last executing test programs: 3m23.902067862s ago: executing program 0 (id=26): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42003, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x1) 3m23.582381626s ago: executing program 0 (id=29): io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) 3m23.30044177s ago: executing program 0 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3m22.227827449s ago: executing program 0 (id=33): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) open(&(0x7f0000000280)='./bus\x00', 0x48a7e, 0x28) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) close_range(r1, 0xffffffffffffffff, 0x0) 3m20.662548721s ago: executing program 0 (id=39): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x7e) 3m18.530374009s ago: executing program 0 (id=48): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42003, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x1) 3m17.789786573s ago: executing program 32 (id=48): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42003, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x1) 8.571992006s ago: executing program 4 (id=651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) 8.018977391s ago: executing program 4 (id=652): syz_emit_ethernet(0x1f, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff006c000000000011424203", @ANYRESHEX], 0x0) 7.883182547s ago: executing program 4 (id=653): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.756878271s ago: executing program 1 (id=662): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x5, 0x0, 0x9, 0x7, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x100}}, 0x40) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x108, 0x13, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0xad, 0x8, "bfd7a4d86969e824b81a5f41ed96899481874a9a3323c3d8ffaa07ad083dad9ffb137a4e06f6ffbf52f821e59fd123309fda4da7082f5f9445c1d41b383384291cdb05720203ee576f68e6fdc4f96ac67f314a3ab2890e8c1c7356b12d0ce200c99f4de0980f5ef90b009ff03b0311804d178bbf5e2da637e613172564f0b0127aa41735b9bc86606dfd6b912f34cfae6eb22f3d8f05600930aaaefaa538c07a5419e8cfe0f6d99df7"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x108}, 0x1, 0x0, 0x0, 0x11}, 0x0) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$IPC_RMID(r4, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20b00, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x800000000000000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x1, 'bond0\x00', {}, 0x240}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) sendmsg$inet6(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e23, 0x180000, @local, 0xffffffff}, 0x1c, 0x0}, 0x30000004) 4.756066021s ago: executing program 2 (id=663): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYRES64=0x0], 0x1, 0x2cb, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4102, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) read$FUSE(r0, 0x0, 0x0) 4.427927986s ago: executing program 4 (id=664): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x80201, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f0000000000)="4400000030000504010000000000000000000000300001802c0001800900010067617465000000001c00028018000200"/68, 0x44, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 4.037333374s ago: executing program 2 (id=666): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='udf\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x8, 0x4, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x2, 0x0) sync() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00001dc000/0x1000)=nil], 0x0, &(0x7f0000001680), 0x0) sync() sync() sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffe) 2.381330931s ago: executing program 1 (id=669): bind$alg(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000a00)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xa) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) 2.252792186s ago: executing program 3 (id=670): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x36, &(0x7f0000000700)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "00001e", 0x0, 0x2b, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2}}}}, 0x0) 2.190494999s ago: executing program 2 (id=671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) 2.058589855s ago: executing program 3 (id=672): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = eventfd(0x7fff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000380)=r4, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9e}}}, 0x0) 1.683008152s ago: executing program 3 (id=673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x3c, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4841}, 