to 512 [ 116.511213][ T5008] syz.2.145 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 117.258918][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.892067][ T5022] loop0: detected capacity change from 0 to 512 [ 118.080578][ T5026] usb usb5: usbfs: process 5026 (syz.4.153) did not claim interface 0 before use [ 118.147625][ T5022] EXT4-fs (loop0): Test dummy encryption mode enabled [ 118.231786][ T5022] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.305956][ T5022] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 118.327460][ T5022] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.152: Corrupt directory, running e2fsck is recommended [ 118.356529][ T5022] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 118.366169][ T5022] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.152: corrupted in-inode xattr [ 118.635160][ T5022] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.152: couldn't read orphan inode 15 (err -117) [ 118.667906][ T13] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 118.681529][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.690192][ T13] usb 4-1: Product: syz [ 118.694460][ T13] usb 4-1: Manufacturer: syz [ 118.699510][ T13] usb 4-1: SerialNumber: syz [ 118.735146][ T5022] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,stripe=0x0000000000000009,jqfmt=vfsold,nolazytime,grpjquota=.data=journal,test_dummy_encryption=v1,barrier=0x0000000000001000,grpid,,,errors=continue. Quota mode: writeback. [ 118.768887][ T13] ums-karma 4-1:1.0: USB Mass Storage device detected [ 118.795513][ T13] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 118.795513][ T13] Please send a copy of this message to and [ 118.939951][ T5034] loop1: detected capacity change from 0 to 4096 [ 118.950697][ T5034] EXT4-fs (loop1): Test dummy encryption mode enabled [ 118.977431][ T5034] EXT4-fs (loop1): inline encryption not supported [ 118.987447][ T5034] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 119.062825][ T5034] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 119.097521][ T13] ums-karma: probe of 4-1:1.0 failed with error -5 [ 119.162266][ T5041] loop0: detected capacity change from 0 to 256 [ 119.170381][ T5041] exfat: Deprecated parameter 'utf8' [ 119.178683][ T13] usb 4-1: USB disconnect, device number 5 [ 119.213847][ T5041] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 119.686360][ T5047] loop2: detected capacity change from 0 to 2048 [ 119.945179][ T5050] netlink: 60 bytes leftover after parsing attributes in process `syz.2.158'. [ 119.955959][ T5050] netlink: 'syz.2.158': attribute type 12 has an invalid length. [ 119.963843][ T5050] netlink: 'syz.2.158': attribute type 29 has an invalid length. [ 119.971604][ T5050] netlink: 'syz.2.158': attribute type 1 has an invalid length. [ 119.979324][ T5050] netlink: 'syz.2.158': attribute type 2 has an invalid length. [ 119.986973][ T5050] netlink: 220 bytes leftover after parsing attributes in process `syz.2.158'. [ 119.996564][ T5050] bridge0: port 1(bridge_slave_0) entered learning state [ 120.743330][ T4396] loop2: p1 < > p4 [ 120.743330][ T4396] p4: [ 120.950285][ T4396] loop2: p4 size 722688 extends beyond EOD, truncated [ 121.024198][ T5047] loop2: p1 < > p4 [ 121.024198][ T5047] p4: [ 121.033034][ T5047] loop2: p4 size 722688 extends beyond EOD, truncated [ 123.263223][ T5089] syz.4.164 uses obsolete (PF_INET,SOCK_PACKET) [ 124.678981][ T5100] loop4: detected capacity change from 0 to 16 [ 124.860313][ T5100] erofs: (device loop4): mounted with root inode @ nid 36. [ 125.653504][ T5100] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 125.695578][ T4396] udevd[4396]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 125.710386][ T4530] udevd[4530]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 125.877111][ T4532] udevd[4532]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 125.932496][ T4396] udevd[4396]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 126.116569][ T5129] loop1: detected capacity change from 0 to 512 [ 126.616861][ T5136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 127.411078][ T5146] usb usb5: usbfs: process 5146 (syz.2.174) did not claim interface 0 before use [ 129.224888][ T4191] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 129.734606][ T4191] usb 4-1: Using ep0 maxpacket: 16 [ 129.799751][ T5151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 129.903196][ T4191] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 129.920426][ T4191] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.961673][ T4191] usb 4-1: config 0 has no interface number 0 [ 130.024641][ T5151] device hsr_slave_1 left promiscuous mode [ 130.173249][ T4191] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 130.192773][ T4191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.208094][ T4191] usb 4-1: Product: syz [ 130.212291][ T4191] usb 4-1: Manufacturer: syz [ 130.237492][ T4191] usb 4-1: SerialNumber: syz [ 130.262196][ T4191] usb 4-1: config 0 descriptor?? [ 130.802586][ T5172] loop3: detected capacity change from 0 to 512 [ 131.205871][ T5172] EXT4-fs (loop3): 1 truncate cleaned up [ 131.321477][ T5172] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.461410][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.468202][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.668402][ T4191] usb 4-1: USB disconnect, device number 6 [ 133.381414][ T5215] loop3: detected capacity change from 0 to 512 [ 134.772744][ T21] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 135.164328][ T21] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.784675][ T5228] FAULT_INJECTION: forcing a failure. [ 135.784675][ T5228] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 135.798153][ T5228] CPU: 0 PID: 5228 Comm: syz.1.190 Not tainted syzkaller #0 [ 135.805478][ T5228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.815555][ T5228] Call Trace: [ 135.818854][ T5228] [ 135.821809][ T5228] dump_stack_lvl+0x188/0x250 [ 135.826536][ T5228] ? show_regs_print_info+0x20/0x20 [ 135.831760][ T5228] ? load_image+0x410/0x410 [ 135.836306][ T5228] ? __lock_acquire+0x7b50/0x7b50 [ 135.841366][ T5228] should_fail+0x383/0x4b0 [ 135.845814][ T5228] strncpy_from_user+0x32/0x350 [ 135.850690][ T5228] getname_flags+0xf2/0x4f0 [ 135.855229][ T5228] do_sys_openat2+0xdd/0x500 [ 135.859848][ T5228] ? __lock_acquire+0x7b50/0x7b50 [ 135.864898][ T5228] ? do_sys_open+0xe0/0xe0 [ 135.869353][ T5228] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.875363][ T5228] ? lock_chain_count+0x20/0x20 [ 135.880240][ T5228] __x64_sys_openat+0x135/0x160 [ 135.885128][ T5228] do_syscall_64+0x4c/0xa0 [ 135.889610][ T5228] ? clear_bhb_loop+0x30/0x80 [ 135.894303][ T5228] ? clear_bhb_loop+0x30/0x80 [ 135.899009][ T5228] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.904936][ T5228] RIP: 0033:0x7f44b1f9a159 [ 135.909371][ T5228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.929084][ T5228] RSP: 002b:00007f44b01d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.937532][ T5228] RAX: ffffffffffffffda RBX: 00007f44b2222090 RCX: 00007f44b1f9a159 [ 135.945536][ T5228] RDX: 0000000000000400 RSI: 0000200000000ac0 RDI: ffffffffffffff9c [ 135.953543][ T5228] RBP: 00007f44b203106b R08: 0000000000000000 R09: 0000000000000000 [ 135.961557][ T5228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.969555][ T5228] R13: 00007f44b2222128 R14: 00007f44b2222090 R15: 00007ffc923215e8 [ 135.977566][ T5228] [ 136.092820][ T5215] EXT4-fs: failed to