last executing test programs: 9.549921206s ago: executing program 0 (id=390): clock_settime(0x0, 0x0) r0 = gettid() shutdown(0xffffffffffffffff, 0x1) timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 8.512376514s ago: executing program 3 (id=391): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r1, 0x25, 0x2, @val=@netkit}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000002d80)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "e3ed5d", 0x2, 0x21, 0xff, @remote, @local, {[], {{0x4e21, 0x4e24, 0x4, 0x1, 0xa, 0x0, 0x0, 0x9, 0x3, "1cdb18", 0x9, "130b0f"}}}}}}}, 0x0) 7.692448986s ago: executing program 2 (id=393): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) syz_open_pts(r0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 7.49214306s ago: executing program 0 (id=394): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x40, 0x13, 0x2a, "fa0f2c899371f71841703e3a14f9d3dd64ce4fe2ec6b43fc301ff152db40a3a5b4613465c7adeb7bb273"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000540)={0x40, 0x14, 0x5, "a750b49294"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x2, 0xffffffffffffff58, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x200, &(0x7f0000000200)="00000000000100"/16) 7.417591063s ago: executing program 3 (id=395): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x1fe) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_clone(0x40005100, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.955818953s ago: executing program 2 (id=396): open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv(0xffffffffffffffff, &(0x7f0000003e40), 0x0, 0xb0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) signalfd4(r2, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) 6.593977615s ago: executing program 1 (id=397): r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESDEC], 0x31) 6.469113056s ago: executing program 3 (id=398): r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={0x40, 0x5, 0x1, '/'}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000140)="1125f1cc") syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000080)="62014d1f") syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b86, 0x0, {0x9, 0x21, 0x1, 0xc0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000440)="fb067a30") 6.435751522s ago: executing program 1 (id=399): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff00000007058102400000070502024000000705"], 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010000000000000040000008500000027000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="180000008b00000000000000ffffffff18110000", @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)={[{@data_err_ignore}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@noquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x200004}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@nodelalloc}]}, 0x1, 0x48d, &(0x7f0000000c80)="$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") 6.054956157s ago: executing program 2 (id=400): r0 = openat$kvm(0x0, &(0x7f00000025c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000100)={0x0, 0x1, 0x7ff, 0x0, 0x1}) ioctl$KDFONTOP_GET(r1, 0x560f, &(0x7f0000000040)={0x1, 0x1, 0x7, 0x2, 0x3effffff, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xa000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x39b3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) ioctl$int_in(r5, 0x5452, &(0x7f0000000540)=0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20) mlockall(0x7) personality(0x500006) 5.029311804s ago: executing program 0 (id=401): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff000000000900000085000000360000001801000020646c2500000000003020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000001700000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x23, &(0x7f0000000240)="0100400871a7832e6b7303c3cd59", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) getpid() creat(&(0x7f0000000140)='./bus\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000001ada04006b1171000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) mkdir(&(0x7f0000000240)='./file0\x00', 0xa2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) lchown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000100)='dvmrp0\x00') syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x5c, 0x70, 0xe5, 0x40, 0x22b8, 0x2d99, 0xfba5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x0, 0x12, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x42, 0x8a, 0x15, 0x2c}}]}}]}}, 0x0) 3.394416866s ago: executing program 2 (id=402): clock_settime(0x0, 0x0) r0 = gettid() shutdown(0xffffffffffffffff, 0x1) timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 2.841578431s ago: executing program 1 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000a20000/0x2000)=nil) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x64) pidfd_send_signal(r3, 0x21, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010003bd7000fcdb71c300000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 1.823207156s ago: executing program 1 (id=404): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) syz_open_pts(r0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.714945155s ago: executing program 2 (id=405): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) 1.540000375s ago: executing program 0 (id=406): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x90}, 0x80) syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230, 0x0, r2}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10093ea, 0x2000, 0x4003bfff, 0x40299, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.157241341s ago: executing program 3 (id=407): r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESDEC], 0x31) 1.018607525s ago: executing program 3 (id=408): open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv(0xffffffffffffffff, &(0x7f0000003e40), 0x0, 0xb0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) 819.15293ms ago: executing program 1 (id=409): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) 710.795558ms ago: executing program 1 (id=410): open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10004, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) dup3(r3, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6, 0x20}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x0, 0x8}, {0x0, 0x0, 0xfc}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x200}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffc}, {}, {}, {}, {0x2}]}}, @common=@unspec=@time={{0x38}, {0x4, 0xfffffffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@multicast2, @multicast1, 0xffffffff, 0xff000000, 'geneve1\x00', 'veth1_to_bridge\x00', {}, {}, 0x62, 0x0, 0x51}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffe, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) 657.539187ms ago: executing program 2 (id=411): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff00000007058102400000070502024000000705"], 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010000000000000040000008500000027000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="180000008b00000000000000ffffffff18110000", @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)={[{@data_err_ignore}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@noquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x200004}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@nodelalloc}]}, 0x1, 0x48d, &(0x7f0000000c80)="$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") 570.555742ms ago: executing program 0 (id=412): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0xc3, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 415.831039ms ago: executing program 0 (id=413): clock_settime(0x0, 0x0) r0 = gettid() shutdown(0xffffffffffffffff, 0x1) timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 0s ago: executing program 3 (id=414): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000a20000/0x2000)=nil) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x64) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010003bd7000fcdb71c300000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) kernel console output (not intermixed with test programs): promiscuous mode [ 89.738915][ T5773] hsr_slave_1: entered promiscuous mode [ 89.745370][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.753761][ T5773] Cannot create hsr debugfs directory [ 89.809882][ T5775] hsr_slave_0: entered promiscuous mode [ 89.817056][ T5775] hsr_slave_1: entered promiscuous mode [ 89.823566][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.831913][ T5775] Cannot create hsr debugfs directory [ 89.910965][ T5783] hsr_slave_0: entered promiscuous mode [ 89.917988][ T5783] hsr_slave_1: entered promiscuous mode [ 89.924365][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.932609][ T5783] Cannot create hsr debugfs directory [ 90.274328][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.292389][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.332244][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.343561][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.457004][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.470925][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.502630][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.517086][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.579743][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.613901][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.641500][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.653281][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.745328][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.755472][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.789454][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.801124][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.828788][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.857203][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.900760][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.908271][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.953489][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.961015][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.982676][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.040052][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.087734][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.095158][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.121323][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.128617][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.220438][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.308014][ T51] Bluetooth: hci2: command tx timeout [ 91.323809][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.344904][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.393880][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.401142][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.419878][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.427144][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.444450][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.467843][ T51] Bluetooth: hci0: command tx timeout [ 91.476825][ T51] Bluetooth: hci1: command tx timeout [ 91.479180][ T5790] Bluetooth: hci3: command tx timeout [ 91.551621][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.558859][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.609922][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.617275][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.643412][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.850130][ T5776] veth0_vlan: entered promiscuous mode [ 91.884789][ T5776] veth1_vlan: entered promiscuous mode [ 91.992475][ T5776] veth0_macvtap: entered promiscuous mode [ 92.012421][ T5776] veth1_macvtap: entered promiscuous mode [ 92.086289][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.100418][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.125562][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.152252][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.177986][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.201854][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.226694][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.360825][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.389221][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.452521][ T5775] veth0_vlan: entered promiscuous mode [ 92.485243][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.502590][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.588864][ T5783] veth0_vlan: entered promiscuous mode [ 92.595570][ T5775] veth1_vlan: entered promiscuous mode [ 92.606922][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.614822][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.651160][ T5773] veth0_vlan: entered promiscuous mode [ 92.660533][ T5783] veth1_vlan: entered promiscuous mode [ 92.715898][ T5773] veth1_vlan: entered promiscuous mode [ 92.815649][ T5773] veth0_macvtap: entered promiscuous mode [ 92.825565][ T5775] veth0_macvtap: entered promiscuous mode [ 92.835763][ T5783] veth0_macvtap: entered promiscuous mode [ 92.853706][ T5775] veth1_macvtap: entered promiscuous mode [ 92.867940][ T5773] veth1_macvtap: entered promiscuous mode [ 92.879273][ T5783] veth1_macvtap: entered promiscuous mode [ 92.924086][ T5840] FAULT_INJECTION: forcing a failure. [ 92.924086][ T5840] name failslab, interval 1, probability 0, space 0, times 1 [ 92.940135][ T5840] CPU: 0 PID: 5840 Comm: syz.1.2 Not tainted syzkaller #0 [ 92.944144][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.947327][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.947388][ T5840] Call Trace: [ 92.947398][ T5840] [ 92.947408][ T5840] dump_stack_lvl+0x18c/0x250 [ 92.947459][ T5840] ? show_regs_print_info+0x20/0x20 [ 92.947491][ T5840] ? load_image+0x420/0x420 [ 92.947520][ T5840] ? __might_sleep+0xe0/0xe0 [ 92.947551][ T5840] ? __lock_acquire+0x7d80/0x7d80 [ 92.947584][ T5840] should_fail_ex+0x394/0x4c0 [ 92.947620][ T5840] should_failslab+0x9/0x20 [ 92.947653][ T5840] slab_pre_alloc_hook+0x59/0x300 [ 92.947687][ T5840] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 92.947710][ T5840] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 92.947732][ T5840] __kmem_cache_alloc_node+0x53/0x250 [ 92.947771][ T5840] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 92.947794][ T5840] __kmalloc+0xa7/0x240 [ 92.947831][ T5840] tomoyo_realpath_from_path+0xe6/0x5c0 [ 92.947858][ T5840] ? tomoyo_domain+0xd6/0x120 [ 92.947889][ T5840] tomoyo_path_number_perm+0x248/0x5e0 [ 92.947922][ T5840] ? tomoyo_path_number_perm+0x217/0x5e0 [ 92.947955][ T5840] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 92.948003][ T5840] ? __lock_acquire+0x7d80/0x7d80 [ 92.975109][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.979743][ T5840] ? current_check_access_path+0x3b4/0x480 [ 92.979788][ T5840] ? lookup_one_qstr_excl+0x120/0x250 [ 92.993441][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.994307][ T5840] tomoyo_path_mkdir+0xb1/0xf0 [ 93.025444][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.030810][ T5840] ? tomoyo_path_unlink+0xf0/0xf0 [ 93.030855][ T5840] ? kern_path_create+0x50/0x50 [ 93.030891][ T5840] security_path_mkdir+0xe4/0x140 [ 93.030927][ T5840] do_mkdirat+0x162/0x450 [ 93.039494][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.041053][ T5840] ? vfs_mkdir+0x470/0x470 [ 93.052001][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.056960][ T5840] __x64_sys_mkdirat+0x89/0xa0 [ 93.057003][ T5840] do_syscall_64+0x55/0xb0 [ 93.057034][ T5840] ? clear_bhb_loop+0x40/0x90 [ 93.063592][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.068180][ T5840] ? clear_bhb_loop+0x40/0x90 [ 93.068226][ T5840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.082919][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.083348][ T5840] RIP: 0033:0x7f4167b9e159 [ 93.136025][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.136443][ T5840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.146419][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.150711][ T5840] RSP: 002b:00007f4168a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 93.150752][ T5840] RAX: ffffffffffffffda RBX: 00007f4167e25fa0 RCX: 00007f4167b9e159 [ 93.150769][ T5840] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 93.150784][ T5840] RBP: 00007f4167c3506b R08: 0000000000000000 R09: 0000000000000000 [ 93.150798][ T5840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.150811][ T5840] R13: 00007f4167e26038 R14: 00007f4167e25fa0 R15: 00007fff5c9f2598 [ 93.150842][ T5840] [ 93.174552][ T5840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.314494][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.325834][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.336068][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.351026][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.364487][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.387749][ T5790] Bluetooth: hci2: command tx timeout [ 93.413748][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.429303][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.442492][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.462979][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.479078][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.494724][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.509091][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.523814][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.543805][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.549221][ T5790] Bluetooth: hci3: command tx timeout [ 93.556073][ T51] Bluetooth: hci1: command tx timeout [ 93.558745][ T5790] Bluetooth: hci0: command tx timeout [ 93.574670][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.587451][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.596364][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.621624][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.632116][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.641876][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.651333][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.663695][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.684266][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.696159][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.707644][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.718232][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.729114][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.741542][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.765205][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.775906][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.784830][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.794555][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.903820][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.913157][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.971715][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.984396][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.995298][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.004503][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.057501][ T788] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.088254][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.096164][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.148922][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.187630][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.228410][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.249731][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.279869][ T5852] ======================================================= [ 95.279869][ T5852] WARNING: The mand mount option has been deprecated and [ 95.279869][ T5852] and is ignored by this kernel. Remove the mand [ 95.279869][ T5852] option from the mount to silence this warning. [ 95.279869][ T5852] ======================================================= [ 95.284431][ T788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.337215][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.353336][ T788] usb 2-1: config 0 has no interfaces? [ 95.382256][ T5852] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.405671][ T788] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 95.415248][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.432734][ T788] usb 2-1: Product: syz [ 95.438809][ T788] usb 2-1: Manufacturer: syz [ 95.443500][ T788] usb 2-1: SerialNumber: syz [ 95.467399][ T5790] Bluetooth: hci2: command tx timeout [ 95.489428][ T788] usb 2-1: config 0 descriptor?? [ 95.579206][ T5858] syz.0.1[5858]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.595680][ T5858] loop0: detected capacity change from 0 to 256 [ 95.627669][ T5790] Bluetooth: hci1: command tx timeout [ 95.633265][ T5790] Bluetooth: hci3: command tx timeout [ 95.636889][ T51] Bluetooth: hci0: command tx timeout [ 95.801766][ T5858] FAT-fs (loop0): Directory bread(block 64) failed [ 95.809222][ T5858] FAT-fs (loop0): Directory bread(block 65) failed [ 95.820284][ T5858] FAT-fs (loop0): Directory bread(block 66) failed [ 95.836319][ T5858] FAT-fs (loop0): Directory bread(block 67) failed [ 95.844070][ T5858] FAT-fs (loop0): Directory bread(block 68) failed [ 95.851838][ T5858] FAT-fs (loop0): Directory bread(block 69) failed [ 95.864027][ T5858] FAT-fs (loop0): Directory bread(block 70) failed [ 95.890623][ T5858] FAT-fs (loop0): Directory bread(block 71) failed [ 95.903686][ T5858] FAT-fs (loop0): Directory bread(block 72) failed [ 95.917832][ T5858] FAT-fs (loop0): Directory bread(block 73) failed [ 96.094509][ T5858] syz.0.1: attempt to access beyond end of device [ 96.094509][ T5858] loop0: rw=2049, sector=1160, nr_sectors = 4 limit=256 [ 96.606362][ T5865] bridge0: port 3(erspan0) entered blocking state [ 96.613650][ T5865] bridge0: port 3(erspan0) entered disabled state [ 96.622860][ T5865] erspan0: entered allmulticast mode [ 96.641153][ T5865] erspan0: entered promiscuous mode [ 96.649885][ T5865] bridge0: port 3(erspan0) entered blocking state [ 96.656781][ T5865] bridge0: port 3(erspan0) entered forwarding state [ 96.668895][ T5866] erspan0: left allmulticast mode [ 96.674117][ T5866] erspan0: left promiscuous mode [ 96.681837][ T5866] bridge0: port 3(erspan0) entered disabled state [ 97.383215][ T5850] usb 2-1: USB disconnect, device number 2 [ 97.507233][ T1872] cfg80211: failed to load regulatory.db [ 97.609454][ T5855] loop2: detected capacity change from 0 to 40427 [ 97.668812][ T5855] F2FS-fs (loop2): invalid crc value [ 97.716025][ T5855] F2FS-fs (loop2): Found nat_bits in checkpoint [ 97.871632][ T5855] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 97.958933][ T28] audit: type=1326 audit(1790952059.629:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9380d9e159 code=0x7ffc0000 [ 98.001360][ T5883] netlink: 'syz.3.10': attribute type 5 has an invalid length. [ 98.009947][ T28] audit: type=1326 audit(1790952059.629:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9380d9e159 code=0x7ffc0000 [ 98.057435][ T28] audit: type=1326 audit(1790952059.629:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9380d9e159 code=0x7ffc0000 [ 98.087863][ T28] audit: type=1326 audit(1790952059.629:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9380d9e159 code=0x7ffc0000 [ 98.114741][ T5783] syz-executor: attempt to access beyond end of device [ 98.114741][ T5783] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.121390][ T28] audit: type=1326 audit(1790952059.629:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9380d9e159 code=0x7ffc0000 [ 98.154539][ T28] audit: type=1326 audit(1790952059.629:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9380d9e159 code=0x7ffc0000 [ 98.179969][ T5783] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 98.236908][ T28] audit: type=1326 audit(1790952059.629:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9380d9e159 code=0x7ffc0000 [ 98.289535][ T28] audit: type=1326 audit(1790952059.629:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f9380d9e159 code=0x7ffc0000 [ 98.315842][ T28] audit: type=1326 audit(1790952059.629:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9380d9e159 code=0x7ffc0000 [ 98.340932][ T28] audit: type=1326 audit(1790952059.629:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.3" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9380d9e159 code=0x7ffc0000 [ 99.367223][ T5873] FAULT_INJECTION: forcing a failure. [ 99.367223][ T5873] name fail_futex, interval 1, probability 0, space 0, times 1 [ 99.427053][ T5873] CPU: 1 PID: 5873 Comm: syz.0.9 Not tainted syzkaller #0 [ 99.434274][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.444395][ T5873] Call Trace: [ 99.447740][ T5873] [ 99.450726][ T5873] dump_stack_lvl+0x18c/0x250 [ 99.455476][ T5873] ? lockdep_hardirqs_on+0x98/0x150 [ 99.460759][ T5873] ? show_regs_print_info+0x20/0x20 [ 99.466142][ T5873] ? load_image+0x420/0x420 [ 99.470710][ T5873] ? __schedule+0x15b6/0x4660 [ 99.475458][ T5873] should_fail_ex+0x394/0x4c0 [ 99.480207][ T5873] get_futex_key+0x136/0x1030 [ 99.485396][ T5873] ? futex_setup_timer+0xc0/0xc0 [ 99.490396][ T5873] ? futex_wait_queue+0x9d/0x1b0 [ 99.495415][ T5873] futex_wait_setup+0xbc/0x270 [ 99.500600][ T5873] ? futex_wait_multiple+0x920/0x920 [ 99.505971][ T5873] futex_wait+0x1bc/0x5c0 [ 99.510426][ T5873] ? futex_setup_timer+0xc0/0xc0 [ 99.515462][ T5873] ? futex_wait_setup+0x270/0x270 [ 99.520591][ T5873] ? __fdget+0x14a/0x210 [ 99.524894][ T5873] do_futex+0x2ff/0x3e0 [ 99.529123][ T5873] ? __ia32_sys_get_robust_list+0x110/0x110 [ 99.535070][ T5873] ? __sys_bind+0x134/0x3f0 [ 99.539754][ T5873] __se_sys_futex+0x3a9/0x440 [ 99.544496][ T5873] ? __x64_sys_futex+0xf0/0xf0 [ 99.549327][ T5873] ? __x64_sys_futex+0x21/0xf0 [ 99.554188][ T5873] do_syscall_64+0x55/0xb0 [ 99.558710][ T5873] ? clear_bhb_loop+0x40/0x90 [ 99.563437][ T5873] ? clear_bhb_loop+0x40/0x90 [ 99.568172][ T5873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.574279][ T5873] RIP: 0033:0x7f7828b9e159 [ 99.578759][ T5873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.598453][ T5873] RSP: 002b:00007f7829a600e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 99.606937][ T5873] RAX: ffffffffffffffda RBX: 00007f7828e25fa8 RCX: 00007f7828b9e159 [ 99.615012][ T5873] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7828e25fa8 [ 99.623087][ T5873] RBP: 00007f7828e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 99.631244][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.639363][ T5873] R13: 00007f7828e26038 R14: 00007ffcc925df30 R15: 00007ffcc925e018 [ 99.647581][ T5873] [ 99.881475][ T5894] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.907811][ T5894] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.968935][ T5894] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.990705][ T5894] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.007795][ T5894] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.029775][ T5894] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.057449][ T5894] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.077055][ T5894] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.086286][ T5894] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.118229][ T5894] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.134346][ T5894] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.156355][ T5894] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.494492][ T5904] loop2: detected capacity change from 0 to 8192 [ 100.591933][ T5904] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.645511][ T5913] loop3: detected capacity change from 0 to 128 [ 101.186440][ T5913] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 101.804757][ T5086] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.026696][ T5086] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.107186][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.196789][ T5086] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.017780][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 103.017792][ T28] audit: type=1326 audit(1790952064.689:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.3.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 103.106874][ T28] audit: type=1326 audit(1790952064.689:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.3.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 103.130876][ T28] audit: type=1326 audit(1790952064.719:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.3.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5b7a99df57 code=0x7ffc0000 [ 103.246750][ T28] audit: type=1326 audit(1790952064.719:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.3.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5b7a95ae51 code=0x7ffc0000 [ 103.370502][ T28] audit: type=1326 audit(1790952064.719:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.3.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5b7a99ef49 code=0x7ffc0000 [ 103.395411][ T28] audit: type=1326 audit(1790952064.729:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.3.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f5b7a95a5ac code=0x7ffc0000 [ 103.446809][ T28] audit: type=1326 audit(1790952064.729:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.3.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5b7a95a60e code=0x7ffc0000 [ 103.879519][ T5086] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.060070][ T28] audit: type=1326 audit(1790952064.729:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.3.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 104.135675][ T5086] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.217596][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.276947][ T5086] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.565207][ T28] audit: type=1326 audit(1790952064.729:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.3.