0x24000004) 1.629435655s ago: executing program 1 (id=674): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) close(0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.432933064s ago: executing program 3 (id=675): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) close(0x3) 1.431674514s ago: executing program 2 (id=676): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000780)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x0, 0xff, @empty, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x11162, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_flash={0x33, 0x5, './file0/file0/../file0\x00'}}) listen(r1, 0x80000001) sendmmsg(r1, &(0x7f0000000540), 0x0, 0xc8844) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40015) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r3, &(0x7f0000000900)="2e552f5d9fd8b0d9627c49f8f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0) 1.321240909s ago: executing program 3 (id=677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 520.844276ms ago: executing program 4 (id=678): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8000) 444.15969ms ago: executing program 1 (id=679): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="8000010018000000180034801400350069703665727370616e", @ANYBLOB='4'], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100}, 0x2800804c) 371.925463ms ago: executing program 2 (id=680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0xc12b353450a9d23d}, 0x20008000) 360.751093ms ago: executing program 3 (id=681): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000240), 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') 232.221529ms ago: executing program 1 (id=682): unshare(0x26020480) r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbd4e85ec82d10000000c848722ba3b132e4fde178c945bd950b0000e801fc8a1be9b4ebbe9c228ba6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x97) 199.096851ms ago: executing program 4 (id=683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x3c, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4841}, 0x24000004) 167.739042ms ago: executing program 2 (id=684): bind$alg(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_emit_vhci(0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) 0s ago: executing program 1 (id=685): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x3) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") write(r0, &(0x7f0000000138)='\t\x00\x00\x00\x00', 0x5) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000000000000000000006e0100003801") kernel console output (not intermixed with test programs): 116.905770][ T5760] usb usb5-port1: attempt power cycle [ 116.927549][ T6515] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.964405][ T6515] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 116.984136][ T6515] BTRFS info (device loop3): enabling ssd optimizations [ 116.991603][ T6515] BTRFS info (device loop3): using spread ssd allocation scheme [ 117.003143][ T6515] BTRFS error (device loop3): unrecognized mount option 'fragment=data' [ 117.334830][ T5760] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.848106][ T6515] BTRFS error (device loop3): open_ctree failed: -22 [ 117.854405][ T5881] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (5881) [ 117.876653][ T5760] usb 5-1: device descriptor read/8, error -71 [ 118.157951][ T5760] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 118.257903][ T5760] usb 5-1: device descriptor read/8, error -71 [ 118.377880][ T5760] usb usb5-port1: unable to enumerate USB device [ 118.941055][ T6549] loop3: detected capacity change from 0 to 40427 [ 118.979451][ T6549] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 118.999874][ T6549] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 119.008953][ T6549] F2FS-fs (loop3): Unrecognized mount option "f2fs" or missing value [ 119.104787][ C1] net_ratelimit: 56 callbacks suppressed [ 119.185088][ T5778] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 119.661186][ T23] IPVS: starting estimator thread 0... [ 119.755761][ T6565] IPVS: using max 20 ests per chain, 48000 per kthread [ 119.789533][ T6567] process 'syz.3.178' launched './file2' with NULL argv: empty string added [ 120.178986][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.225639][ T5760] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.345005][ T8] usb 3-1: device descriptor read/64, error -71 [ 120.427375][ T5760] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 120.455099][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.476562][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.497574][ T5760] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 120.526469][ T5760] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 120.545625][ T5760] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 120.555887][ T5760] usb 4-1: Manufacturer: syz [ 120.658885][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.668337][ T5760] usb 4-1: config 0 descriptor?? [ 120.856125][ T8] usb 3-1: device descriptor read/64, error -71 [ 120.984964][ T8] usb usb3-port1: attempt power cycle [ 121.188758][ T6591] loop4: detected capacity change from 0 to 32768 [ 121.213215][ T6575] loop1: detected capacity change from 0 to 65536 [ 121.221700][ T6591] (syz.4.181,6591,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear [ 121.221700][ T6591] " or missing value [ 121.245496][ T6591] (syz.4.181,6591,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 121.319527][ T5760] usbhid 4-1:0.0: can't add hid device: -71 [ 121.337590][ T5760] usbhid: probe of 4-1:0.0 failed with error -71 [ 121.351044][ T6575] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 121.370480][ T5760] usb 4-1: USB disconnect, device number 5 [ 121.444799][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 121.515783][ T8] usb 3-1: device descriptor read/8, error -71 [ 121.581241][ T6575] XFS (loop1): Ending clean mount [ 121.825006][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 121.865556][ T8] usb 3-1: device descriptor read/8, error -71 [ 122.020538][ T8] usb usb3-port1: unable to enumerate USB device [ 122.587244][ T6617] loop4: detected capacity change from 0 to 40427 [ 122.611785][ T6617] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 122.631768][ T6617] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 122.662400][ T6617] F2FS-fs (loop4): Unrecognized mount option "f2fs" or missing value [ 122.882325][ T6640] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.266999][ T6575] syz.1.180 (6575) used greatest stack depth: 20208 bytes left [ 124.001207][ T6655] loop2: detected capacity change from 0 to 128 [ 124.128742][ T5777] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 124.304776][ C1] net_ratelimit: 47 callbacks suppressed [ 124.373547][ T6666] Could not find key with description: [0123456789abcdef] [ 124.415075][ T6666] process_request_key_err: No key [ 124.420126][ T6666] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef] [ 124.495062][ T6666] One or more global auth toks could not properly register; rc = [-2] [ 124.507046][ T6666] Error parsing options; rc = [-2] [ 125.474778][ T5760] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 125.644832][ T5760] usb 3-1: device descriptor read/64, error -71 [ 125.719793][ T6674] loop4: detected capacity change from 0 to 40427 [ 125.739687][ T6674] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 125.757612][ T6674] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 125.777177][ T6674] F2FS-fs (loop4): Unrecognized mount option "f2fs" or missing value [ 125.935258][ T5760] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 126.019566][ T6693] binder: 6691:6693 ioctl c0306201 0 returned -14 [ 126.105803][ T5760] usb 3-1: device descriptor read/64, error -71 [ 126.257823][ T6695] FAULT_INJECTION: forcing a failure. [ 126.257823][ T6695] name failslab, interval 1, probability 0, space 0, times 0 [ 126.271234][ T6695] CPU: 0 PID: 6695 Comm: syz.1.197 Not tainted syzkaller #0 [ 126.278566][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.288672][ T6695] Call Trace: [ 126.291963][ T6695] [ 126.295158][ T6695] dump_stack_lvl+0x18c/0x250 [ 126.299868][ T6695] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 126.304936][ T6695] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.311049][ T6695] ? show_regs_print_info+0x20/0x20 [ 126.316292][ T6695] ? load_image+0x420/0x420 [ 126.320890][ T6695] should_fail_ex+0x394/0x4c0 [ 126.325624][ T6695] should_failslab+0x9/0x20 [ 126.330166][ T6695] slab_pre_alloc_hook+0x59/0x300 [ 126.335210][ T6695] ? hash_net4_add+0xde0/0x2690 [ 126.335242][ T6695] ? hash_net4_add+0xde0/0x2690 [ 126.335265][ T6695] __kmem_cache_alloc_node+0x53/0x250 [ 126.335297][ T6695] ? hash_net4_add+0xde0/0x2690 [ 126.335319][ T6695] __kmalloc+0xa7/0x240 [ 126.335346][ T6695] ? hash_net4_add+0x803/0x2690 [ 126.345190][ T6695] ? hash_net4_add+0x76/0x2690 [ 126.345227][ T6695] hash_net4_add+0xde0/0x2690 [ 126.345253][ T6695] ? hash_net4_add+0x76/0x2690 [ 126.345303][ T6695] hash_net4_uadt+0x747/0x930 [ 126.345333][ T6695] ? hash_net4_uadt+0x930/0x930 [ 126.360157][ T6695] ? hash_net4_kadt+0x550/0x550 [ 126.393697][ T6695] ? __nla_validate_parse+0x25fa/0x2fd0 [ 126.399279][ T6695] ? __lock_acquire+0x1262/0x7d80 [ 126.404312][ T6695] call_ad+0x185/0xb30 [ 126.408395][ T6695] ? ip_set_ad+0x9c0/0x9c0 [ 126.412827][ T6695] ? __nla_parse+0x40/0x50 [ 126.417258][ T6695] ip_set_ad+0x81a/0x9c0 [ 126.421515][ T6695] ? ip_set_dump_done+0x320/0x320 [ 126.426547][ T6695] ? rcu_is_watching+0x15/0xb0 [ 126.431349][ T6695] nfnetlink_rcv_msg+0xcaf/0x1290 [ 126.436406][ T6695] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.442503][ T6695] ? nfnetlink_rcv_msg+0x228/0x1290 [ 126.447753][ T6695] ? nfnetlink_unbind+0x160/0x160 [ 126.452834][ T6695] ? __dev_queue_xmit+0x1be8/0x37e0 [ 126.458055][ T6695] ? __netlink_deliver_tap+0x579/0x7f0 [ 126.463524][ T6695] ? netlink_deliver_tap+0x19c/0x1b0 [ 126.468815][ T6695] ? netlink_unicast+0x77b/0x930 [ 126.473777][ T6695] ? netlink_sendmsg+0x8d0/0xbf0 [ 126.478716][ T6695] ? ____sys_sendmsg+0x61b/0x980 [ 126.483663][ T6695] ? ___sys_sendmsg+0x2a6/0x360 [ 126.488515][ T6695] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 126.493545][ T6695] ? do_syscall_64+0x55/0xb0 [ 126.498156][ T6695] netlink_rcv_skb+0x235/0x4c0 [ 126.502952][ T6695] ? nfnetlink_unbind+0x160/0x160 [ 126.507986][ T6695] ? netlink_ack+0x1160/0x1160 [ 126.512773][ T6695] ? apparmor_capable+0x137/0x1a0 [ 126.517805][ T6695] ? bpf_lsm_capable+0x9/0x10 [ 126.522482][ T6695] ? security_capable+0x89/0xb0 [ 126.527342][ T6695] nfnetlink_rcv+0x2c9/0x2490 [ 126.532028][ T6695] ? __local_bh_enable_ip+0x13a/0x1c0 [ 126.537464][ T6695] ? lockdep_hardirqs_on+0x98/0x150 [ 126.542673][ T6695] ? __local_bh_enable_ip+0x13a/0x1c0 [ 126.548052][ T6695] ? _local_bh_enable+0xa0/0xa0 [ 126.552909][ T6695] ? __dev_queue_xmit+0x272/0x37e0 [ 126.558028][ T6695] ? __dev_queue_xmit+0x1329/0x37e0 [ 126.563246][ T6695] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 126.568811][ T6695] ? __dev_queue_xmit+0x272/0x37e0 [ 126.573945][ T6695] ? ref_tracker_free+0x686/0x830 [ 126.578995][ T6695] ? refcount_inc+0x70/0x70 [ 126.583524][ T6695] ? __asan_memcpy+0x40/0x70 [ 126.588146][ T6695] ? __skb_clone+0x5c/0x6c0 [ 126.592664][ T6695] ? __skb_clone+0x446/0x6c0 [ 126.597273][ T6695] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.603315][ T6695] ? __lock_acquire+0x7d80/0x7d80 [ 126.608380][ T6695] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.613609][ T6695] netlink_unicast+0x7b1/0x930 [ 126.618393][ T6695] netlink_sendmsg+0x8d0/0xbf0 [ 126.623184][ T6695] ? netlink_getsockopt+0x590/0x590 [ 126.628394][ T6695] ? apparmor_socket_sendmsg+0x170/0x330 [ 126.634038][ T6695] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 126.639332][ T6695] ? security_socket_sendmsg+0x80/0xa0 [ 126.644815][ T6695] ? netlink_getsockopt+0x590/0x590 [ 126.650033][ T6695] ____sys_sendmsg+0x61b/0x980 [ 126.654820][ T6695] ? __asan_memset+0x22/0x40 [ 126.659417][ T6695] ? __sys_sendmsg_sock+0x30/0x30 [ 126.664443][ T6695] ? __import_iovec+0x5f2/0x850 [ 126.669311][ T6695] ? import_iovec+0x73/0xa0 [ 126.673820][ T6695] ___sys_sendmsg+0x2a6/0x360 [ 126.678508][ T6695] ? __sys_sendmsg+0x2b0/0x2b0 [ 126.683314][ T6695] __se_sys_sendmsg+0x1d0/0x2c0 [ 126.688184][ T6695] ? __x64_sys_sendmsg+0x80/0x80 [ 126.693137][ T6695] ? lockdep_hardirqs_on+0x98/0x150 [ 126.698345][ T6695] do_syscall_64+0x55/0xb0 [ 126.702789][ T6695] ? clear_bhb_loop+0x40/0x90 [ 126.707488][ T6695] ? clear_bhb_loop+0x40/0x90 [ 126.712183][ T6695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.718100][ T6695] RIP: 0033:0x7f202ed9e159 [ 126.722531][ T6695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.742138][ T6695] RSP: 002b:00007f202fc1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.742184][ T6695] RAX: ffffffffffffffda RBX: 00007f202f025fa0 RCX: 00007f202ed9e159 [ 126.742199][ T6695] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000008 [ 126.742213][ T6695] RBP: 00007f202ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 126.742226][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.742240][ T6695] R13: 00007f202f026038 R14: 00007f202f025fa0 R15: 00007ffe16439068 [ 126.790762][ T6695] [ 126.877407][ T5760] usb usb3-port1: attempt power cycle [ 127.319502][ T6715] Could not find key with description: [0123456789abcdef] [ 127.334782][ T5760] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 127.349714][ T6715] process_request_key_err: No key [ 127.364082][ T6715] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef] [ 127.404587][ T6715] One or more global auth toks could not properly register; rc = [-2] [ 127.413887][ T6715] Error parsing options; rc = [-2] [ 