create workqueue [ 136.098285][ T5215] EXT4-fs (loop3): mount failed [ 136.367484][ T5232] fido_id[5232]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 136.396031][ T5235] usb usb5: usbfs: process 5235 (syz.3.191) did not claim interface 0 before use [ 136.907594][ T5245] loop2: detected capacity change from 0 to 1024 [ 137.064717][ T5245] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.184438][ T5253] loop1: detected capacity change from 0 to 512 [ 138.383650][ T5269] loop4: detected capacity change from 0 to 512 [ 138.568179][ T5269] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.584428][ T5277] loop0: detected capacity change from 0 to 256 [ 138.664034][ T5284] loop1: detected capacity change from 0 to 256 [ 138.795849][ T5284] FAT-fs (loop1): Directory bread(block 1285) failed [ 138.817820][ T5284] FAT-fs (loop1): Directory bread(block 1286) failed [ 138.836303][ T5284] FAT-fs (loop1): Directory bread(block 1287) failed [ 138.869920][ T5284] FAT-fs (loop1): Directory bread(block 1288) failed [ 138.927339][ T5289] loop4: detected capacity change from 0 to 512 [ 138.992488][ T5291] loop2: detected capacity change from 0 to 256 [ 139.064404][ T5289] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,init_itable=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 139.097020][ T5289] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.177875][ T4234] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 139.427821][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 139.479254][ T5304] FAULT_INJECTION: forcing a failure. [ 139.479254][ T5304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.492559][ T5304] CPU: 1 PID: 5304 Comm: syz.3.210 Not tainted syzkaller #0 [ 139.499876][ T5304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.509959][ T5304] Call Trace: [ 139.513262][ T5304] [ 139.516242][ T5304] dump_stack_lvl+0x188/0x250 [ 139.520968][ T5304] ? show_regs_print_info+0x20/0x20 [ 139.526205][ T5304] ? load_image+0x410/0x410 [ 139.530749][ T5304] ? __lock_acquire+0x7b50/0x7b50 [ 139.535833][ T5304] should_fail+0x383/0x4b0 [ 139.540290][ T5304] strncpy_from_user+0x32/0x350 [ 139.545196][ T5304] getname_flags+0xf2/0x4f0 [ 139.549739][ T5304] do_sys_openat2+0xdd/0x500 [ 139.554375][ T5304] ? __lock_acquire+0x7b50/0x7b50 [ 139.559440][ T5304] ? do_sys_open+0xe0/0xe0 [ 139.563900][ T5304] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 139.569923][ T5304] ? lock_chain_count+0x20/0x20 [ 139.574823][ T5304] __x64_sys_openat+0x135/0x160 [ 139.579712][ T5304] do_syscall_64+0x4c/0xa0 [ 139.584165][ T5304] ? clear_bhb_loop+0x30/0x80 [ 139.588893][ T5304] ? clear_bhb_loop+0x30/0x80 [ 139.593609][ T5304] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.599536][ T5304] RIP: 0033:0x7fe48363e159 [ 139.603986][ T5304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.623622][ T5304] RSP: 002b:00007fe481875028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 139.632070][ T5304] RAX: ffffffffffffffda RBX: 00007fe4838c6090 RCX: 00007fe48363e159 [ 139.640073][ T5304] RDX: 0000000000000400 RSI: 0000200000000ac0 RDI: ffffffffffffff9c [ 139.648073][ T5304] RBP: 00007fe4836d506b R08: 0000000000000000 R09: 0000000000000000 [ 139.656075][ T5304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.664069][ T5304] R13: 00007fe4838c6128 R14: 00007fe4838c6090 R15: 00007ffcf73ecfd8 [ 139.672085][ T5304] [ 139.808528][ T4234] usb 2-1: unable to get BOS descriptor or descriptor too short [ 140.081650][ T4234] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.137939][ T4234] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 141.294223][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.302807][ T4234] usb 2-1: Product: syz [ 141.307606][ T4234] usb 2-1: Manufacturer: syz [ 141.312537][ T4234] usb 2-1: SerialNumber: syz [ 142.047606][ T4234] snd-usb-audio: probe of 2-1:1.0 failed with error -2 [ 142.055846][ T4234] usb 2-1: USB disconnect, device number 3 [ 142.098917][ T5317] loop2: detected capacity change from 0 to 256 [ 142.708203][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.402669][ T5346] loop4: detected capacity change from 0 to 512 [ 143.653991][ T5348] usb usb5: usbfs: process 5348 (syz.4.220) did not claim interface 0 before use [ 143.686983][ T26] audit: type=1326 audit(1790362133.818:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.1.216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b1f9a159 code=0x7fc00000 [ 143.767385][ T26] audit: type=1326 audit(1790362133.818:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.1.216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f44b1f9a159 code=0x7fc00000 [ 143.877718][ T26] audit: type=1326 audit(1790362133.818:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.1.216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b1f9a159 code=0x7fc00000 [ 143.961486][ T4234] hid-generic 0006:2467:0008.0003: item fetching failed at offset 0/4 [ 143.987805][ T26] audit: type=1326 audit(1790362133.818:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.1.216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b1f9a159 code=0x7fc00000 [ 143.999682][ T4234] hid-generic: probe of 0006:2467:0008.0003 failed with error -22 [ 144.052491][ T26] audit: type=1326 audit(1790362133.828:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.1.216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b1f9a159 code=0x7fc00000 [ 144.165876][ T26] audit: type=1326 audit(1790362133.828:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.1.216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b1f9a159 code=0x7fc00000 [ 144.992328][ T26] audit: type=1326 audit(1790362133.828:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.1.216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b1f9a159 code=0x7fc00000 [ 145.017282][ T26] audit: type=1326 audit(1790362133.828:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.1.216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b1f9a159 code=0x7fc00000 [ 145.042936][ T26] audit: type=1326 audit(1790362133.828:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.1.216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b1f9a159 code=0x7fc00000 [ 145.067201][ T26] audit: type=1326 audit(1790362133.828:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5338 comm="syz.1.216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b1f9a159 code=0x7fc00000 [ 145.191505][ T5362] FAULT_INJECTION: forcing a failure. [ 145.191505][ T5362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.205314][ T5362] CPU: 1 PID: 5362 Comm: syz.1.223 Not tainted syzkaller #0 [ 145.205339][ T5362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.205350][ T5362] Call Trace: [ 145.205357][ T5362] [ 145.205365][ T5362] dump_stack_lvl+0x188/0x250 [ 145.205393][ T5362] ? show_regs_print_info+0x20/0x20 [ 145.205414][ T5362] ? load_image+0x410/0x410 [ 145.205438][ T5362] ? __lock_acquire+0x7b50/0x7b50 [ 145.205468][ T5362] should_fail+0x383/0x4b0 [ 145.205494][ T5362] strncpy_from_user+0x32/0x350 [ 145.205518][ T5362] getname_flags+0xf2/0x4f0 [ 145.205543][ T5362] do_sys_openat2+0xdd/0x500 [ 145.205562][ T5362] ? __lock_acquire+0x7b50/0x7b50 [ 145.205585][ T5362] ? do_sys_open+0xe0/0xe0 [ 145.205604][ T5362] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 145.205631][ T5362] ? lock_chain_count+0x20/0x20 [ 145.205658][ T5362] __x64_sys_openat+0x135/0x160 [ 145.205681][ T5362] do_syscall_64+0x4c/0xa0 [ 145.205700][ T5362] ? clear_bhb_loop+0x30/0x80 [ 145.205730][ T5362] ? clear_bhb_loop+0x30/0x80 [ 145.205752][ T5362] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.205774][ T5362] RIP: 0033:0x7f44b1f9a159 [ 145.205792][ T5362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.205808][ T5362] RSP: 002b:00007f44b01d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 145.205831][ T5362] RAX: ffffffffffffffda RBX: 00007f44b2222090 RCX: 00007f44b1f9a159 [ 145.205846][ T5362] RDX: 0000000000000400 RSI: 0000200000000ac0 RDI: ffffffffffffff9c [ 145.205860][ T5362] RBP: 00007f44b203106b R08: 0000000000000000 R09: 0000000000000000 [ 145.205873][ T5362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.205885][ T5362] R13: 00007f44b2222128 R14: 00007f44b2222090 R15: 00007ffc923215e8 [ 145.205913][ T5362] [ 147.155062][ T5385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 147.221153][ T5387] loop4: detected capacity change from 0 to 128 [ 148.308976][ T5387] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.335669][ T5387] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.371594][ T5387] fscrypt (loop4, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 148.735935][ T5406] usb usb5: usbfs: process 5406 (syz.1.237) did not claim interface 0 before use [ 149.145073][ T5408] loop3: detected capacity change from 0 to 1024 [ 149.324068][ T5408] EXT4-fs (loop3): inline encryption not supported [ 149.427416][ T5408] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #3: block 1: comm syz.3.235: lblock 1 mapped to illegal pblock 1 (length 1) [ 149.447336][ T5419] loop2: detected capacity change from 0 to 256 [ 149.485977][ T5408] EXT4-fs (loop3): Remounting filesystem read-only [ 149.504551][ T5408] __quota_error: 19 callbacks suppressed [ 149.504564][ T5408] Quota error (device loop3): write_blk: dquota write failed [ 149.543194][ T5408] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 149.638826][ T5408] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.235: Failed to acquire dquot type 0 [ 149.822248][ T5408] EXT4-fs (loop3): Remounting filesystem read-only [ 150.181467][ T5408] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.235: Freeing blocks not in datazone - block = 0, count = 4096 [ 150.287494][ T5408] EXT4-fs (loop3): Remounting filesystem read-only [ 150.305771][ T5408] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.235: Invalid inode bitmap blk 0 in block_group 0 [ 150.325989][ T5084] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 150.335574][ T5408] EXT4-fs (loop3): Remounting filesystem read-only [ 150.418791][ T5084] EXT4-fs (loop3): Remounting filesystem read-only [ 150.426171][ T5084] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 150.426807][ T5408] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 150.524132][ T5408] EXT4-fs (loop3): Remounting filesystem read-only [ 150.546836][ T5084] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:25: Failed to release dquot type 0 [ 150.580487][ T5408] EXT4-fs (loop3): 1 orphan inode deleted [ 150.586365][ T5408] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; abort,journal_ioprio=0x0000000000000002,grpquota,errors=remount-ro,auto_da_alloc,inlinecrypt,. Quota mode: writeback. [ 150.609249][ T5084] EXT4-fs (loop3): Remounting filesystem read-only [ 150.715063][ T5408] EXT4-fs error (device loop3): ext4_search_dir:1551: inode #2: block 16: comm syz.3.235: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 150.764570][ T5447] FAULT_INJECTION: forcing a failure. [ 150.764570][ T5447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.777820][ T5447] CPU: 0 PID: 5447 Comm: syz.1.245 Not tainted syzkaller #0 [ 150.785125][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.795196][ T5447] Call Trace: [ 150.798510][ T5447] [ 150.801454][ T5447] dump_stack_lvl+0x188/0x250 [ 150.806155][ T5447] ? show_regs_print_info+0x20/0x20 [ 150.811396][ T5447] ? load_image+0x410/0x410 [ 150.815924][ T5447] ? ___ratelimit+0x1/0x610 [ 150.820452][ T5447] should_fail+0x383/0x4b0 [ 150.824906][ T5447] _copy_from_user+0x2e/0x170 [ 150.829610][ T5447] __sys_connect+0x16d/0x450 [ 150.834222][ T5447] ? __sys_connect_file+0x170/0x170 [ 150.839499][ T5447] __x64_sys_connect+0x76/0x80 [ 150.844292][ T5447] do_syscall_64+0x4c/0xa0 [ 150.848732][ T5447] ? clear_bhb_loop+0x30/0x80 [ 150.853436][ T5447] ? clear_bhb_loop+0x30/0x80 [ 150.858142][ T5447] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.864075][ T5447] RIP: 0033:0x7f44b1f9a159 [ 150.868514][ T5447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.888143][ T5447] RSP: 002b:00007f44b01d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 150.896578][ T5447] RAX: ffffffffffffffda RBX: 00007f44b2222090 RCX: 00007f44b1f9a159 [ 150.904563][ T5447] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000007 [ 150.912552][ T5447] RBP: 00007f44b203106b R08: 0000000000000000 R09: 0000000000000000 [ 150.920559][ T5447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.928561][ T5447] R13: 00007f44b2222128 R14: 00007f44b2222090 R15: 00007ffc923215e8 [ 150.936566][ T5447] [ 151.282057][ T5408] EXT4-fs (loop3): Remounting filesystem read-only [ 152.526469][ T5459] usb usb5: usbfs: process 5459 (syz.0.252) did not claim interface 0 before use [ 152.591104][ T5468] loop3: detected capacity change from 0 to 256 [ 152.748454][ T5468] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 154.637757][ T4191] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 156.346051][ T5510] netlink: 27 bytes leftover after parsing attributes in process `syz.4.268'. [ 156.919820][ T5512] usb usb5: usbfs: process 5512 (syz.2.269) did not claim interface 0 before use [ 157.351569][ T5514] loop0: detected capacity change from 0 to 40427 [ 157.455735][ T5514] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 157.526548][ T5514] F2FS-fs (loop0): invalid crc value [ 157.576854][ T5514] F2FS-fs (loop0): Found nat_bits in checkpoint [ 157.729734][ T5524] loop2: detected capacity change from 0 to 2048 [ 157.781830][ T5524] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.827238][ T5514] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 157.859675][ T5524] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.130133][ T5532] FAULT_INJECTION: forcing a failure. [ 158.130133][ T5532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.143384][ T5532] CPU: 0 PID: 5532 Comm: syz.1.274 Not tainted syzkaller #0 [ 158.150706][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.160772][ T5532] Call Trace: [ 158.164072][ T5532] [ 158.167012][ T5532] dump_stack_lvl+0x188/0x250 [ 158.171707][ T5532] ? show_regs_print_info+0x20/0x20 [ 158.176932][ T5532] ? load_image+0x410/0x410 [ 158.181457][ T5532] ? __lock_acquire+0x7b50/0x7b50 [ 158.186535][ T5532] should_fail+0x383/0x4b0 [ 158.190981][ T5532] _copy_from_user+0x2e/0x170 [ 158.195672][ T5532] __sys_connect+0x16d/0x450 [ 158.200303][ T5532] ? __sys_connect_file+0x170/0x170 [ 158.205639][ T5532] __x64_sys_connect+0x76/0x80 [ 158.210430][ T5532] do_syscall_64+0x4c/0xa0 [ 158.214865][ T5532] ? clear_bhb_loop+0x30/0x80 [ 158.219591][ T5532] ? clear_bhb_loop+0x30/0x80 [ 158.224293][ T5532] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.230204][ T5532] RIP: 0033:0x7f44b1f9a159 [ 158.234637][ T5532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.254258][ T5532] RSP: 002b:00007f44b01d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 158.262703][ T5532] RAX: ffffffffffffffda RBX: 00007f44b2222090 RCX: 00007f44b1f9a159 [ 158.270708][ T5532] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000007 [ 158.278712][ T5532] RBP: 00007f44b203106b R08: 0000000000000000 R09: 0000000000000000 [ 158.286698][ T5532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.294764][ T5532] R13: 00007f44b2222128 R14: 00007f44b2222090 R15: 00007ffc923215e8 [ 158.302776][ T5532] [ 158.363193][ T4184] attempt to access beyond end of device [ 158.363193][ T4184] loop0: rw=2049, want=45104, limit=40427 [ 158.957755][ T1110] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.150747][ T5535] loop1: detected capacity change from 0 to 256 [ 159.327993][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.377724][ T1110] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 159.407794][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.425801][ T5497] ODEBUG: Out of memory. ODEBUG disabled [ 159.468750][ T1110] usb 3-1: config 0 descriptor?? [ 159.917753][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.968814][ T1110] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 160.197769][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 160.224586][ T1110] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input5 [ 160.358061][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.468318][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.538412][ T23] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 160.728401][ T23] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 160.841208][ T23] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 160.979101][ T23] usb 2-1: Manufacturer: syz [ 161.218250][ T1110] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 161.738920][ T26] audit: type=1326 audit(1790362151.868:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b1f9a159 code=0x7ffc0000 [ 163.018009][ T26] audit: type=1326 audit(1790362152.378:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b1f9a159 code=0x7ffc0000 [ 163.072590][ T26] audit: type=1326 audit(1790362152.678:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44b1f9a159 code=0x7ffc0000 [ 163.100132][ T13] usb 3-1: USB disconnect, device number 4 [ 163.206592][ T5562] usb usb5: usbfs: process 5562 (syz.0.283) did not claim interface 0 before use [ 163.305570][ T26] audit: type=1326 audit(1790362152.688:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b1f9a159 code=0x7ffc0000 [ 163.508213][ T5558] fido_id[5558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 163.812369][ T26] audit: type=1326 audit(1790362152.688:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44b1f9a159 code=0x7ffc0000 [ 163.959228][ T5568] loop4: detected capacity change from 0 to 256 [ 164.092810][ T26] audit: type=1326 audit(1790362152.688:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b1f9a159 code=0x7ffc0000 [ 164.119058][ T26] audit: type=1326 audit(1790362153.138:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f44b1f9a159 code=0x7ffc0000 [ 164.143830][ T26] audit: type=1326 audit(1790362153.138:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b1f9a159 code=0x7ffc0000 [ 164.168276][ T26] audit: type=1326 audit(1790362153.138:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b1f9a159 code=0x7ffc0000 [ 164.170562][ T5568] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 164.192373][ T26] audit: type=1326 audit(1790362153.148:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5536 comm="syz.1.277" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f44b1f9a159 code=0x7ffc0000 [ 164.289174][ T5485] logitech-hidpp-device 0003:046D:C082.0005: Device not connected [ 164.371495][ T23] usb 2-1: USB disconnect, device number 4 [ 164.415734][ T5581] loop3: detected capacity change from 0 to 256 [ 164.627880][ T4323] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 164.653149][ T5595] netlink: 'syz.2.293': attribute type 9 has an invalid length. [ 165.492645][ T5595] netlink: 'syz.2.293': attribute type 6 has an invalid length. [ 165.501002][ T5595] netlink: 'syz.2.293': attribute type 7 has an invalid length. [ 165.509003][ T5595] netlink: 'syz.2.293': attribute type 8 has an invalid length. [ 165.728183][ T4323] usb 5-1: too many configurations: 23, using maximum allowed: 8 [ 167.917920][ T4323] usb 5-1: unable to read config index 2 descriptor/all [ 167.933861][ T4323] usb 5-1: can't read configurations, error -71 [ 169.663774][ T5623] mmap: syz.2.299 (5623): VmData 175874048 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 169.827110][ T5634] loop4: detected capacity change from 0 to 512 [ 170.134725][ T5634] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.304: bad orphan inode 15 [ 170.335801][ T5634] ext4_test_bit(bit=14, block=5) = 0 [ 170.690987][ T5634] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 171.955917][ T5651] loop1: detected capacity change from 0 to 256 [ 178.525019][ T5689] loop1: detected capacity change from 0 to 256 [ 178.571681][ T5689] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.489532][ T5689] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 179.589636][ T5689] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 186.472867][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 186.517883][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 186.523964][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 186.530167][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 186.536337][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 187.401743][ T5766] loop2: detected capacity change from 0 to 128 [ 187.411968][ T5764] loop0: detected capacity change from 0 to 512 [ 187.681375][ T5764] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,. Quota mode: writeback. [ 187.882263][ T5764] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.210557][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 188.210571][ T26] audit: type=1800 audit(1790362178.348:141): pid=5764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.349" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 192.417948][ T4323] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 192.491984][ T5791] loop4: detected capacity change from 0 to 512 [ 192.740124][ T5791] EXT4-fs (loop4): 1 orphan inode deleted [ 192.762969][ T5791] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 192.796568][ T5791] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.863702][ T4323] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 192.872253][ T4323] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 192.921616][ T4323] usb 1-1: config 0 interface 0 has no altsetting 0 [ 193.060392][ T5821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.363'. [ 193.902848][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.917886][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.947752][ T4323] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 194.215014][ T5840] loop4: detected capacity change from 0 to 512 [ 194.295665][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 194.320178][ T4323] usb 1-1: config 0 descriptor?? [ 194.537843][ T4323] usb 1-1: can't set config #0, error -71 [ 194.569578][ T4323] usb 1-1: USB disconnect, device number 4 [ 194.789875][ T5830] loop2: detected capacity change from 0 to 131072 [ 195.562583][ T5830] F2FS-fs (loop2): invalid crc value [ 195.599453][ T5830] F2FS-fs (loop2): Found nat_bits in checkpoint [ 195.612169][ T5844] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 195.621952][ T5844] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 195.631490][ T5844] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 195.678267][ T26] audit: type=1800 audit(1790362185.748:142): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.372" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 195.739404][ T5844] syz.3.372 (5844) used greatest stack depth: 20736 bytes left [ 195.783634][ T5830] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 195.813538][ T5830] F2FS-fs (loop2): access invalid blkaddr:11220996 [ 195.820569][ T5830] CPU: 0 PID: 5830 Comm: syz.2.368 Not tainted syzkaller #0 [ 195.827883][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.837964][ T5830] Call Trace: [ 195.841274][ T5830] [ 195.844227][ T5830] dump_stack_lvl+0x188/0x250 [ 195.848968][ T5830] ? show_regs_print_info+0x20/0x20 [ 195.854231][ T5830] ? __rwlock_init+0x140/0x140 [ 195.859062][ T5830] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 195.864471][ T5830] f2fs_iget+0x1ed4/0x4bb0 [ 195.868934][ T5830] f2fs_lookup+0x466/0x970 [ 195.873378][ T5830] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 195.879497][ T5830] __lookup_slow+0x29d/0x410 [ 195.884114][ T5830] ? lookup_one_len+0x2d0/0x2d0 [ 195.889003][ T5830] ? down_read+0x1aa/0x2e0 [ 195.893449][ T5830] lookup_slow+0x53/0x70 [ 195.897723][ T5830] walk_component+0x314/0x460 [ 195.902451][ T5830] path_lookupat+0x148/0x420 [ 195.907074][ T5830] filename_lookup+0x21e/0x550 [ 195.911861][ T5830] ? __lock_acquire+0x7b50/0x7b50 [ 195.916903][ T5830] ? hashlen_string+0x110/0x110 [ 195.921818][ T5830] ? strncpy_from_user+0x1f4/0x350 [ 195.926969][ T5830] ? getname_flags+0x1f9/0x4f0 [ 195.931763][ T5830] user_path_at_empty+0x40/0x190 [ 195.936742][ T5830] path_setxattr+0xb3/0x290 [ 195.941284][ T5830] ? simple_xattr_list_add+0xf0/0xf0 [ 195.946738][ T5830] ? lock_chain_count+0x20/0x20 [ 195.951624][ T5830] __x64_sys_lsetxattr+0xb4/0xd0 [ 195.956581][ T5830] do_syscall_64+0x4c/0xa0 [ 195.961045][ T5830] ? clear_bhb_loop+0x30/0x80 [ 195.965751][ T5830] ? clear_bhb_loop+0x30/0x80 [ 195.970445][ T5830] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 195.976350][ T5830] RIP: 0033:0x7f07a98c4159 [ 195.980813][ T5830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.000462][ T5830] RSP: 002b:00007f07a7b1c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 196.008919][ T5830] RAX: ffffffffffffffda RBX: 00007f07a9b4bfa0 RCX: 00007f07a98c4159 [ 196.016921][ T5830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 196.024907][ T5830] RBP: 00007f07a995b06b R08: 0000000000000002 R09: 0000000000000000 [ 196.032900][ T5830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.040898][ T5830] R13: 00007f07a9b4c038 R14: 00007f07a9b4bfa0 R15: 00007ffdbe17e498 [ 196.048980][ T5830] [ 196.052690][ T5830] F2FS-fs (loop2): sanity_check_inode: inode (ino=8) extent info [14338, 0, 11206659] is incorrect, run fsck to fix [ 196.346689][ T5853] loop3: detected capacity change from 0 to 512 [ 199.071439][ T5853] EXT4-fs: failed to create workqueue [ 199.076853][ T5853] EXT4-fs (loop3): mount failed [ 199.250979][ T5866] loop4: detected capacity change from 0 to 256 [ 199.383924][ T5866] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d87, utbl_chksum : 0xe619d30d) [ 200.294338][ T5876] loop3: detected capacity change from 0 to 256 [ 200.443245][ T5876] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.561550][ T26] audit: type=1800 audit(1790362190.698:143): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.381" name="file1" dev="loop3" ino=1048610 res=0 errno=0 [ 202.456807][ T5909] loop0: detected capacity change from 0 to 256 [ 202.689848][ T5909] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 203.916975][ T5928] loop2: detected capacity change from 0 to 128 [ 203.981194][ T5928] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 204.182128][ T4463] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 205.368282][ T5914] loop3: detected capacity change from 0 to 40427 [ 205.459366][ T5947] loop2: detected capacity change from 0 to 256 [ 205.491025][ T5914] F2FS-fs (loop3): invalid crc value [ 205.577798][ T5914] F2FS-fs (loop3): Found nat_bits in checkpoint [ 205.937005][ T5959] loop1: detected capacity change from 0 to 16 [ 206.073311][ T5914] F2FS-fs (loop3): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 206.181914][ T5959] erofs: (device loop1): mounted with root inode @ nid 36. [ 206.224813][ T5959] attempt to access beyond end of device [ 206.224813][ T5959] loop1: rw=524288, want=1342177304, limit=16 [ 206.237841][ T5959] attempt to access beyond end of device [ 206.237841][ T5959] loop1: rw=0, want=1342177280, limit=16 [ 206.475170][ T5959] attempt to access beyond end of device [ 206.475170][ T5959] loop1: rw=524288, want=1342179832, limit=16 [ 206.637832][ T5951] attempt to access beyond end of device [ 206.637832][ T5951] loop1: rw=0, want=1342177280, limit=16 [ 206.650847][ T5951] attempt to access beyond end of device [ 206.650847][ T5951] loop1: rw=0, want=1342177280, limit=16 [ 206.663690][ T5959] attempt to access beyond end of device [ 206.663690][ T5959] loop1: rw=0, want=1342177280, limit=16 [ 206.676288][ T5959] attempt to access beyond end of device [ 206.676288][ T5959] loop1: rw=0, want=1342177280, limit=16 [ 206.688414][ T5959] attempt to access beyond end of device [ 206.688414][ T5959] loop1: rw=0, want=1342177280, limit=16 [ 206.700265][ T5959] attempt to access beyond end of device [ 206.700265][ T5959] loop1: rw=0, want=1342177280, limit=16 [ 206.732935][ T5951] attempt to access beyond end of device [ 206.732935][ T5951] loop1: rw=0, want=1342177280, limit=16 [ 206.769461][ T26] audit: type=1800 audit(1790362196.388:144): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.405" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 208.094459][ T5966] loop2: detected capacity change from 0 to 256 [ 208.205703][ T5966] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.346497][ T5966] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 208.475483][ T5966] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 210.152680][ T5987] loop3: detected capacity change from 0 to 256 [ 210.268038][ T5987] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 210.369975][ T26] audit: type=1800 audit(1790362200.508:145): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.411" name="file1" dev="loop3" ino=1048616 res=0 errno=0 [ 212.001138][ T6007] 9pnet_virtio: no channels available for device syz [ 212.051857][ T6016] loop4: detected capacity change from 0 to 16 [ 213.147675][ C0] hrtimer: interrupt took 64034 ns [ 213.171941][ T6016] erofs: (device loop4): mounted with root inode @ nid 36. [ 213.185045][ T6016] handle_bad_sector: 10 callbacks suppressed [ 213.185079][ T6016] attempt to access beyond end of device [ 213.185079][ T6016] loop4: rw=524288, want=1342177304, limit=16 [ 213.205432][ T6016] attempt to access beyond end of device [ 213.205432][ T6016] loop4: rw=0, want=1342177280, limit=16 [ 213.230237][ T6010] attempt to access beyond end of device [ 213.230237][ T6010] loop4: rw=524288, want=1342181128, limit=16 [ 213.242012][ T6010] attempt to access beyond end of device [ 213.242012][ T6010] loop4: rw=0, want=1342181104, limit=16 [ 213.253335][ T6010] attempt to access beyond end of device [ 213.253335][ T6010] loop4: rw=0, want=1342181104, limit=16 [ 213.279584][ T26] audit: type=1800 audit(1790362203.358:146): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.420" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 213.302025][ T6010] attempt to access beyond end of device [ 213.302025][ T6010] loop4: rw=524288, want=1342179832, limit=16 [ 214.269709][ T4441] Bluetooth: hci5: Frame reassembly failed (-84) [ 214.432883][ T6036] Bluetooth: hci5: Frame reassembly failed (-90) [ 216.229722][ T6053] device syzkaller0 entered promiscuous mode [ 216.353540][ T4353] Bluetooth: hci5: command 0x1003 tx timeout [ 216.387377][ T146] Bluetooth: hci5: sending frame failed (-49) [ 216.870323][ T6066] 9pnet_virtio: no channels available for device syz [ 217.132496][ T6070] loop1: detected capacity change from 0 to 16 [ 218.457816][ T4353] Bluetooth: hci5: command 0x1001 tx timeout [ 218.467056][ T146] Bluetooth: hci5: sending frame failed (-49) [ 220.537692][ T4353] Bluetooth: hci5: command 0x1009 tx timeout [ 225.587270][ T6100] loop0: detected capacity change from 0 to 512 [ 225.697773][ T6101] kvm: apic: phys broadcast and lowest prio [ 225.928991][ T6106] device syzkaller0 entered promiscuous mode [ 226.335458][ T6100] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 226.452374][ T6100] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.440: corrupted in-inode xattr [ 226.479103][ T6100] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.440: couldn't read orphan inode 15 (err -117) [ 226.493965][ T6100] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,jqfmt=vfsv0,resgid=0x0000000000000000,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,auto_da_alloc,errors=continue,,errors=continue. Quota mode: writeback. [ 226.775054][ T6121] IPv6: sit1: Disabled Multicast RS [ 226.829034][ T6115] loop1: detected capacity change from 0 to 16 [ 226.955595][ T6120] loop2: detected capacity change from 0 to 128 [ 228.075935][ T6115] erofs: (device loop1): mounted with root inode @ nid 36. [ 228.092277][ T6115] attempt to access beyond end of device [ 228.092277][ T6115] loop1: rw=524288, want=1342177304, limit=16 [ 228.104027][ T6115] attempt to access beyond end of device [ 228.104027][ T6115] loop1: rw=0, want=1342177280, limit=16 [ 228.115418][ T26] audit: type=1800 audit(1790362219.256:147): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.448" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 228.155706][ T6115] attempt to access beyond end of device [ 228.155706][ T6115] loop1: rw=524288, want=1342179832, limit=16 [ 228.179391][ T6120] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 228.230842][ T6120] EXT4-fs (loop2): Mount option "journal_path=./file0" incompatible with ext2 [ 228.447961][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.453'. [ 228.564580][ T6130] bridge1: port 1(erspan0) entered blocking state [ 228.620439][ T6130] bridge1: port 1(erspan0) entered disabled state [ 228.668073][ T6130] device erspan0 entered promiscuous mode [ 228.756338][ T6130] bridge1: port 1(erspan0) entered blocking state [ 228.762874][ T6130] bridge1: port 1(erspan0) entered forwarding state [ 228.932320][ T6131] device erspan0 left promiscuous mode [ 228.961359][ T6133] binder: 6132:6133 unknown command 1074553620 [ 228.989347][ T6131] bridge1: port 1(erspan0) entered disabled state [ 229.007689][ T6133] binder: 6132:6133 ioctl c0306201 200000000640 returned -22 [ 229.070596][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 229.164937][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.207480][ T6137] loop3: detected capacity change from 0 to 512 [ 229.296019][ T6137] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 229.317950][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.327235][ T6131] device bridge_slave_0 left promiscuous mode [ 229.406923][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.461646][ T6131] device bridge_slave_1 left promiscuous mode [ 229.515773][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.638856][ T6131] bond0: (slave bond_slave_0): Releasing backup interface [ 229.735638][ T6131] bond0: (slave bond_slave_1): Releasing backup interface [ 229.827775][ T4340] Bluetooth: hci5: Frame reassembly failed (-84) [ 229.837988][ T5087] Bluetooth: hci5: Frame reassembly failed (-84) [ 229.844421][ T4248] Bluetooth: hci5: Frame reassembly failed (-84) [ 229.885771][ T6142] Bluetooth: hci5: Frame reassembly failed (-90) [ 229.938406][ T6131] team0: Port device team_slave_0 removed [ 230.007208][ T6131] team0: Port device team_slave_1 removed [ 230.041855][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.109880][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.149227][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.194821][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.343797][ T6131] syz.0.453 (6131) used greatest stack depth: 20592 bytes left [ 230.417979][ T6123] loop4: detected capacity change from 0 to 40427 [ 230.435533][ T6147] device syzkaller0 entered promiscuous mode [ 230.482830][ T6123] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 230.514484][ T6123] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 230.575731][ T6123] F2FS-fs (loop4): invalid crc value [ 230.629206][ T6123] F2FS-fs (loop4): Found nat_bits in checkpoint [ 230.713092][ T6155] loop0: detected capacity change from 0 to 512 [ 230.890152][ T6140] loop3: detected capacity change from 0 to 40427 [ 230.921140][ T6155] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.956127][ T6140] F2FS-fs (loop3): invalid crc value [ 230.994219][ T6123] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 231.010079][ T6140] F2FS-fs (loop3): Found nat_bits in checkpoint [ 231.060968][ T6123] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 231.402708][ T6140] F2FS-fs (loop3): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 231.897809][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 231.916105][ T146] Bluetooth: hci5: sending frame failed (-49) [ 232.241929][ T6177] loop2: detected capacity change from 0 to 1024 [ 232.283504][ T6177] EXT4-fs (loop2): Ignoring removed bh option [ 232.312914][ T6177] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 232.341045][ T6177] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none. [ 233.977858][ T4353] Bluetooth: hci5: command 0x1001 tx timeout [ 233.984615][ T146] Bluetooth: hci5: sending frame failed (-49) [ 234.166642][ T6189] loop0: detected capacity change from 0 to 512 [ 234.204595][ T6189] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 234.255886][ T6189] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.471: bad orphan inode 131083 [ 234.282180][ T6189] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 234.342221][ T6189] EXT4-fs error (device loop0): ext4_generic_delete_entry:2731: inode #2: block 13: comm syz.0.471: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 234.470101][ T6189] EXT4-fs error (device loop0) in ext4_delete_entry:2802: Corrupt filesystem [ 234.580659][ T6193] device syzkaller0 entered promiscuous mode [ 234.937834][ T4353] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 235.013948][ T6202] loop0: detected capacity change from 0 to 256 [ 235.347838][ T4353] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.366788][ T4353] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 235.377033][ T4353] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.597811][ T4353] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 235.609095][ T4353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.618790][ T4353] usb 4-1: Product: syz [ 235.622983][ T4353] usb 4-1: Manufacturer: syz [ 235.627590][ T4353] usb 4-1: SerialNumber: syz [ 235.643237][ T4353] usb 4-1: config 0 descriptor?? [ 235.903455][ T4353] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 