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5b7a95aebb code=0x7ffc0000 [ 104.766575][ C0] sched: RT throttling activated [ 104.782554][ T28] audit: type=1326 audit(1790952064.729:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5912 comm="syz.3.17" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 105.184920][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.966223][ T5086] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.196886][ T5086] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.260751][ T5928] loop2: detected capacity change from 0 to 40427 [ 106.277944][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.346871][ T5086] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.367109][ T5928] F2FS-fs (loop2): invalid crc value [ 106.443074][ T5928] F2FS-fs (loop2): Found nat_bits in checkpoint [ 106.644072][ T5930] loop0: detected capacity change from 0 to 40427 [ 106.680934][ T5930] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 106.690313][ T5930] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 106.723689][ T5930] F2FS-fs (loop0): invalid crc value [ 107.105945][ T5930] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 107.143860][ T5930] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.327859][ T5773] syz-executor: attempt to access beyond end of device [ 107.327859][ T5773] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.367591][ T5773] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 107.540085][ T5935] loop1: detected capacity change from 0 to 256 [ 107.559855][ T5935] exfat: Deprecated parameter 'namecase' [ 107.565656][ T5935] exfat: Deprecated parameter 'namecase' [ 107.701552][ T5935] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 107.741244][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 107.944868][ T5935] exFAT-fs (loop1): IO charset koi not found [ 108.285050][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 108.425811][ T5977] loop2: detected capacity change from 0 to 128 [ 108.496094][ T5971] hsr_slave_1 (unregistering): left promiscuous mode [ 108.949762][ T5990] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.957490][ T5990] IPv6: NLM_F_CREATE should be set when creating new route [ 109.640914][ T5993] loop1: detected capacity change from 0 to 256 [ 109.819958][ T5993] FAT-fs (loop1): Directory bread(block 64) failed [ 109.836829][ T5993] FAT-fs (loop1): Directory bread(block 65) failed [ 109.843620][ T5993] FAT-fs (loop1): Directory bread(block 66) failed [ 109.888423][ T5993] FAT-fs (loop1): Directory bread(block 67) failed [ 109.895262][ T5993] FAT-fs (loop1): Directory bread(block 68) failed [ 109.934626][ T5993] FAT-fs (loop1): Directory bread(block 69) failed [ 109.957098][ T5993] FAT-fs (loop1): Directory bread(block 70) failed [ 109.958847][ T6005] xt_TCPMSS: Only works on TCP SYN packets [ 109.963718][ T5993] FAT-fs (loop1): Directory bread(block 71) failed [ 109.996772][ T5993] FAT-fs (loop1): Directory bread(block 72) failed [ 110.014529][ T5993] FAT-fs (loop1): Directory bread(block 73) failed [ 114.075676][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 114.220345][ T6029] loop3: detected capacity change from 0 to 128 [ 114.428132][ T6024] hsr_slave_1 (unregistering): left promiscuous mode [ 114.485156][ T6029] syz.3.55: attempt to access beyond end of device [ 114.485156][ T6029] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 114.836693][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.315220][ T6059] loop2: detected capacity change from 0 to 512 [ 117.441622][ T6062] capability: warning: `syz.0.64' uses deprecated v2 capabilities in a way that may be insecure [ 118.736848][ T6023] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.251572][ T6082] loop2: detected capacity change from 0 to 512 [ 119.268755][ T6082] EXT4-fs: Ignoring removed i_version option [ 119.633691][ T6082] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.293714][ T6082] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 120.635650][ T6086] netlink: 'syz.1.69': attribute type 32 has an invalid length. [ 120.669243][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.821438][ T6089] loop1: detected capacity change from 0 to 1024 [ 120.850889][ T6089] EXT4-fs: Ignoring removed bh option [ 120.884793][ T6089] EXT4-fs (loop1): stripe (19) is not aligned with cluster size (16), stripe is disabled [ 120.945657][ T6089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.752959][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 121.752975][ T28] audit: type=1800 audit(1790952084.420:86): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.70" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 123.757441][ T5776] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 123.885744][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.888261][ T6105] loop0: detected capacity change from 0 to 256 [ 123.912433][ T6106] loop3: detected capacity change from 0 to 512 [ 125.567250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 127.456750][ T28] audit: type=1326 audit(1790952088.100:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.80" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9380d9e159 code=0x0 [ 130.579548][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 131.423181][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.531501][ T6174] bridge_slave_1 (unregistering): left allmulticast mode [ 131.539497][ T6174] bridge_slave_1 (unregistering): left promiscuous mode [ 131.546659][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.703050][ T6178] capability: warning: `syz.1.92' uses 32-bit capabilities (legacy support in use) [ 133.247188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 133.519702][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.527769][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.749592][ T6183] block device autoloading is deprecated and will be removed. [ 133.761502][ T6183] syz.0.94: attempt to access beyond end of device [ 133.761502][ T6183] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 138.896822][ T28] audit: type=1326 audit(1790952101.550:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.102" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 139.042323][ T28] audit: type=1326 audit(1790952101.550:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.102" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 139.285912][ T28] audit: type=1326 audit(1790952101.550:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.102" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 139.311047][ T28] audit: type=1326 audit(1790952101.550:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.102" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 139.335511][ T28] audit: type=1326 audit(1790952101.600:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.102" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 139.387632][ T28] audit: type=1326 audit(1790952101.600:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.102" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 139.423488][ T28] audit: type=1326 audit(1790952101.600:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.102" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 139.465633][ T28] audit: type=1326 audit(1790952101.600:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.102" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 139.537207][ T28] audit: type=1326 audit(1790952101.600:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.102" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 139.582388][ T28] audit: type=1326 audit(1790952101.600:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6218 comm="syz.3.102" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 139.673767][ T6234] loop3: detected capacity change from 0 to 256 [ 139.744168][ T6234] FAT-fs (loop3): Directory bread(block 64) failed [ 139.759826][ T6234] FAT-fs (loop3): Directory bread(block 65) failed [ 139.768385][ T6234] FAT-fs (loop3): Directory bread(block 66) failed [ 139.775185][ T6234] FAT-fs (loop3): Directory bread(block 67) failed [ 139.782338][ T6234] FAT-fs (loop3): Directory bread(block 68) failed [ 139.789893][ T6234] FAT-fs (loop3): Directory bread(block 69) failed [ 139.806185][ T6234] FAT-fs (loop3): Directory bread(block 70) failed [ 139.814390][ T6234] FAT-fs (loop3): Directory bread(block 71) failed [ 139.830407][ T6234] FAT-fs (loop3): Directory bread(block 72) failed [ 139.841529][ T6234] FAT-fs (loop3): Directory bread(block 73) failed [ 140.035891][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.044451][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.231513][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 140.443978][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 140.453859][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 140.463523][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 140.478974][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.594557][ T6225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.661046][ T6225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.715491][ T9] usb 4-1: string descriptor 0 read error: -71 [ 140.731539][ T9] usb 4-1: Found UVC 1.00 device (046d:0825) [ 140.740342][ T9] usb 4-1: No valid video chain found. [ 140.763093][ T9] usb 4-1: USB disconnect, device number 2 [ 141.194519][ T6225] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.204060][ T6225] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.213084][ T6225] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.222100][ T6225] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.913420][ T6245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.796667][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.849541][ T6306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.704128][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 145.872435][ T6308] hsr_slave_1 (unregistering): left promiscuous mode [ 147.512427][ T6341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.228858][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 149.147444][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 149.147463][ T28] audit: type=1326 audit(1790952111.770:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.3.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 149.256922][ T28] audit: type=1326 audit(1790952111.770:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.3.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 149.283030][ T28] audit: type=1326 audit(1790952111.890:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.3.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 149.309057][ T28] audit: type=1326 audit(1790952111.890:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.3.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 149.335627][ T28] audit: type=1326 audit(1790952111.890:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.3.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 149.554356][ T6374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.581734][ T28] audit: type=1326 audit(1790952111.890:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.3.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 149.646477][ T28] audit: type=1326 audit(1790952111.890:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.3.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 149.709667][ T28] audit: type=1326 audit(1790952111.890:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.3.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 149.970618][ T28] audit: type=1326 audit(1790952111.890:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.3.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 149.995991][ T28] audit: type=1326 audit(1790952111.890:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.3.149" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f5b7a99e159 code=0x7ffc0000 [ 151.166891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 151.576830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 151.756408][ T6383] loop0: detected capacity change from 0 to 2048 [ 151.784793][ T6383] UDF-fs: bad mount option "subj_role=" or missing value [ 151.833171][ T6387] netlink: 'syz.1.156': attribute type 1 has an invalid length. [ 152.209799][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.358644][ T5086] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 152.636543][ T6383] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.673118][ T6383] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.702029][ T6398] loop2: detected capacity change from 0 to 256 [ 152.717708][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 152.739845][ T6383] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.746063][ T6383] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.767930][ T6398] exfat: Deprecated parameter 'utf8' [ 152.773518][ T6398] exfat: Deprecated parameter 'utf8' [ 152.839364][ T6398] exfat: Deprecated parameter 'namecase' [ 152.876904][ T6398] exfat: Bad value for 'gid' [ 153.644186][ T6403] loop2: detected capacity change from 0 to 2048 [ 153.867694][ T6403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.880863][ T6403] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.956855][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.648451][ T5790] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.654574][ T5790] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.664047][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.282428][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 157.282447][ T28] audit: type=1800 audit(1790952119.750:116): pid=6403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.159" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 157.431285][ T28] audit: type=1800 audit(1790952119.750:117): pid=6402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.159" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 157.757100][ T5817] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 157.962521][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.996732][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 158.014874][ T5817] usb 4-1: config 0 interface 0 has no altsetting 0 [ 158.047889][ T5817] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 158.072888][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.119040][ T5817] usb 4-1: config 0 descriptor?? [ 159.173479][ T5817] usbhid 4-1:0.0: can't add hid device: -71 [ 159.203404][ T5817] usbhid: probe of 4-1:0.0 failed with error -71 [ 159.271296][ T5817] usb 4-1: USB disconnect, device number 3 [ 159.496676][ T5787] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 159.740581][ T5787] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.776844][ T5787] usb 2-1: config 3 has an invalid interface number: 107 but max is 0 [ 159.806293][ T5787] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 160.310011][ T5787] usb 2-1: config 3 has no interface number 0 [ 160.346869][ T5787] usb 2-1: config 3 interface 107 has no altsetting 0 [ 160.369344][ T5787] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=8f.a9 [ 160.386662][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.405230][ T5787] usb 2-1: Product: syz [ 160.410451][ T6423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.420610][ T5787] usb 2-1: Manufacturer: syz [ 160.425285][ T5787] usb 2-1: SerialNumber: syz [ 160.496517][ T6429] loop3: detected capacity change from 0 to 2048 [ 160.507253][ T6429] UDF-fs: bad mount option "subj_role=" or missing value [ 160.726868][ T5817] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 160.906877][ T5817] usb 1-1: Using ep0 maxpacket: 8 [ 160.920954][ T5817] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 160.930231][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.938567][ T5817] usb 1-1: Product: syz [ 160.942861][ T5817] usb 1-1: Manufacturer: syz [ 160.947627][ T5817] usb 1-1: SerialNumber: syz [ 160.954755][ T5817] usb 1-1: config 0 descriptor?? [ 160.967954][ T5817] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 161.302076][ T6429] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.316873][ T6429] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.329319][ T6429] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.335686][ T6429] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.352488][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.365175][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.387594][ T5787] ims_pcu 2-1:3.107: Missing CDC union descriptor [ 161.394562][ T5787] ims_pcu: probe of 2-1:3.107 failed with error -22 [ 161.413036][ T5787] usb 2-1: USB disconnect, device number 3 [ 161.656739][ T1872] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 161.816960][ T5838] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 161.839562][ T1872] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.850215][ T1872] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.862255][ T1872] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 161.874640][ T1872] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.887734][ T1872] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 161.896881][ T1872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.992323][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.003719][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 162.016263][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.016283][ T5838] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.042317][ T5817] gspca_sonixj: reg_w1 err -71 [ 162.050321][ T5838] usb 4-1: config 0 has no interface number 0 [ 162.063020][ T5838] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 162.073686][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.084235][ T5838] usb 4-1: Product: syz [ 162.089863][ T5838] usb 4-1: Manufacturer: syz [ 162.094688][ T5838] usb 4-1: SerialNumber: syz [ 162.103029][ T5838] usb 4-1: config 0 descriptor?? [ 162.108983][ T5817] sonixj: probe of 1-1:0.0 failed with error -71 [ 162.137092][ T5838] usb 4-1: selecting invalid altsetting 2 [ 162.142945][ T5838] i2c-cp2615: probe of 4-1:0.1 failed with error -22 [ 162.151081][ T5817] usb 1-1: USB disconnect, device number 2 [ 162.286709][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 162.367316][ T1872] gud: probe of 3-1:1.0 failed with error -32 [ 162.378588][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.386810][ T1872] usb 3-1: USB disconnect, device number 2 [ 162.407140][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.441225][ T5838] usb 4-1: USB disconnect, device number 4 [ 162.489860][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.500518][ T27] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 162.510785][ T27] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.530442][ T27] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 162.542057][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.550213][ T27] usb 2-1: Product: syz [ 162.554522][ T27] usb 2-1: Manufacturer: syz [ 162.559308][ T27] usb 2-1: SerialNumber: syz [ 162.677055][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.765334][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 162.997414][ T6438] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 165.006810][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.012973][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.016834][ T5790] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.009309][ T6449] loop3: detected capacity change from 0 to 64 [ 166.847357][ T27] ATM dev 0: failed to start ADSL synchronisation: -71 [ 166.854937][ C1] ATM dev 0: usbatm_complete: urb 0xffff888024ccc800 failed (-71)! [ 166.863162][ C1] ATM dev 0: usbatm_complete: urb 0xffff888024ccc000 failed (-71)! [ 166.871203][ C1] ATM dev 0: usbatm_complete: urb 0xffff888142fb6e00 failed (-71)! [ 166.879234][ C1] ATM dev 0: usbatm_complete: urb 0xffff888142fb6f00 failed (-71)! [ 166.925101][ T27] usb 2-1: USB disconnect, device number 4 [ 167.094438][ T6461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.174363][ T6463] loop3: detected capacity change from 0 to 2048 [ 167.181121][ T1872] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 167.206782][ T6463] UDF-fs: bad mount option "subj_role=" or missing value [ 167.373408][ T1872] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 167.382806][ T1872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.395533][ T1872] usb 3-1: Product: syz [ 167.407002][ T1872] usb 3-1: Manufacturer: syz [ 167.411735][ T1872] usb 3-1: SerialNumber: syz [ 167.416772][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 167.621306][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 167.630251][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 167.640124][ T27] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 167.655807][ T27] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 167.670533][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.679962][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.688281][ T27] usb 2-1: Product: syz [ 167.692647][ T27] usb 2-1: Manufacturer: syz [ 167.697669][ T27] usb 2-1: SerialNumber: syz [ 167.987564][ T6463] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.994250][ T6463] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.001162][ T6463] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 168.008114][ T6463] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 168.020536][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.038898][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.072897][ T27] cdc_ncm 2-1:1.0: bind() failure [ 168.080329][ T1872] (unnamed net_device) (uninitialized): Assigned a random MAC address: fe:24:9e:55:1a:38 [ 168.096239][ T27] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 168.112730][ T27] cdc_ncm 2-1:1.1: bind() failure [ 168.132201][ T1872] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 168.146836][ T27] usb 2-1: USB disconnect, device number 5 [ 168.446799][ T5838] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 168.522877][ T6470] kvm: kvm [6469]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 168.533988][ T6470] kvm: kvm [6469]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 168.551465][ T6470] kvm: kvm [6469]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 168.570838][ T6470] kvm: kvm [6469]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 168.585395][ T6470] kvm: kvm [6469]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 168.651081][ T5838] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 168.660686][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.674230][ T5838] usb 4-1: Product: syz [ 168.679378][ T5838] usb 4-1: Manufacturer: syz [ 168.684252][ T5838] usb 4-1: SerialNumber: syz [ 168.705936][ T5838] usb 4-1: config 0 descriptor?? [ 168.716774][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 168.724564][ T5838] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 005 [ 168.936626][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 168.947851][ T27] usb 2-1: config index 0 descriptor too short (expected 122, got 92) [ 168.959591][ T27] usb 2-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 168.971957][ T27] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 168.981536][ T27] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 3330, setting to 1024 [ 168.993933][ T27] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024 [ 169.012631][ T27] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 169.022085][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.030739][ T27] usb 2-1: Product: syz [ 169.035153][ T27] usb 2-1: Manufacturer: syz [ 169.040418][ T27] usb 2-1: SerialNumber: syz [ 169.116719][ T1872] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 169.124697][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.139236][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.302793][ T27] usb 2-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 169.307217][ T5790] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.315030][ T27] usb 2-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 169.337962][ T1872] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 169.354726][ T5838] i2c i2c-1: connected i2c-tiny-usb device [ 169.360454][ T1872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.371020][ C1] usb 3-1: eth1: intr status -71 [ 169.376240][ C1] usb 3-1: Rx status -71 [ 169.376452][ T5838] usb 3-1: USB disconnect, device number 3 [ 169.383487][ C1] usb 3-1: eth1: intr status -71 [ 169.404964][ T5436] usb 3-1: device reset failed [ 169.561446][ T6466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.578947][ T6466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.603935][ T27] usb 2-1: USB disconnect, device number 6 [ 169.642949][ T6466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.648926][ T1872] usb 1-1: NFC: Reader power on cmd error -71 [ 169.680779][ T1872] pn533_usb 1-1:1.0: NFC: Couldn't poweron the reader (error -71) [ 169.693713][ T6466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.721828][ T1872] pn533_usb: probe of 1-1:1.0 failed with error -71 [ 169.736818][ T6466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.777785][ T1872] usb 1-1: USB disconnect, device number 3 [ 169.794533][ T6466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.822449][ T6492] udevd[6492]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.845759][ T6466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.885219][ T6466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.896989][ T6466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.935457][ T6466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.027892][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.027904][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.041675][ T5790] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.182604][ T5838] usb 4-1: USB disconnect, device number 5 [ 170.482163][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 172.802179][ T6519] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 172.854947][ T6519] loop0: detected capacity change from 0 to 64 [ 173.131696][ T6525] loop1: detected capacity change from 0 to 2048 [ 173.162275][ T6525] UDF-fs: bad mount option "subj_role=" or missing value [ 173.208881][ T6510] hsr_slave_1 (unregistering): left promiscuous mode [ 173.288524][ T6524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.849783][ T6525] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 173.857025][ T6525] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.863814][ T6525] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.871059][ T6525] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.880247][ T6525] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 174.167252][ T5838] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 174.176689][ T5817] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 174.355291][ T5838] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x9B, skipping [ 174.372058][ T5817] usb 3-1: Using ep0 maxpacket: 32 [ 174.392228][ T5838] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 174.414301][ T5787] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 174.425010][ T5817] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 174.446862][ T5838] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.462023][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 174.470720][ T5838] usb 1-1: SerialNumber: syz [ 174.477891][ T5817] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 174.500476][ T5838] hub 1-1:1.0: bad descriptor, ignoring hub [ 174.510386][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.527755][ T5838] hub: probe of 1-1:1.0 failed with error -5 [ 174.537990][ T5817] usb 3-1: Product: syz [ 174.542247][ T5817] usb 3-1: Manufacturer: syz [ 174.552247][ T5817] usb 3-1: SerialNumber: syz [ 174.559229][ T5838] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 174.567266][ T5838] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 174.573767][ T5838] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 174.610492][ T5787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.629430][ T5787] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.642727][ T5787] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 174.651958][ T5787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.679284][ T5787] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 174.799326][ T5817] usb 3-1: selecting invalid altsetting 1 [ 174.806737][ T1872] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 174.908500][ T6532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.922813][ T6532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.933406][ T6532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.942540][ T6532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.993028][ T1872] usb 4-1: not running at top speed; connect to a high speed hub [ 175.002555][ T1872] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.003146][ T5817] LME2510(C): Firmware Status: 09 03 47 4c ff 6a [ 175.012913][ T5817] usb 3-1: dvb_usb_v2: found a 'DM04_LME2510C_DVB-S RS2000' in warm state [ 175.014063][ T1872] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 175.021204][ T5817] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 175.044041][ T1872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.055933][ T5817] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.070971][ T1872] usb 4-1: Found UVC 1.00 device (046d:0825) [ 175.091344][ T5817] dvbdev: DVB: registering new adapter (DM04_LME2510C_DVB-S RS2000) [ 175.100627][ T5817] usb 3-1: media controller created [ 175.133614][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.202861][ T5817] DVB: Unable to find symbol m88rs2000_attach() [ 175.213894][ T5817] LME2510(C): DM04/QQBOX Not Powered up or not Supported [ 175.213945][ T5817] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 175.238539][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.240440][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.281305][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.290612][ T6236] usb 1-1: USB disconnect, device number 4 [ 175.304761][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.353302][ T5817] usb 3-1: USB disconnect, device number 4 [ 175.387550][ T5790] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.678148][ T6545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.689082][ T6545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.866769][ T5086] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.873145][ T5790] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.902103][ T1872] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 175.911299][ T1872] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 175.928423][ T1872] usb 4-1: USB disconnect, device number 6 [ 175.955467][ T5790] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.030445][ T6551] loop2: detected capacity change from 0 to 1024 [ 176.037540][ T6236] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 176.046848][ T6551] EXT4-fs: Ignoring removed bh option [ 176.070702][ T6551] EXT4-fs (loop2): stripe (19) is not aligned with cluster size (16), stripe is disabled [ 176.098844][ T6551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.435885][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.471599][ T6236] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 176.480851][ T6236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.496613][ T6236] usb 1-1: Product: syz [ 176.500986][ T6236] usb 1-1: Manufacturer: syz [ 176.505655][ T6236] usb 1-1: SerialNumber: syz [ 176.535220][ T6236] ums-karma 1-1:1.0: USB