127.421055][ T5760] usb 3-1: device descriptor read/8, error -71 [ 127.705277][ T5760] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 127.765629][ T5760] usb 3-1: device descriptor read/8, error -71 [ 127.885948][ T5760] usb usb3-port1: unable to enumerate USB device [ 128.021761][ T6701] loop4: detected capacity change from 0 to 65536 [ 128.097859][ T6701] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 128.176364][ T6701] XFS (loop4): Ending clean mount [ 128.205014][ T6723] loop3: detected capacity change from 0 to 32768 [ 128.287952][ T6723] JBD2: Ignoring recovery information on journal [ 128.437125][ T6723] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 128.456356][ T6747] binder: BINDER_SET_CONTEXT_MGR already set [ 128.472934][ T6747] binder: 6746:6747 ioctl 4018620d 200000004a80 returned -16 [ 128.519479][ T6747] binder: 6746:6747 ioctl c0306201 0 returned -14 [ 128.689495][ T28] audit: type=1800 audit(1789701809.262:7): pid=6723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.204" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 129.375353][ T6771] Could not find key with description: [0123456789abcdef] [ 129.394346][ T6771] process_request_key_err: No key [ 129.405334][ T6771] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef] [ 129.434102][ T6771] One or more global auth toks could not properly register; rc = [-2] [ 129.446969][ T6771] Error parsing options; rc = [-2] [ 129.580512][ T6723] syz.3.204 (6723) used greatest stack depth: 18968 bytes left [ 129.677510][ T6045] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 129.715930][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 129.835077][ C0] net_ratelimit: 52 callbacks suppressed [ 129.926289][ T6762] loop2: detected capacity change from 0 to 32768 [ 129.974992][ T6762] (syz.2.210,6762,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 130.033606][ T6762] (syz.2.210,6762,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 130.082449][ T6762] JBD2: Ignoring recovery information on journal [ 130.202048][ T6762] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 130.207169][ T6778] binder: 6777:6778 ioctl c0306201 0 returned -14 [ 130.547265][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 130.715953][ T5760] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 130.885403][ T5760] usb 5-1: device descriptor read/64, error -71 [ 130.969080][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 131.046028][ T6781] loop3: detected capacity change from 0 to 32768 [ 131.054184][ T6781] (syz.3.217,6781,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear [ 131.054184][ T6781] " or missing value [ 131.068056][ T6781] (syz.3.217,6781,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 131.121281][ T5881] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 131.174837][ T5760] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 131.216193][ T23] usb 2-1: config 0 has no interfaces? [ 131.221768][ T23] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 131.261908][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.300369][ T23] usb 2-1: config 0 descriptor?? [ 131.344914][ T5760] usb 5-1: device descriptor read/64, error -71 [ 131.465224][ T5760] usb usb5-port1: attempt power cycle [ 131.884992][ T5760] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 131.919438][ T5760] usb 5-1: device descriptor read/8, error -71 [ 132.063202][ T6828] binder: BINDER_SET_CONTEXT_MGR already set [ 132.071255][ T6828] binder: 6827:6828 ioctl 4018620d 200000004a80 returned -16 [ 132.194990][ T5760] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 132.236647][ T5760] usb 5-1: device descriptor read/8, error -71 [ 132.363057][ T5760] usb usb5-port1: unable to enumerate USB device [ 132.540700][ T6832] loop2: detected capacity change from 0 to 32768 [ 132.561535][ T6832] (syz.2.226,6832,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.576345][ T6832] (syz.2.226,6832,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.599944][ T6832] JBD2: Ignoring recovery information on journal [ 132.658377][ T6832] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 132.789619][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 133.032897][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.039960][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.584822][ T5771] Bluetooth: hci4: command 0x1003 tx timeout [ 133.593087][ T5778] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 133.653152][ T9] usb 2-1: USB disconnect, device number 9 [ 133.917679][ T8] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 