235.915597][ T4353] usb 4-1: No valid video chain found. [ 236.017718][ T21] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 236.045139][ T6215] loop0: detected capacity change from 0 to 256 [ 236.059750][ T23] Bluetooth: hci5: command 0x1009 tx timeout [ 236.088315][ T6215] exfat: Unknown parameter 'sys_tz' [ 236.367981][ T21] usb 5-1: not running at top speed; connect to a high speed hub [ 236.452699][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.465527][ T26] audit: type=1326 audit(1790362227.606:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.2.484" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a98c4159 code=0x7ffc0000 [ 236.487762][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 236.503968][ T21] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 236.519042][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.566279][ T26] audit: type=1326 audit(1790362227.656:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.2.484" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a98c4159 code=0x7ffc0000 [ 236.609813][ T21] usb 5-1: Found UVC 1.00 device (046d:0825) [ 236.620623][ T26] audit: type=1326 audit(1790362227.656:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.2.484" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a98c4159 code=0x7ffc0000 [ 236.656181][ T26] audit: type=1326 audit(1790362227.656:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.2.484" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f07a98c4159 code=0x7ffc0000 [ 236.680656][ T26] audit: type=1326 audit(1790362227.656:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.2.484" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a98c4159 code=0x7ffc0000 [ 236.714192][ T26] audit: type=1326 audit(1790362227.656:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.2.484" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f07a98c4159 code=0x7ffc0000 [ 236.739053][ T26] audit: type=1326 audit(1790362227.656:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.2.484" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f07a98c4159 code=0x7ffc0000 [ 236.818558][ T21] usb 5-1: Failed to query (GET_INFO) UVC control 1 on unit 1: 0 (exp. 1). [ 236.840102][ T6231] loop2: detected capacity change from 0 to 512 [ 237.036618][ T4234] usb 4-1: USB disconnect, device number 7 [ 237.258039][ T21] usb 5-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 237.296734][ T21] usb 5-1: No streaming interface found for terminal 2. [ 237.489285][ T21] usb 5-1: USB disconnect, device number 6 [ 238.521298][ T6255] loop3: detected capacity change from 0 to 512 [ 238.595838][ T6255] EXT4-fs (loop3): Ignoring removed orlov option [ 239.078994][ T6255] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,orlov,quota,bsddf,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 239.259569][ T6255] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.466853][ T6267] syz.4.494 (6267) used greatest stack depth: 17136 bytes left [ 239.822615][ T6271] loop2: detected capacity change from 0 to 1024 [ 239.878854][ T6271] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 239.933124][ T6271] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 239.966155][ T6271] EXT4-fs error (device loop2): ext4_get_journal_inode:5187: inode #5: comm syz.2.497: unexpected bad inode w/o EXT4_IGET_BAD [ 240.003855][ T6271] EXT4-fs (loop2): no journal found [ 240.013398][ T6271] EXT4-fs (loop2): can't get journal size [ 240.042976][ T6271] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 240.312339][ T6278] xt_hashlimit: size too large, truncated to 1048576 [ 240.417762][ T4409] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 240.990212][ T6286] device syzkaller0 entered promiscuous mode [ 242.157952][ T4409] usb 5-1: unable to get BOS descriptor or descriptor too short [ 242.237980][ T4409] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.267797][ T4409] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.458283][ T4409] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 242.490041][ T4409] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.512092][ T4409] usb 5-1: Product: syz [ 242.517314][ T4409] usb 5-1: Manufacturer: syz [ 242.547846][ T4409] usb 5-1: SerialNumber: syz [ 242.962449][ T6301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.505'. [ 242.985032][ T6301] device ip6gretap1 entered promiscuous mode [ 244.081609][ T6308] loop4: detected capacity change from 0 to 256 [ 244.166952][ T6308] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.235212][ T6308] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 244.315358][ T6308] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 246.696688][ T6315] Bluetooth: hci5: Frame reassembly failed (-90) [ 246.725708][ T4454] Bluetooth: hci5: Frame reassembly failed (-84) [ 249.088306][ T6311] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 249.114569][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 249.125523][ T146] Bluetooth: hci5: sending frame failed (-49) [ 249.278132][ T4409] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 249.310551][ T6322] mmap: syz.3.512 (6322) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 249.359662][ T4409] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 249.371040][ T4409] usb 5-1: USB disconnect, device number 7 [ 249.548762][ T6311] usb 1-1: unable to read config index 0 descriptor/all [ 249.555770][ T6311] usb 1-1: can't read configurations, error -71 [ 249.813719][ T6330] loop0: detected capacity change from 0 to 512 [ 250.319904][ T6330] ------------[ cut here ]------------ [ 250.387793][ T6330] EA inode 11 i_nlink=0 [ 250.388172][ T6330] WARNING: CPU: 1 PID: 6330 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4fe/0x560 [ 250.427773][ T6330] Modules linked in: [ 250.431729][ T6330] CPU: 1 PID: 6330 Comm: syz.0.515 Not tainted syzkaller #0 [ 250.463421][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.484692][ T6330] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560 [ 250.504925][ T6330] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 15 fe a1 ff 49 8b 34 24 48 c7 c7 00 9a 3d 8a 44 89 fa e8 72 ff 99 07 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 250.555263][ T6330] RSP: 0018:ffffc9000465f400 EFLAGS: 00010246 [ 250.575476][ T6330] RAX: 2f0be216a21da800 RBX: ffff8880751b5458 RCX: 0000000000080000 [ 250.596325][ T6330] RDX: ffffc90003e23000 RSI: 000000000000ebe7 RDI: 000000000000ebe8 [ 250.624858][ T6330] RBP: ffffc9000465f4f0 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 250.646784][ T6330] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff8880751b52a0 [ 250.665811][ T6330] R13: dffffc0000000000 R14: ffff8880751b5260 R15: 0000000000000000 [ 250.695020][ T6330] FS: 00007f986d7196c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 250.720851][ T6330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.742888][ T6330] CR2: 000000110c4269d6 CR3: 000000005e65a000 CR4: 00000000003506e0 [ 250.761448][ T6330] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 250.779886][ T6330] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.813152][ T6330] Call Trace: [ 250.816488][ T6330] [ 250.819816][ T6330] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 250.845950][ T6330] ? ext4_xattr_block_csum+0x560/0x560 [ 250.857149][ T6330] ? ext4_xattr_inode_dec_ref_all+0x932/0xf90 [ 250.875433][ T6330] ext4_xattr_inode_dec_ref_all+0x94c/0xf90 [ 250.892949][ T6330] ? errseq_check+0x3c/0x70 [ 250.897528][ T6330] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 250.923843][ T6330] ? __ext4_journal_ensure_credits+0x450/0x450 [ 250.937706][ T6330] ? ext4_get_inode_loc+0xf6/0x120 [ 250.942872][ T6330] ext4_xattr_delete_inode+0xada/0xca0 [ 250.967685][ T6330] ? ext4_expand_extra_isize_ea+0x18c0/0x18c0 [ 250.985074][ T6330] ext4_evict_inode+0xc0c/0x1050 [ 251.003293][ T6330] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 251.034550][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.052443][ T6330] ? do_raw_spin_unlock+0x11d/0x230 [ 251.058844][ T6330] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 251.066115][ T6330] evict+0x4b6/0x8b0 [ 251.070903][ T6330] ? proc_nr_inodes+0x320/0x320 [ 251.076894][ T6330] ? do_raw_spin_unlock+0x11d/0x230 [ 251.083929][ T6330] ? _raw_spin_unlock+0x24/0x40 [ 251.090093][ T6330] ? iput+0x6ea/0x880 [ 251.095091][ T6330] ext4_orphan_cleanup+0xc96/0x14f0 [ 251.101689][ T6330] ? _raw_write_unlock+0x24/0x40 [ 251.107955][ T6330] ? ext4_orphan_del+0xc90/0xc90 [ 251.114136][ T6330] ? errseq_check_and_advance+0x62/0x120 [ 251.137873][ T6330] ext4_fill_super+0x8c65/0x93f0 [ 251.150846][ T6330] ? format_decode+0x8b1/0x1330 [ 251.156920][ T6330] ? ext4_mount+0x40/0x40 [ 251.162254][ T6330] ? set_blocksize+0x1f1/0x360 [ 251.168242][ T6330] ? sb_set_blocksize+0xa5/0xe0 [ 251.174294][ T6330] mount_bdev+0x28a/0x3c0 [ 251.180221][ T6330] ? ext4_mount+0x40/0x40 [ 251.186131][ T6330] legacy_get_tree+0xe6/0x180 [ 251.188213][ T6311] Bluetooth: hci5: command 0x1001 tx timeout [ 251.196047][ T6330] ? ext4_errno_to_code+0x160/0x160 [ 251.197063][ T146] Bluetooth: hci5: sending frame failed (-49) [ 251.208245][ T6330] vfs_get_tree+0x88/0x270 [ 251.212808][ T6330] do_new_mount+0x247/0xa40 [ 251.231074][ T6330] __se_sys_mount+0x2e3/0x3d0 [ 251.235927][ T6330] ? __x64_sys_mount+0xc0/0xc0 [ 251.241130][ T6330] ? lockdep_hardirqs_on+0x94/0x140 [ 251.246438][ T6330] ? __x64_sys_mount+0x1c/0xc0 [ 251.251429][ T6330] do_syscall_64+0x4c/0xa0 [ 251.255943][ T6330] ? clear_bhb_loop+0x30/0x80 [ 251.261045][ T6330] ? clear_bhb_loop+0x30/0x80 [ 251.265914][ T6330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.272196][ T6330] RIP: 0033:0x7f986f4c23ca [ 251.277370][ T6330] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.305041][ T6330] RSP: 002b:00007f986d718e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 251.314181][ T6330] RAX: ffffffffffffffda RBX: 00007f986d718ee0 RCX: 00007f986f4c23ca [ 251.336426][ T6330] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f986d718ea0 [ 251.383106][ T6330] RBP: 0000200000000180 R08: 00007f986d718ee0 R09: 0000000000000000 [ 251.394879][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 251.406442][ T6330] R13: 00007f986d718ea0 R14: 000000000000048d R15: 0000200000000440 [ 251.416984][ T6330] [ 251.428477][ T6330] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 251.435776][ T6330] CPU: 1 PID: 6330 Comm: syz.0.515 Not tainted syzkaller #0 [ 251.443080][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.453170][ T6330] Call Trace: [ 251.456472][ T6330] [ 251.459422][ T6330] dump_stack_lvl+0x188/0x250 [ 251.464118][ T6330] ? show_regs_print_info+0x20/0x20 [ 251.469337][ T6330] ? load_image+0x410/0x410 [ 251.473872][ T6330] panic+0x2f8/0x850 [ 251.477793][ T6330] ? bpf_jit_dump+0xd0/0xd0 [ 251.482332][ T6330] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 251.488337][ T6330] __warn+0x248/0x2b0 [ 251.492347][ T6330] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 251.498346][ T6330] report_bug+0x1b9/0x2e0 [ 251.502706][ T6330] handle_bug+0x3a/0x70 [ 251.506896][ T6330] exc_invalid_op+0x16/0x40 [ 251.511421][ T6330] asm_exc_invalid_op+0x16/0x20 [ 251.516333][ T6330] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560 [ 251.522939][ T6330] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 15 fe a1 ff 49 8b 34 24 48 c7 c7 00 9a 3d 8a 44 89 fa e8 72 ff 99 07 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 251.542566][ T6330] RSP: 0018:ffffc9000465f400 EFLAGS: 00010246 [ 251.548657][ T6330] RAX: 2f0be216a21da800 RBX: ffff8880751b5458 RCX: 0000000000080000 [ 251.556643][ T6330] RDX: ffffc90003e23000 RSI: 000000000000ebe7 RDI: 000000000000ebe8 [ 251.564621][ T6330] RBP: ffffc9000465f4f0 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 251.572609][ T6330] R10: dffffc0000000000 R11: ffffed1017224f2c R12: ffff8880751b52a0 [ 251.580610][ T6330] R13: dffffc0000000000 R14: ffff8880751b5260 R15: 0000000000000000 [ 251.588620][ T6330] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 251.594289][ T6330] ? ext4_xattr_block_csum+0x560/0x560 [ 251.599763][ T6330] ? ext4_xattr_inode_dec_ref_all+0x932/0xf90 [ 251.605863][ T6330] ext4_xattr_inode_dec_ref_all+0x94c/0xf90 [ 251.611789][ T6330] ? errseq_check+0x3c/0x70 [ 251.616306][ T6330] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 251.621982][ T6330] ? __ext4_journal_ensure_credits+0x450/0x450 [ 251.628158][ T6330] ? ext4_get_inode_loc+0xf6/0x120 [ 251.633288][ T6330] ext4_xattr_delete_inode+0xada/0xca0 [ 251.638783][ T6330] ? ext4_expand_extra_isize_ea+0x18c0/0x18c0 [ 251.644878][ T6330] ext4_evict_inode+0xc0c/0x1050 [ 251.649845][ T6330] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 251.655765][ T6330] ? do_raw_spin_unlock+0x11d/0x230 [ 251.660974][ T6330] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 251.666879][ T6330] evict+0x4b6/0x8b0 [ 251.670817][ T6330] ? proc_nr_inodes+0x320/0x320 [ 251.675683][ T6330] ? do_raw_spin_unlock+0x11d/0x230 [ 251.680898][ T6330] ? _raw_spin_unlock+0x24/0x40 [ 251.685772][ T6330] ? iput+0x6ea/0x880 [ 251.689783][ T6330] ext4_orphan_cleanup+0xc96/0x14f0 [ 251.695006][ T6330] ? _raw_write_unlock+0x24/0x40 [ 251.699978][ T6330] ? ext4_orphan_del+0xc90/0xc90 [ 251.704930][ T6330] ? errseq_check_and_advance+0x62/0x120 [ 251.710587][ T6330] ext4_fill_super+0x8c65/0x93f0 [ 251.715547][ T6330] ? format_decode+0x8b1/0x1330 [ 251.720453][ T6330] ? ext4_mount+0x40/0x40 [ 251.724802][ T6330] ? set_blocksize+0x1f1/0x360 [ 251.729587][ T6330] ? sb_set_blocksize+0xa5/0xe0 [ 251.734462][ T6330] mount_bdev+0x28a/0x3c0 [ 251.738805][ T6330] ? ext4_mount+0x40/0x40 [ 251.743164][ T6330] legacy_get_tree+0xe6/0x180 [ 251.747869][ T6330] ? ext4_errno_to_code+0x160/0x160 [ 251.753089][ T6330] vfs_get_tree+0x88/0x270 [ 251.757546][ T6330] do_new_mount+0x247/0xa40 [ 251.762083][ T6330] __se_sys_mount+0x2e3/0x3d0 [ 251.766793][ T6330] ? __x64_sys_mount+0xc0/0xc0 [ 251.771578][ T6330] ? lockdep_hardirqs_on+0x94/0x140 [ 251.776791][ T6330] ? __x64_sys_mount+0x1c/0xc0 [ 251.781574][ T6330] do_syscall_64+0x4c/0xa0 [ 251.786113][ T6330] ? clear_bhb_loop+0x30/0x80 [ 251.790806][ T6330] ? clear_bhb_loop+0x30/0x80 [ 251.795498][ T6330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.801430][ T6330] RIP: 0033:0x7f986f4c23ca [ 251.805869][ T6330] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.825505][ T6330] RSP: 002b:00007f986d718e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 251.833946][ T6330] RAX: ffffffffffffffda RBX: 00007f986d718ee0 RCX: 00007f986f4c23ca [ 251.841952][ T6330] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f986d718ea0 [ 251.849949][ T6330] RBP: 0000200000000180 R08: 00007f986d718ee0 R09: 0000000000000000 [ 251.857941][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 251.865923][ T6330] R13: 00007f986d718ea0 R14: 000000000000048d R15: 0000200000000440 [ 251.873955][ T6330] [ 251.877306][ T6330] Kernel Offset: disabled [ 251.881867][ T6330] Rebooting in 86400 seconds..