Mass Storage device detected [ 176.568194][ T6236] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 176.568194][ T6236] Please send a copy of this message to and [ 176.695065][ T6563] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 176.715035][ T6563] loop2: detected capacity change from 0 to 64 [ 176.892588][ T6549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.931351][ T6549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.131435][ T6549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.225457][ T6549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.533632][ T5818] usb 2-1: USB disconnect, device number 7 [ 177.629982][ T6236] scsi host1: usb-storage 1-1:1.0 [ 179.327085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 179.362841][ T5790] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.431984][ T6236] usb 1-1: USB disconnect, device number 5 [ 179.526306][ T6573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.570082][ T1872] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 179.789231][ T1872] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 179.811169][ T1872] usb 3-1: config 0 has no interface number 0 [ 179.828031][ T1872] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.844009][ T1872] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 179.854457][ T1872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.879239][ T1872] usb 3-1: Product: syz [ 179.898104][ T1872] usb 3-1: Manufacturer: syz [ 179.907095][ T1872] usb 3-1: SerialNumber: syz [ 179.947882][ T1872] usb 3-1: config 0 descriptor?? [ 179.977152][ T1872] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 180.615361][ T6585] loop1: detected capacity change from 0 to 1024 [ 180.625934][ T6585] EXT4-fs: Ignoring removed bh option [ 180.636148][ T6585] EXT4-fs (loop1): stripe (19) is not aligned with cluster size (16), stripe is disabled [ 180.677135][ T6585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.736710][ T5818] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 180.802023][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 180.812883][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.824655][ T1872] usb 3-1: USB disconnect, device number 5 [ 180.841384][ T1872] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 180.936696][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 180.944256][ T5818] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 180.954827][ T5818] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 180.963992][ T5818] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 180.977066][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.987280][ T5818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 181.004434][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 181.020275][ T5818] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 181.030116][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.041295][ T5818] usb 4-1: config 0 descriptor?? [ 181.256699][ T5787] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 181.283652][ T6593] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 181.483084][ T5790] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.652086][ T5818] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 181.931352][ T5818] usb 4-1: USB disconnect, device number 7 [ 182.083924][ T5818] usblp0: removed [ 182.166061][ T6595] bridge0: entered promiscuous mode [ 182.174003][ T6595] macsec1: entered promiscuous mode [ 182.179665][ T6595] macsec1: entered allmulticast mode [ 182.185289][ T6595] bridge0: entered allmulticast mode [ 182.193333][ T6595] bridge0: port 3(macsec1) entered blocking state [ 182.200858][ T6595] bridge0: port 3(macsec1) entered disabled state [ 182.211619][ T6595] bridge0: left allmulticast mode [ 182.222098][ T6595] bridge0: left promiscuous mode [ 182.266954][ T5787] usb 2-1: Using ep0 maxpacket: 32 [ 182.276973][ T5787] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 182.290568][ T5787] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 182.303440][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.311705][ T5787] usb 2-1: Product: syz [ 182.316424][ T5787] usb 2-1: Manufacturer: syz [ 182.321240][ T5787] usb 2-1: SerialNumber: syz [ 182.526659][ T5818] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 182.542303][ T5787] usb 2-1: selecting invalid altsetting 1 [ 182.707024][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 182.715676][ T5818] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 182.724447][ T5818] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 182.733680][ T5818] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 182.742972][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.761533][ T5787] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 182.761664][ T5787] dvb_usb_lmedm04: probe of 2-1:2.0 failed with error -22 [ 182.767645][ T5818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 182.792942][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 182.806305][ T5818] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 182.817643][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.828817][ T5818] usb 4-1: config 0 descriptor?? [ 183.276569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 183.336567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 183.456594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 183.466583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 184.286566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 185.757149][ T5818] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 185.815291][ T5817] usb 4-1: USB disconnect, device number 8 [ 185.861827][ T5817] usblp0: removed [ 185.906209][ T5787] usb 2-1: USB disconnect, device number 8 [ 186.094658][ T6620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.407502][ T5787] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 186.415154][ T5817] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.608964][ T5817] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.624740][ T5787] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 186.643021][ T5817] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.660198][ T5787] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 186.674930][ T5817] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.692993][ T5817] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.705931][ T5787] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 186.720367][ T5817] usb 4-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 186.730247][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.739103][ T5787] usb 2-1: Product: syz [ 186.743544][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.751855][ T5787] usb 2-1: Manufacturer: syz [ 186.763541][ T5787] usb 2-1: SerialNumber: syz [ 186.771079][ T5817] usb 4-1: config 0 descriptor?? [ 186.889577][ T8] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 187.143096][ T5818] usb 2-1: USB disconnect, device number 9 [ 187.228809][ T5817] input: HID 1b96:0011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:1B96:0011.0001/input/input5 [ 187.428673][ T5817] ntrig 0003:1B96:0011.0001: input,hidraw0: USB HID v0.04 Joystick [HID 1b96:0011] on usb-dummy_hcd.3-1/input0 [ 187.556179][ T6627] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4376 (17504 ns) > initial count (96 ns). Using initial count to start timer. [ 187.577214][ T1872] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 187.649968][ T5817] usb 4-1: USB disconnect, device number 9 [ 187.703513][ T6629] fido_id[6629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 187.786881][ T1872] usb 3-1: Using ep0 maxpacket: 16 [ 187.812759][ T1872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.847302][ T1872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.876272][ T1872] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 187.897803][ T1872] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 187.921345][ T1872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.944409][ T1872] usb 3-1: config 0 descriptor?? [ 187.949821][ T8] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 187.973923][ T8] ath9k_htc: Failed to initialize the device [ 187.990434][ T5818] usb 2-1: ath9k_htc: USB layer deinitialized [ 188.246689][ T6236] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 190.553186][ T5818] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 190.576681][ T6236] usb 1-1: Using ep0 maxpacket: 16 [ 190.640825][ T6236] usb 1-1: unable to get BOS descriptor or descriptor too short [ 190.677475][ T6236] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 190.711586][ T1872] usbhid 3-1:0.0: can't add hid device: -71 [ 190.720535][ T6236] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 190.730739][ T1872] usbhid: probe of 3-1:0.0 failed with error -71 [ 190.745392][ T1872] usb 3-1: USB disconnect, device number 6 [ 190.745592][ T6236] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.771465][ T6236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.785391][ T6236] usb 1-1: Product: syz [ 190.792953][ T6236] usb 1-1: Manufacturer: syz [ 190.803034][ T6236] usb 1-1: SerialNumber: syz [ 191.016814][ T6236] cdc_ncm 1-1:1.0: bind() failure [ 191.040938][ T6236] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 191.056855][ T6236] cdc_ncm 1-1:1.1: bind() failure [ 191.071526][ T6236] usb 1-1: USB disconnect, device number 6 [ 191.217523][ T5818] usb 2-1: device descriptor read/64, error -71 [ 191.587046][ T5818] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 191.787160][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 191.854546][ T5818] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 192.138814][ T5818] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 192.156663][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.175535][ T5818] usb 2-1: Product: syz [ 192.180416][ T5818] usb 2-1: Manufacturer: syz [ 192.195705][ T5818] usb 2-1: SerialNumber: syz [ 192.373313][ T6657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.641774][ T5818] usb 2-1: selecting invalid altsetting 1 [ 192.747937][ T6663] 9pnet_fd: Insufficient options for proto=fd [ 192.976810][ T5817] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 193.348799][ T6646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.302555][ T5818] LME2510(C): Firmware Status: 09 03 47 4c ff 6a [ 194.302605][ T5818] usb 2-1: dvb_usb_v2: found a 'DM04_LME2510C_DVB-S RS2000' in warm state [ 194.323705][ T5818] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 194.331398][ T6646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.343599][ T5817] usb 1-1: not running at top speed; connect to a high speed hub [ 194.349490][ T5818] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 194.363252][ T6646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.384457][ T6646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.392735][ T5817] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 194.394830][ T5818] dvbdev: DVB: registering new adapter (DM04_LME2510C_DVB-S RS2000) [ 194.421064][ T5818] usb 2-1: media controller created [ 194.434322][ T5817] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.455522][ T5817] usb 1-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00 [ 194.466632][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.479321][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.499636][ T5817] hub 1-1:1.0: USB hub found [ 194.680665][ T6668] Zero length message leads to an empty skb [ 194.758642][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.765928][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.269500][ T5818] DVB: Unable to find symbol m88rs2000_attach() [ 196.289463][ T5818] LME2510(C): DM04/QQBOX Not Powered up or not Supported [ 196.289505][ T5818] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 196.400783][ T5817] hub 1-1:1.0: config failed, can't read hub descriptor (err -22) [ 196.451618][ T5818] usb 2-1: USB disconnect, device number 11 [ 196.478918][ T5817] usb 1-1: USB disconnect, device number 7 [ 196.696736][ T5838] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 196.806762][ T8] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 196.879699][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.891268][ T5838] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 196.901454][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.916746][ T5838] usb 4-1: config 0 descriptor?? [ 196.927003][ T5817] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 197.007926][ T8] usb 3-1: not running at top speed; connect to a high speed hub [ 197.021087][ T5818] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 197.029766][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.042839][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.053518][ T8] usb 3-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00 [ 197.063171][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.080884][ T8] hub 3-1:1.0: USB hub found [ 197.146877][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 197.155972][ T5817] usb 1-1: unable to get BOS descriptor or descriptor too short [ 197.165969][ T5817] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 197.176245][ T5817] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 197.190890][ T5817] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.200326][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.208515][ T5817] usb 1-1: Product: syz [ 197.212785][ T5817] usb 1-1: Manufacturer: syz [ 197.217544][ T5817] usb 1-1: SerialNumber: syz [ 197.224819][ T5818] usb 2-1: unable to get BOS descriptor or descriptor too short [ 197.240416][ T5818] usb 2-1: config 114 has an invalid interface number: 127 but max is 0 [ 197.251570][ T5818] usb 2-1: config 114 has no interface number 0 [ 197.259269][ T5818] usb 2-1: config 114 interface 127 altsetting 232 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 197.272325][ T5818] usb 2-1: config 114 interface 127 has no altsetting 0 [ 197.293344][ T8] hub 3-1:1.0: config failed, can't read hub descriptor (err -22) [ 197.304753][ T5818] usb 2-1: New USB device found, idVendor=2001, idProduct=3a05, bcdDevice=c2.02 [ 197.327529][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.335657][ T5818] usb 2-1: Product: syz [ 197.346814][ T5818] usb 2-1: Manufacturer: syz [ 197.353209][ T5818] usb 2-1: SerialNumber: syz [ 197.359750][ T5838] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 197.380651][ T8] usb 3-1: USB disconnect, device number 7 [ 197.415565][ T5838] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input6 [ 197.456798][ T6675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.491185][ T6675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.515061][ T5817] cdc_ncm 1-1:1.0: bind() failure [ 197.530135][ T5817] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 197.540022][ T5817] cdc_ncm 1-1:1.1: bind() failure [ 197.573162][ T5817] usb 1-1: USB disconnect, device number 8 [ 197.630707][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.650252][ T5838] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 197.666023][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.740904][ T5818] usb 2-1: Could not find all expected endpoints [ 197.787113][ T5818] usb 2-1: USB disconnect, device number 12 [ 198.012717][ T5818] usb 4-1: USB disconnect, device number 10 [ 198.166672][ T5817] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 198.326185][ T6691] loop1: detected capacity change from 0 to 512 [ 198.357654][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 198.369396][ T5817] usb 1-1: config index 0 descriptor too short (expected 122, got 92) [ 198.380518][ T5817] usb 1-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 198.393640][ T6232] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.403706][ T5817] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 198.424073][ T5817] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 3330, setting to 1024 [ 198.445685][ T5817] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024 [ 198.497872][ T5817] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 198.529056][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.553163][ T5817] usb 1-1: Product: syz [ 198.582956][ T5817] usb 1-1: Manufacturer: syz [ 198.604619][ T5817] usb 1-1: SerialNumber: syz [ 198.739431][ T6694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.750020][ T6236] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 200.679539][ T5817] usb 1-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 200.689065][ T6236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.689095][ T6236] usb 3-1: config 0 has no interfaces? [ 200.689130][ T6236] usb 3-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 200.689157][ T6236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.729935][ T6236] usb 3-1: config 0 descriptor?? [ 200.780309][ T5817] usb 1-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 200.850368][ T6701] loop1: detected capacity change from 0 to 512 [ 200.869313][ T5817] usb 1-1: USB disconnect, device number 9 [ 200.878465][ T6701] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.899036][ T6701] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 200.935454][ T6701] EXT4-fs (loop1): 1 truncate cleaned up [ 202.638835][ T6701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.669260][ T1872] usb 3-1: USB disconnect, device number 8 [ 202.754514][ T6489] udevd[6489]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.906758][ T1872] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 204.057243][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.122457][ T1872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 204.163484][ T1872] usb 3-1: config 114 has an invalid interface number: 127 but max is 0 [ 204.204163][ T1872] usb 3-1: config 114 has no interface number 0 [ 204.229917][ T1872] usb 3-1: config 114 interface 127 altsetting 232 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 204.252563][ T1872] usb 3-1: config 114 interface 127 has no altsetting 0 [ 204.269172][ T1872] usb 3-1: New USB device found, idVendor=2001, idProduct=3a05, bcdDevice=c2.02 [ 204.285415][ T1872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.303522][ T1872] usb 3-1: Product: syz [ 204.308054][ T1872] usb 3-1: Manufacturer: syz [ 204.530895][ T1872] usb 3-1: SerialNumber: syz [ 204.657574][ T6721] loop1: detected capacity change from 0 to 1024 [ 204.665022][ T6721] EXT4-fs: Ignoring removed oldalloc option [ 204.671067][ T6721] EXT4-fs: Ignoring removed oldalloc option [ 204.688424][ T6721] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 205.039188][ T6721] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 205.246377][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.283226][ T6721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.319988][ T6721] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.661335][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.138348][ T1872] usb 3-1: Could not find all expected endpoints [ 206.390754][ T6727] loop3: detected capacity change from 0 to 1024 [ 206.551995][ T1872] usb 3-1: USB disconnect, device number 9 [ 206.680089][ T6727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.964181][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.556830][ T5817] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 210.780102][ T5817] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 210.798748][ T5817] usb 1-1: config 0 has no interface number 0 [ 210.817521][ T5817] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.900601][ T5817] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 210.933620][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.966433][ T5817] usb 1-1: Product: syz [ 211.001009][ T5817] usb 1-1: Manufacturer: syz [ 211.011503][ T5817] usb 1-1: SerialNumber: syz [ 211.142768][ T5817] usb 1-1: config 0 descriptor?? [ 211.197458][ T5817] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 215.317553][ T5818] usb 1-1: USB disconnect, device number 10 [ 215.369372][ T5818] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 216.424315][ T6776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.296180][ T6793] process 'syz.3.264' launched '/dev/fd/-1' with NULL argv: empty string added [ 217.305676][ T6793] FAULT_INJECTION: forcing a failure. [ 217.305676][ T6793] name failslab, interval 1, probability 0, space 0, times 0 [ 217.326834][ T6793] CPU: 1 PID: 6793 Comm: syz.3.264 Not tainted syzkaller #0 [ 217.334241][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.344485][ T6793] Call Trace: [ 217.347817][ T6793] [ 217.350932][ T6793] dump_stack_lvl+0x18c/0x250 [ 217.355806][ T6793] ? show_regs_print_info+0x20/0x20 [ 217.361089][ T6793] ? load_image+0x420/0x420 [ 217.365634][ T6793] ? __might_sleep+0xe0/0xe0 [ 217.370355][ T6793] ? __lock_acquire+0x7d80/0x7d80 [ 217.375460][ T6793] should_fail_ex+0x394/0x4c0 [ 217.380219][ T6793] should_failslab+0x9/0x20 [ 217.384789][ T6793] slab_pre_alloc_hook+0x59/0x300 [ 217.389910][ T6793] kmem_cache_alloc+0x5a/0x2c0 [ 217.394759][ T6793] ? __anon_vma_prepare+0xb6/0x440 [ 217.399957][ T6793] __anon_vma_prepare+0xb6/0x440 [ 217.405012][ T6793] ? __pte_alloc+0x113/0x2a0 [ 217.409675][ T6793] handle_mm_fault+0x3ded/0x4a50 [ 217.414655][ T6793] ? handle_mm_fault+0xe6/0x4a50 [ 217.419915][ T6793] ? numa_migrate_prep+0x350/0x350 [ 217.425132][ T6793] __get_user_pages+0x604/0x1580 [ 217.430212][ T6793] ? populate_vma_page_range+0x380/0x380 [ 217.435938][ T6793] get_user_pages_remote+0x39e/0xb90 [ 217.441288][ T6793] ? printk_sprint+0x460/0x460 [ 217.446096][ T6793] ? get_dump_page+0x200/0x200 [ 217.450953][ T6793] ? down_read+0x1ac/0x2e0 [ 217.455443][ T6793] get_arg_page+0x274/0x560 [ 217.460067][ T6793] ? copy_string_kernel+0x220/0x220 [ 217.465318][ T6793] ? load_image+0x420/0x420 [ 217.469902][ T6793] copy_string_kernel+0x165/0x220 [ 217.475029][ T6793] do_execveat_common+0x35d/0x6b0 [ 217.480144][ T6793] __x64_sys_execveat+0xc4/0xe0 [ 217.485157][ T6793] do_syscall_64+0x55/0xb0 [ 217.489705][ T6793] ? clear_bhb_loop+0x40/0x90 [ 217.494444][ T6793] ? clear_bhb_loop+0x40/0x90 [ 217.499194][ T6793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.505195][ T6793] RIP: 0033:0x7f5b7a99e159 [ 217.509688][ T6793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.529562][ T6793] RSP: 002b:00007f5b7b842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 217.538147][ T6793] RAX: ffffffffffffffda RBX: 00007f5b7ac25fa0 RCX: 00007f5b7a99e159 [ 217.546352][ T6793] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffffff [ 217.554389][ T6793] RBP: 00007f5b7aa3506b R08: 0000000000001000 R09: 0000000000000000 [ 217.562419][ T6793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.570434][ T6793] R13: 00007f5b7ac26038 R14: 00007f5b7ac25fa0 R15: 00007ffd3aa8e138 [ 217.578546][ T6793] [ 220.226810][ T5818] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 220.477281][ T5818] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.500683][ T5818] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 220.528374][ T5818] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.543108][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.552535][ T5818] usb 2-1: Product: syz [ 220.561810][ T5818] usb 2-1: Manufacturer: syz [ 220.566835][ T5818] usb 2-1: SerialNumber: syz [ 220.589181][ T5818] cdc_mbim 2-1:1.0: skipping garbage [ 220.697390][ T5850] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 223.008877][ T5818] cdc_mbim 2-1:1.0: bind() failure [ 223.031025][ T5818] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 223.047780][ T5818] cdc_ncm 2-1:1.1: bind() failure [ 223.077117][ T5818] usb 2-1: USB disconnect, device number 13 [ 223.346447][ T5850] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 223.355261][ T5850] usb 4-1: config 0 has no interface number 0 [ 223.363540][ T5850] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.378527][ T5850] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 223.388170][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.396230][ T5850] usb 4-1: Product: syz [ 223.400603][ T5850] usb 4-1: Manufacturer: syz [ 223.405250][ T5850] usb 4-1: SerialNumber: syz [ 223.534301][ T5850] usb 4-1: config 0 descriptor?? [ 224.833205][ T5850] usb 4-1: can't set config #0, error -71 [ 224.882734][ T5850] usb 4-1: USB disconnect, device number 11 [ 225.319155][ T6814] FAULT_INJECTION: forcing a failure. [ 225.319155][ T6814] name failslab, interval 1, probability 0, space 0, times 0 [ 225.332548][ T6814] CPU: 1 PID: 6814 Comm: syz.0.277 Not tainted syzkaller #0 [ 225.339939][ T6814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.350062][ T6814] Call Trace: [ 225.353393][ T6814] [ 225.356374][ T6814] dump_stack_lvl+0x18c/0x250 [ 225.361122][ T6814] ? show_regs_print_info+0x20/0x20 [ 225.366384][ T6814] ? load_image+0x420/0x420 [ 225.371043][ T6814] ? _raw_write_lock_irq+0xbb/0xf0 [ 225.376217][ T6814] should_fail_ex+0x394/0x4c0 [ 225.380966][ T6814] should_failslab+0x9/0x20 [ 225.385502][ T6814] slab_pre_alloc_hook+0x59/0x300 [ 225.390580][ T6814] ? netlink_table_grab+0x259/0x2e0 [ 225.395876][ T6814] ? netlink_realloc_groups+0x118/0x320 [ 225.401491][ T6814] ? netlink_realloc_groups+0x118/0x320 [ 225.407080][ T6814] __kmem_cache_alloc_node+0x53/0x250 [ 225.412507][ T6814] ? netlink_realloc_groups+0x118/0x320 [ 225.418086][ T6814] __kmalloc_node_track_caller+0xa4/0x230 [ 225.423849][ T6814] krealloc+0x86/0x120 [ 225.427974][ T6814] netlink_realloc_groups+0x118/0x320 [ 225.433384][ T6814] ? aa_sk_perm+0x83c/0x970 [ 225.437961][ T6814] netlink_bind+0x2ab/0xd30 [ 225.442513][ T6814] ? netlink_release+0x1a70/0x1a70 [ 225.447670][ T6814] ? __might_fault+0xaa/0x120 [ 225.452387][ T6814] ? bpf_lsm_socket_bind+0x9/0x10 [ 225.457474][ T6814] ? security_socket_bind+0x80/0xa0 [ 225.462738][ T6814] __sys_bind+0x2f0/0x3f0 [ 225.467106][ T6814] ? __ia32_sys_socketpair+0xb0/0xb0 [ 225.472449][ T6814] __x64_sys_bind+0x7a/0x90 [ 225.476999][ T6814] do_syscall_64+0x55/0xb0 [ 225.481463][ T6814] ? clear_bhb_loop+0x40/0x90 [ 225.486183][ T6814] ? clear_bhb_loop+0x40/0x90 [ 225.490908][ T6814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.496842][ T6814] RIP: 0033:0x7f7828b9e159 [ 225.501296][ T6814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.520953][ T6814] RSP: 002b:00007f7829a60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 225.529416][ T6814] RAX: ffffffffffffffda RBX: 00007f7828e25fa0 RCX: 00007f7828b9e159 [ 225.537425][ T6814] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000008 [ 225.545427][ T6814] RBP: 00007f7828c3506b R08: 0000000000000000 R09: 0000000000000000 [ 225.553430][ T6814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.561436][ T6814] R13: 00007f7828e26038 R14: 00007f7828e25fa0 R15: 00007ffcc925e018 [ 225.569455][ T6814] [ 226.130988][ T6827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.276292][ T5086] Bluetooth: hci3: command 0x0c1a tx timeout [ 228.378062][ T6831] tipc: Started in network mode [ 228.383473][ T6831] tipc: Node identity 7f000001, cluster identity 4711 [ 228.391840][ T6831] tipc: New replicast peer: 127.0.0.1 [ 228.399038][ T6831] tipc: Enabled bearer , priority 10 [ 228.406714][ T6833] tipc: Disabling bearer [ 231.196966][ T6236] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 231.204937][ T5818] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 231.489060][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 231.663877][ T6236] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 231.707951][ T5818] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.774527][ T6236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.796184][ T5818] usb 4-1: config 0 has no interface number 0 [ 231.856764][ T6236] usb 2-1: Product: syz [ 231.863072][ T6236] usb 2-1: Manufacturer: syz [ 231.873353][ T5818] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 231.897665][ T6236] usb 2-1: SerialNumber: syz [ 231.904854][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.918311][ T6236] ums-karma 2-1:1.0: USB Mass Storage device detected [ 231.966770][ T5818] usb 4-1: Product: syz [ 231.971039][ T5818] usb 4-1: Manufacturer: syz [ 231.975693][ T5818] usb 4-1: SerialNumber: syz [ 231.996080][ T6236] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 231.996080][ T6236] Please send a copy of this message to and [ 232.025494][ T5818] usb 4-1: config 0 descriptor?? [ 232.042380][ T5818] usb 4-1: selecting invalid altsetting 2 [ 232.048762][ T5818] i2c-cp2615: probe of 4-1:0.1 failed with error -22 [ 232.138810][ T6845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.157859][ T6845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.177741][ T6845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.193184][ T6845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.268764][ T6843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.289038][ T6843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.320430][ T8] usb 4-1: USB disconnect, device number 12 [ 236.067049][ T6236] ums-karma: probe of 2-1:1.0 failed with error -5 [ 236.149438][ T6236] usb 2-1: USB disconnect, device number 14 [ 238.881458][ T6878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.651141][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 245.689632][ T5817] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 245.841527][ T8] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 245.851778][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.861631][ T8] usb 3-1: Product: syz [ 245.865978][ T8] usb 3-1: Manufacturer: syz [ 245.870884][ T8] usb 3-1: SerialNumber: syz [ 245.882131][ T8] ums-karma 3-1:1.0: USB Mass Storage device detected [ 245.893035][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 245.904448][ T8] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 245.904448][ T8] Please send a copy of this message to and [ 245.932053][ T5817] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 245.998622][ T5817] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 246.014261][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.307406][ T6906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.411612][ T6906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.583933][ T6906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.750168][ T6906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.892299][ T5817] usb 2-1: Product: syz [ 246.896663][ T5817] usb 2-1: Manufacturer: syz [ 246.901369][ T5817] usb 2-1: SerialNumber: syz [ 246.910098][ T5817] usb 2-1: config 0 descriptor?? [ 246.920211][ T5817] ums-sddr09 2-1:0.0: USB Mass Storage device detected [ 246.947779][ T5817] ums-sddr09 2-1:0.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 246.947779][ T5817] Please send a copy of this message to and [ 247.065777][ T5817] ums-sddr09: probe of 2-1:0.0 failed with error -22 [ 247.320852][ T8] ums-karma: probe of 3-1:1.0 failed with error -5 [ 247.343297][ T6931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.542097][ T8] usb 3-1: USB disconnect, device number 10 [ 248.300957][ T5818] usb 2-1: USB disconnect, device number 15 [ 248.378214][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.784778][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.807942][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.910785][ T6920] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.919983][ T6920] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.929650][ T6920] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.938852][ T6920] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.572172][ T6966] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 253.415683][ T6976] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 256.650933][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.664000][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.262369][ T7003] x_tables: ip6_tables: CT target: only valid in raw table, not [ 257.844177][ T7011] sch_tbf: burst 0 is lower than device lo mtu (1294) ! [ 258.103255][ T7018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.156696][ T788] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 259.596934][ T788] usb 1-1: Using ep0 maxpacket: 8 [ 259.660929][ T788] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 259.712138][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.768973][ T788] usb 1-1: Product: syz [ 259.788852][ T5818] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 259.808905][ T788] usb 1-1: Manufacturer: syz [ 259.844610][ T788] usb 1-1: SerialNumber: syz [ 259.949958][ T788] usb 1-1: config 0 descriptor?? [ 260.074596][ T5818] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 260.176004][ T5818] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 260.299251][ T5818] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 260.395484][ T788] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 260.417894][ T5818] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 260.454285][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.624306][ T788] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 262.696733][ T5818] usb 4-1: can't set config #1, error -71 [ 262.749576][ T5818] usb 4-1: USB disconnect, device number 13 [ 262.797195][ T6236] usb 1-1: USB disconnect, device number 11 [ 262.890107][ T7039] loop1: detected capacity change from 0 to 256 [ 262.924663][ T7039] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.946720][ T7039] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 262.980477][ T7039] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 263.002595][ T7039] exFAT-fs (loop1): failed to load alloc-bitmap [ 263.013180][ T7039] exFAT-fs (loop1): failed to recognize exfat type [ 263.180053][ T7046] x_tables: duplicate underflow at hook 3 [ 263.200670][ T7046] loop1: detected capacity change from 0 to 16 [ 263.268115][ T7046] erofs: (device loop1): mounted with root inode @ nid 36. [ 263.318143][ T7046] xt_hashlimit: size too large, truncated to 1048576 [ 263.406835][ T6236] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 263.613704][ T6236] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.663312][ T6236] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.686613][ T6236] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.723060][ T6236] usb 4-1: config 0 interface 0 has no altsetting 0 [ 263.736791][ T6236] usb 4-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00 [ 263.745927][ T6236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.789268][ T6236] usb 4-1: config 0 descriptor?? [ 264.215405][ T6236] input: HID 1b96:0011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:1B96:0011.0003/input/input7 [ 264.383414][ T6236] ntrig 0003:1B96:0011.0003: input,hidraw0: USB HID v0.04 Joystick [HID 1b96:0011] on usb-dummy_hcd.3-1/input0 [ 264.462746][ T6236] usb 4-1: USB disconnect, device number 14 [ 264.652543][ T7058] fido_id[7058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 266.976766][ T6236] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 267.192964][ T6236] usb 4-1: Using ep0 maxpacket: 8 [ 267.217222][ T6236] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 267.241174][ T6236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.254419][ T6236] usb 4-1: Product: syz [ 267.263355][ T6236] usb 4-1: Manufacturer: syz [ 267.268160][ T6236] usb 4-1: SerialNumber: syz [ 267.278668][ T6236] usb 4-1: config 0 descriptor?? [ 267.492150][ T6236] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 268.654536][ T7080] FAULT_INJECTION: forcing a failure. [ 268.654536][ T7080] name failslab, interval 1, probability 0, space 0, times 0 [ 268.667250][ T7080] CPU: 1 PID: 7080 Comm: syz.0.345 Not tainted syzkaller #0 [ 268.674592][ T7080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.684711][ T7080] Call Trace: [ 268.688026][ T7080] [ 268.691009][ T7080] dump_stack_lvl+0x18c/0x250 [ 268.695786][ T7080] ? show_regs_print_info+0x20/0x20 [ 268.701069][ T7080] ? load_image+0x420/0x420 [ 268.705621][ T7080] ? _raw_write_lock_irq+0xbb/0xf0 [ 268.710887][ T7080] should_fail_ex+0x394/0x4c0 [ 268.715818][ T7080] should_failslab+0x9/0x20 [ 268.720402][ T7080] slab_pre_alloc_hook+0x59/0x300 [ 268.725487][ T7080] ? netlink_table_grab+0x259/0x2e0 [ 268.730735][ T7080] ? netlink_realloc_groups+0x118/0x320 [ 268.736327][ T7080] ? netlink_realloc_groups+0x118/0x320 [ 268.741926][ T7080] __kmem_cache_alloc_node+0x53/0x250 [ 268.747381][ T7080] ? netlink_realloc_groups+0x118/0x320 [ 268.752975][ T7080] __kmalloc_node_track_caller+0xa4/0x230 [ 268.758749][ T7080] krealloc+0x86/0x120 [ 268.762866][ T7080] netlink_realloc_groups+0x118/0x320 [ 268.768282][ T7080] ? aa_sk_perm+0x83c/0x970 [ 268.773035][ T7080] netlink_bind+0x2ab/0xd30 [ 268.777743][ T7080] ? netlink_release+0x1a70/0x1a70 [ 268.782958][ T7080] ? __might_fault+0xaa/0x120 [ 268.787704][ T7080] ? bpf_lsm_socket_bind+0x9/0x10 [ 268.792778][ T7080] ? security_socket_bind+0x80/0xa0 [ 268.798012][ T7080] __sys_bind+0x2f0/0x3f0 [ 268.802377][ T7080] ? __ia32_sys_socketpair+0xb0/0xb0 [ 268.807705][ T7080] __x64_sys_bind+0x7a/0x90 [ 268.812239][ T7080] do_syscall_64+0x55/0xb0 [ 268.816697][ T7080] ? clear_bhb_loop+0x40/0x90 [ 268.821409][ T7080] ? clear_bhb_loop+0x40/0x90 [ 268.826119][ T7080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.832045][ T7080] RIP: 0033:0x7f7828b9e159 [ 268.836495][ T7080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.856138][ T7080] RSP: 002b:00007f7829a60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 268.864605][ T7080] RAX: ffffffffffffffda RBX: 00007f7828e25fa0 RCX: 00007f7828b9e159 [ 268.872709][ T7080] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000007 [ 268.880711][ T7080] RBP: 00007f7828c3506b R08: 0000000000000000 R09: 0000000000000000 [ 268.888708][ T7080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.896738][ T7080] R13: 00007f7828e26038 R14: 00007f7828e25fa0 R15: 00007ffcc925e018 [ 268.904786][ T7080] [ 269.154023][ T6236] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 269.186136][ T6236] usb 4-1: USB disconnect, device number 15 [ 272.350998][ T5818] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 273.372665][ T5818] usb 4-1: unable to get BOS descriptor or descriptor too short [ 273.382233][ T5818] usb 4-1: config 114 has an invalid interface number: 127 but max is 0 [ 273.390786][ T5818] usb 4-1: config 114 has no interface number 0 [ 273.397535][ T5818] usb 4-1: config 114 interface 127 has no altsetting 0 [ 273.407305][ T5818] usb 4-1: New USB device found, idVendor=2001, idProduct=3a05, bcdDevice=c2.02 [ 273.416444][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.424912][ T5818] usb 4-1: Product: syz [ 273.429196][ T5818] usb 4-1: Manufacturer: syz [ 273.435576][ T5818] usb 4-1: SerialNumber: syz [ 273.579353][ T5818] usb 4-1: Could not find all expected endpoints [ 273.603893][ T5818] usb 4-1: USB disconnect, device number 16 [ 274.099217][ T7117] FAULT_INJECTION: forcing a failure. [ 274.099217][ T7117] name failslab, interval 1, probability 0, space 0, times 0 [ 274.112008][ T7117] CPU: 0 PID: 7117 Comm: syz.0.356 Not tainted syzkaller #0 [ 274.119362][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.129497][ T7117] Call Trace: [ 274.132825][ T7117] [ 274.135836][ T7117] dump_stack_lvl+0x18c/0x250 [ 274.140557][ T7117] ? show_regs_print_info+0x20/0x20 [ 274.145793][ T7117] ? load_image+0x420/0x420 [ 274.150340][ T7117] ? _raw_write_lock_irq+0xbb/0xf0 [ 274.155493][ T7117] should_fail_ex+0x394/0x4c0 [ 274.160217][ T7117] should_failslab+0x9/0x20 [ 274.164785][ T7117] slab_pre_alloc_hook+0x59/0x300 [ 274.169854][ T7117] ? netlink_table_grab+0x259/0x2e0 [ 274.175084][ T7117] ? netlink_realloc_groups+0x118/0x320 [ 274.180707][ T7117] ? netlink_realloc_groups+0x118/0x320 [ 274.186316][ T7117] __kmem_cache_alloc_node+0x53/0x250 [ 274.191735][ T7117] ? netlink_realloc_groups+0x118/0x320 [ 274.197313][ T7117] __kmalloc_node_track_caller+0xa4/0x230 [ 274.203079][ T7117] krealloc+0x86/0x120 [ 274.207194][ T7117] netlink_realloc_groups+0x118/0x320 [ 274.212600][ T7117] ? aa_sk_perm+0x83c/0x970 [ 274.217140][ T7117] netlink_bind+0x2ab/0xd30 [ 274.221684][ T7117] ? netlink_release+0x1a70/0x1a70 [ 274.226834][ T7117] ? __might_fault+0xaa/0x120 [ 274.231549][ T7117] ? bpf_lsm_socket_bind+0x9/0x10 [ 274.236616][ T7117] ? security_socket_bind+0x80/0xa0 [ 274.241850][ T7117] __sys_bind+0x2f0/0x3f0 [ 274.246220][ T7117] ? __ia32_sys_socketpair+0xb0/0xb0 [ 274.251557][ T7117] __x64_sys_bind+0x7a/0x90 [ 274.256101][ T7117] do_syscall_64+0x55/0xb0 [ 274.260584][ T7117] ? clear_bhb_loop+0x40/0x90 [ 274.265315][ T7117] ? clear_bhb_loop+0x40/0x90 [ 274.270038][ T7117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.275969][ T7117] RIP: 0033:0x7f7828b9e159 [ 274.280414][ T7117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.300071][ T7117] RSP: 002b:00007f7829a60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 274.308532][ T7117] RAX: ffffffffffffffda RBX: 00007f7828e25fa0 RCX: 00007f7828b9e159 [ 274.316530][ T7117] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000007 [ 274.324529][ T7117] RBP: 00007f7828c3506b R08: 0000000000000000 R09: 0000000000000000 [ 274.332531][ T7117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.340538][ T7117] R13: 00007f7828e26038 R14: 00007f7828e25fa0 R15: 00007ffcc925e018 [ 274.348554][ T7117] [ 274.495846][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'. [ 274.545285][ T7130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.694407][ T7147] syz.2.354: attempt to access beyond end of device [ 279.694407][ T7147] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 282.036682][ T5850] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 282.236788][ T5850] usb 4-1: Using ep0 maxpacket: 8 [ 282.266893][ T5850] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 282.293375][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.317220][ T5850] usb 4-1: Product: syz [ 282.321498][ T5850] usb 4-1: Manufacturer: syz [ 282.343164][ T5850] usb 4-1: SerialNumber: syz [ 282.388616][ T7169] loop1: detected capacity change from 0 to 128 [ 282.398228][ T5850] usb 4-1: config 0 descriptor?? [ 282.417782][ T7165] FAULT_INJECTION: forcing a failure. [ 282.417782][ T7165] name failslab, interval 1, probability 0, space 0, times 0 [ 282.430475][ T7165] CPU: 0 PID: 7165 Comm: syz.0.368 Not tainted syzkaller #0 [ 282.437809][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.447914][ T7165] Call Trace: [ 282.451275][ T7165] [ 282.454249][ T7165] dump_stack_lvl+0x18c/0x250 [ 282.459001][ T7165] ? show_regs_print_info+0x20/0x20 [ 282.464269][ T7165] ? load_image+0x420/0x420 [ 282.468823][ T7165] ? _raw_write_lock_irq+0xbb/0xf0 [ 282.473981][ T7165] should_fail_ex+0x394/0x4c0 [ 282.478738][ T7165] should_failslab+0x9/0x20 [ 282.483317][ T7165] slab_pre_alloc_hook+0x59/0x300 [ 282.488395][ T7165] ? netlink_table_grab+0x259/0x2e0 [ 282.493677][ T7165] ? netlink_realloc_groups+0x118/0x320 [ 282.499273][ T7165] ? netlink_realloc_groups+0x118/0x320 [ 282.504855][ T7165] __kmem_cache_alloc_node+0x53/0x250 [ 282.510280][ T7165] ? netlink_realloc_groups+0x118/0x320 [ 282.515854][ T7165] __kmalloc_node_track_caller+0xa4/0x230 [ 282.521631][ T7165] krealloc+0x86/0x120 [ 282.525761][ T7165] netlink_realloc_groups+0x118/0x320 [ 282.531220][ T7165] ? aa_sk_perm+0x83c/0x970 [ 282.535814][ T7165] netlink_bind+0x2ab/0xd30 [ 282.540388][ T7165] ? netlink_release+0x1a70/0x1a70 [ 282.545566][ T7165] ? __might_fault+0xaa/0x120 [ 282.550338][ T7165] ? bpf_lsm_socket_bind+0x9/0x10 [ 282.555414][ T7165] ? security_socket_bind+0x80/0xa0 [ 282.560649][ T7165] __sys_bind+0x2f0/0x3f0 [ 282.565039][ T7165] ? __ia32_sys_socketpair+0xb0/0xb0 [ 282.570383][ T7165] __x64_sys_bind+0x7a/0x90 [ 282.574957][ T7165] do_syscall_64+0x55/0xb0 [ 282.579412][ T7165] ? clear_bhb_loop+0x40/0x90 [ 282.584154][ T7165] ? clear_bhb_loop+0x40/0x90 [ 282.588871][ T7165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.594805][ T7165] RIP: 0033:0x7f7828b9e159 [ 282.599259][ T7165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.618900][ T7165] RSP: 002b:00007f7829a3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 282.627349][ T7165] RAX: ffffffffffffffda RBX: 00007f7828e26090 RCX: 00007f7828b9e159 [ 282.635355][ T7165] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000008 [ 282.643358][ T7165] RBP: 00007f7828c3506b R08: 0000000000000000 R09: 0000000000000000 [ 282.651359][ T7165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.659390][ T7165] R13: 00007f7828e26128 R14: 00007f7828e26090 R15: 00007ffcc925e018 [ 282.667407][ T7165] [ 282.716425][ T5850] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 282.813161][ T7172] syz.1.369: attempt to access beyond end of device [ 282.813161][ T7172] loop1: rw=2049, sector=145, nr_sectors = 408 limit=128 [ 282.973213][ T7172] syz.1.369: attempt to access beyond end of device [ 282.973213][ T7172] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 282.991196][ T7172] syz.1.369: attempt to access beyond end of device [ 282.991196][ T7172] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 283.015000][ T7172] syz.1.369: attempt to access beyond end of device [ 283.015000][ T7172] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 283.055561][ T7172] syz.1.369: attempt to access beyond end of device [ 283.055561][ T7172] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 284.301370][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 284.314055][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 284.321749][ T5850] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 284.346000][ T5850] usb 4-1: USB disconnect, device number 17 [ 289.722668][ T6935] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 290.530816][ T6935] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 290.547847][ T6935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.555961][ T6935] usb 1-1: Product: syz [ 290.575847][ T6935] usb 1-1: Manufacturer: syz [ 290.582292][ T6935] usb 1-1: SerialNumber: syz [ 291.354422][ T7235] loop1: detected capacity change from 0 to 2048 [ 291.486419][ T7235] loop1: p1 < > p4 [ 291.486419][ T7235] p4: [ 291.597121][ T7235] loop1: p4 size 722688 extends beyond EOD, truncated [ 293.020440][ T7240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.061595][ T7240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.035417][ T7225] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.043971][ T7225] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.186804][ T6935] (unnamed net_device) (uninitialized): Assigned a random MAC address: b6:15:12:7e:26:be [ 295.269762][ T7225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.323400][ T7255] dccp_invalid_packet: pskb_may_pull failed [ 295.329205][ T7225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.774053][ T7225] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.783740][ T7225] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.793252][ T7225] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.802420][ T7225] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.938269][ T7236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.388'. [ 296.124081][ T7246] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 296.132832][ T6935] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 296.193054][ T6935] usb 1-1: USB disconnect, device number 12 [ 296.776916][ T6935] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 296.977660][ T6935] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 296.993620][ T6935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.002457][ T6935] usb 1-1: Product: syz [ 297.011702][ T6935] usb 1-1: Manufacturer: syz [ 297.017402][ T6935] usb 1-1: SerialNumber: syz [ 297.047543][ T6935] ums-karma 1-1:1.0: USB Mass Storage device detected [ 297.063250][ T6935] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 297.063250][ T6935] Please send a copy of this message to and [ 297.249292][ T7265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.258519][ T7265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.277805][ T7265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.289078][ T7265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.742220][ T6935] ums-karma: probe of 1-1:1.0 failed with error -5 [ 297.759184][ T6935] usb 1-1: USB disconnect, device number 13 [ 297.806607][ T6937] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 298.003394][ T6937] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 298.013905][ T6937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.023407][ T6937] usb 4-1: Product: syz [ 298.027840][ T6937] usb 4-1: Manufacturer: syz [ 298.032593][ T6937] usb 4-1: SerialNumber: syz [ 298.814415][ T7288] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 299.087686][ T28] audit: type=1326 audit(1790952261.750:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7828b9e159 code=0x7ffc0000 [ 299.181621][ T28] audit: type=1326 audit(1790952261.750:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7828b9e159 code=0x7ffc0000 [ 300.175866][ T28] audit: type=1326 audit(1790952261.750:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7828b9e159 code=0x7ffc0000 [ 300.201945][ T28] audit: type=1326 audit(1790952261.750:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7828b9e159 code=0x7ffc0000 [ 300.317887][ T28] audit: type=1326 audit(1790952261.750:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f7828b9e159 code=0x7ffc0000 [ 300.344266][ T28] audit: type=1326 audit(1790952261.750:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7828b9e159 code=0x7ffc0000 [ 300.474634][ T28] audit: type=1326 audit(1790952261.750:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7828b9e159 code=0x7ffc0000 [ 300.499735][ T6236] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 300.776300][ T28] audit: type=1326 audit(1790952261.750:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7828b9e159 code=0x7ffc0000 [ 300.786787][ T6236] usb 1-1: New USB device found, idVendor=22b8, idProduct=2d99, bcdDevice=fb.a5 [ 300.813197][ T28] audit: type=1326 audit(1790952261.750:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7828b9e159 code=0x7ffc0000 [ 300.839717][ T6236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.850597][ T6236] usb 1-1: Product: syz [ 300.855515][ T28] audit: type=1326 audit(1790952261.760:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.401" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7828b9e159 code=0x7ffc0000 [ 300.880000][ T6236] usb 1-1: Manufacturer: syz [ 300.884783][ T6236] usb 1-1: SerialNumber: syz [ 300.966930][ T7294] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 300.989775][ T6937] (unnamed net_device) (uninitialized): Assigned a random MAC address: de:f9:bf:94:00:de [ 301.010424][ T6937] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 302.257848][ T6236] usb 1-1: USB disconnect, device number 14 [ 302.285234][ T7308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.307625][ T7308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.583182][ T6236] usb 4-1: USB disconnect, device number 18 [ 303.446699][ T6937] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 303.481876][ T7346] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 303.515251][ T7347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.639351][ T6937] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 303.654540][ T6937] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 303.712493][ T6937] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 303.728465][ T6937] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 303.741114][ T6937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.825734][ T7338] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 303.839671][ T7338] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 303.881720][ T6937] pl2303 3-1:1.0: required interrupt-in endpoint missing [ 304.316564][ T7360] loop2: detected capacity change from 0 to 512 [ 304.581466][ T7360] ------------[ cut here ]------------ [ 304.587451][ T7360] EA inode 11 i_nlink=0 [ 304.587882][ T7360] WARNING: CPU: 1 PID: 7360 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 304.602458][ T7360] Modules linked in: [ 304.606455][ T7360] CPU: 1 PID: 7360 Comm: syz.2.411 Not tainted syzkaller #0 [ 304.613831][ T7360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.624063][ T7360] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 304.630842][ T7360] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 91 f5 98 ff 49 8b 34 24 48 c7 c7 60 df de 8a 44 89 fa e8 5e 2d 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 d8 27 4a 08 [ 304.650781][ T7360] RSP: 0018:ffffc900047b7360 EFLAGS: 00010246 [ 304.657089][ T7360] RAX: 931d8c00f5357e00 RBX: ffff88805ca1e8a8 RCX: 0000000000080000 [ 304.665604][ T7360] RDX: ffffc9000e1b7000 RSI: 0000000000025201 RDI: 0000000000025202 [ 304.673850][ T7360] RBP: ffffc900047b7450 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 304.682000][ T7360] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff88805ca1e700 [ 304.690056][ T7360] R13: ffffc900047b73c0 R14: dffffc0000000000 R15: 0000000000000000 [ 304.698122][ T7360] FS: 00007f9381d246c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 304.707465][ T7360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.714113][ T7360] CR2: 00007fa29ee69000 CR3: 000000002f8d7000 CR4: 00000000003506e0 [ 304.722188][ T7360] Call Trace: [ 304.725550][ T7360] [ 304.728685][ T7360] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 304.734400][ T7360] ? __ext4_journal_ensure_credits+0x30/0x450 [ 304.740660][ T7360] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 304.746768][ T7360] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 304.752484][ T7360] ext4_xattr_delete_inode+0xb3b/0xd00 [ 304.758083][ T7360] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 304.764217][ T7360] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 304.770428][ T7360] ext4_evict_inode+0xa88/0xe70 [ 304.775371][ T7360] ? evict+0x482/0x8a0 [ 304.779681][ T7360] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 304.785674][ T7360] ? do_raw_spin_unlock+0x121/0x230 [ 304.791112][ T7360] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 304.797151][ T7360] evict+0x4b7/0x8a0 [ 304.801114][ T7360] ? __lock_acquire+0x7d80/0x7d80 [ 304.806200][ T7360] ? proc_nr_inodes+0x230/0x230 [ 304.811209][ T7360] ? do_raw_spin_unlock+0x121/0x230 [ 304.816599][ T7360] ? _raw_spin_unlock+0x28/0x40 [ 304.821589][ T7360] ext4_orphan_cleanup+0xdff/0x1650 [ 304.826923][ T7360] ? preempt_schedule_thunk+0x1a/0x30 [ 304.832398][ T7360] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 304.838784][ T7360] ? ext4_orphan_del+0xc90/0xc90 [ 304.843804][ T7360] ? ext4_register_li_request+0x182/0x930 [ 304.849630][ T7360] ? errseq_check_and_advance+0x66/0x120 [ 304.855348][ T7360] ext4_fill_super+0x5fb5/0x6870 [ 304.860463][ T7360] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 304.866848][ T7360] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 304.873459][ T7360] ? preempt_schedule_notrace+0x110/0x110 [ 304.879465][ T7360] ? lock_chain_count+0x20/0x20 [ 304.884405][ T7360] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 304.890157][ T7360] ? get_tree_bdev+0x34f/0x520 [ 304.895005][ T7360] get_tree_bdev+0x3e5/0x520 [ 304.899719][ T7360] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 304.906082][ T7360] ? setup_bdev_super+0x660/0x660 [ 304.911254][ T7360] vfs_get_tree+0x8c/0x280 [ 304.915751][ T7360] do_new_mount+0x24a/0xa40 [ 304.920421][ T7360] __se_sys_mount+0x2e7/0x3d0 [ 304.925171][ T7360] ? __x64_sys_mount+0xc0/0xc0 [ 304.930154][ T7360] ? syscall_enter_from_user_mode+0x2e/0x80 [ 304.936113][ T7360] ? __x64_sys_mount+0x20/0xc0 [ 304.940989][ T7360] do_syscall_64+0x55/0xb0 [ 304.945472][ T7360] ? clear_bhb_loop+0x40/0x90 [ 304.950268][ T7360] ? clear_bhb_loop+0x40/0x90 [ 304.955022][ T7360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.961059][ T7360] RIP: 0033:0x7f9380d9f3ca [ 304.965537][ T7360] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.985938][ T7360] RSP: 002b:00007f9381d23e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 304.994654][ T7360] RAX: ffffffffffffffda RBX: 00007f9381d23ee0 RCX: 00007f9380d9f3ca [ 305.002745][ T7360] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f9381d23ea0 [ 305.010831][ T7360] RBP: 0000200000000180 R08: 00007f9381d23ee0 R09: 0000000000000000 [ 305.018975][ T7360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 305.027055][ T7360] R13: 00007f9381d23ea0 R14: 000000000000048d R15: 000000000000002c [ 305.035107][ T7360] [ 305.038269][ T7360] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 305.045626][ T7360] CPU: 1 PID: 7360 Comm: syz.2.411 Not tainted syzkaller #0 [ 305.053079][ T7360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.063191][ T7360] Call Trace: [ 305.066513][ T7360] [ 305.069487][ T7360] dump_stack_lvl+0x18c/0x250 [ 305.074246][ T7360] ? show_regs_print_info+0x20/0x20 [ 305.079563][ T7360] ? load_image+0x420/0x420 [ 305.084145][ T7360] panic+0x2ca/0x720 [ 305.088112][ T7360] ? bpf_jit_dump+0xd0/0xd0 [ 305.092690][ T7360] __warn+0x2e0/0x470 [ 305.096741][ T7360] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 305.102781][ T7360] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 305.108834][ T7360] report_bug+0x2be/0x4f0 [ 305.113243][ T7360] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 305.119273][ T7360] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 305.125290][ T7360] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 305.131330][ T7360] handle_bug+0xcf/0x120 [ 305.135654][ T7360] exc_invalid_op+0x1a/0x50 [ 305.140359][ T7360] asm_exc_invalid_op+0x1a/0x20 [ 305.145287][ T7360] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 305.151938][ T7360] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 91 f5 98 ff 49 8b 34 24 48 c7 c7 60 df de 8a 44 89 fa e8 5e 2d 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 d8 27 4a 08 [ 305.171607][ T7360] RSP: 0018:ffffc900047b7360 EFLAGS: 00010246 [ 305.177850][ T7360] RAX: 931d8c00f5357e00 RBX: ffff88805ca1e8a8 RCX: 0000000000080000 [ 305.185894][ T7360] RDX: ffffc9000e1b7000 RSI: 0000000000025201 RDI: 0000000000025202 [ 305.193923][ T7360] RBP: ffffc900047b7450 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 305.201940][ T7360] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff88805ca1e700 [ 305.209971][ T7360] R13: ffffc900047b73c0 R14: dffffc0000000000 R15: 0000000000000000 [ 305.218019][ T7360] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 305.223708][ T7360] ? __ext4_journal_ensure_credits+0x30/0x450 [ 305.229826][ T7360] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 305.235903][ T7360] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 305.241630][ T7360] ext4_xattr_delete_inode+0xb3b/0xd00 [ 305.247155][ T7360] ? ext4_expand_extra_isize_ea+0x1ea0/0x1ea0 [ 305.253307][ T7360] ? __ext4_mark_inode_dirty+0x50d/0x720 [ 305.259024][ T7360] ext4_evict_inode+0xa88/0xe70 [ 305.264031][ T7360] ? evict+0x482/0x8a0 [ 305.268180][ T7360] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 305.274146][ T7360] ? do_raw_spin_unlock+0x121/0x230 [ 305.279412][ T7360] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 305.285381][ T7360] evict+0x4b7/0x8a0 [ 305.289333][ T7360] ? __lock_acquire+0x7d80/0x7d80 [ 305.294395][ T7360] ? proc_nr_inodes+0x230/0x230 [ 305.299464][ T7360] ? do_raw_spin_unlock+0x121/0x230 [ 305.304702][ T7360] ? _raw_spin_unlock+0x28/0x40 [ 305.309599][ T7360] ext4_orphan_cleanup+0xdff/0x1650 [ 305.314852][ T7360] ? preempt_schedule_thunk+0x1a/0x30 [ 305.320307][ T7360] ? ext4_orphan_file_block_trigger+0x440/0x440 [ 305.326623][ T7360] ? ext4_orphan_del+0xc90/0xc90 [ 305.331619][ T7360] ? ext4_register_li_request+0x182/0x930 [ 305.337417][ T7360] ? errseq_check_and_advance+0x66/0x120 [ 305.343088][ T7360] ext4_fill_super+0x5fb5/0x6870 [ 305.348088][ T7360] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 305.354373][ T7360] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 305.360408][ T7360] ? preempt_schedule_notrace+0x110/0x110 [ 305.366214][ T7360] ? lock_chain_count+0x20/0x20 [ 305.371136][ T7360] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 305.376828][ T7360] ? get_tree_bdev+0x34f/0x520 [ 305.381669][ T7360] get_tree_bdev+0x3e5/0x520 [ 305.386328][ T7360] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 305.392633][ T7360] ? setup_bdev_super+0x660/0x660 [ 305.397722][ T7360] vfs_get_tree+0x8c/0x280 [ 305.402261][ T7360] do_new_mount+0x24a/0xa40 [ 305.406812][ T7360] __se_sys_mount+0x2e7/0x3d0 [ 305.411540][ T7360] ? __x64_sys_mount+0xc0/0xc0 [ 305.416353][ T7360] ? syscall_enter_from_user_mode+0x2e/0x80 [ 305.422319][ T7360] ? __x64_sys_mount+0x20/0xc0 [ 305.427122][ T7360] do_syscall_64+0x55/0xb0 [ 305.431577][ T7360] ? clear_bhb_loop+0x40/0x90 [ 305.436349][ T7360] ? clear_bhb_loop+0x40/0x90 [ 305.441205][ T7360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.447161][ T7360] RIP: 0033:0x7f9380d9f3ca [ 305.451643][ T7360] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.471355][ T7360] RSP: 002b:00007f9381d23e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 305.479905][ T7360] RAX: ffffffffffffffda RBX: 00007f9381d23ee0 RCX: 00007f9380d9f3ca [ 305.488036][ T7360] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f9381d23ea0 [ 305.496148][ T7360] RBP: 0000200000000180 R08: 00007f9381d23ee0 R09: 0000000000000000 [ 305.504175][ T7360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 305.512189][ T7360] R13: 00007f9381d23ea0 R14: 000000000000048d R15: 000000000000002c [ 305.520233][ T7360] [ 305.523893][ T7360] Kernel Offset: disabled [ 305.528332][ T7360] Rebooting in 86400 seconds..