134.117036][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.176413][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 134.213199][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.264201][ T8] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 134.296990][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.359437][ T8] usb 5-1: config 0 descriptor?? [ 134.365243][ T6865] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 134.441872][ T6869] loop2: detected capacity change from 0 to 32768 [ 134.489986][ T6869] (syz.2.236,6869,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 134.518795][ T6869] (syz.2.236,6869,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 134.567514][ T6869] JBD2: Ignoring recovery information on journal [ 134.611197][ T6869] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 134.815768][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 134.834948][ T8] usbhid: probe of 5-1:0.0 failed with error -71 [ 134.858484][ T8] usb 5-1: USB disconnect, device number 11 [ 134.969862][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 135.104764][ C1] net_ratelimit: 47 callbacks suppressed [ 136.080133][ T6929] Could not find key with description: [0123456789abcdef] [ 136.103748][ T6929] process_request_key_err: No key [ 136.115753][ T6929] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef] [ 136.159800][ T6929] One or more global auth toks could not properly register; rc = [-2] [ 136.192878][ T6929] Error parsing options; rc = [-2] [ 136.428129][ T6922] loop3: detected capacity change from 0 to 32768 [ 136.460520][ T6931] loop4: detected capacity change from 0 to 128 [ 136.492394][ T6922] (syz.3.249,6922,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 136.529739][ T6931] EXT4-fs (loop4): Test dummy encryption mode enabled [ 136.541601][ T6922] (syz.3.249,6922,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 136.583456][ T6922] JBD2: Ignoring recovery information on journal [ 136.624340][ T6931] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.669408][ T6931] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.669638][ T6922] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 137.553814][ T6045] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.648233][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 137.851469][ T6942] loop4: detected capacity change from 0 to 128 [ 137.874340][ T6942] EXT4-fs (loop4): Test dummy encryption mode enabled [ 137.973575][ T6942] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.996762][ T6942] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.234847][ T1209] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 138.954075][ T6045] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.956521][ T6957] Could not find key with description: [0123456789abcdef] [ 138.970575][ T6957] process_request_key_err: No key [ 138.975767][ T6957] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef] [ 138.987144][ T6957] One or more global auth toks could not properly register; rc = [-2] [ 138.995686][ T6957] Error parsing options; rc = [-2] [ 139.036405][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.054737][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 139.067159][ T1209] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.080352][ T1209] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 139.089614][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.100407][ T1209] usb 4-1: config 0 descriptor?? [ 139.107561][ T6947] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 139.551410][ T1209] usbhid 4-1:0.0: can't add hid device: -71 [ 139.577778][ T1209] usbhid: probe of 4-1:0.0 failed with error -71 [ 139.624316][ T1209] usb 4-1: USB disconnect, device number 6 [ 140.011622][ T6988] Could not find key with description: [0123456789abcdef] [ 140.020419][ T6988] process_request_key_err: No key [ 140.029341][ T6988] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef] [ 140.042869][ T6988] One or more global auth toks could not properly register; rc = [-2] [ 140.053322][ T6965] loop2: detected capacity change from 0 to 32768 [ 140.055404][ T6988] Error parsing options; rc = [-2] [ 140.092202][ T6965] (syz.2.264,6965,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.147613][ T6965] (syz.2.264,6965,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 140.260806][ T6965] JBD2: Ignoring recovery information on journal [ 140.304793][ C1] net_ratelimit: 44 callbacks suppressed [ 140.367815][ T6965] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 140.797092][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 142.442563][ T7015] loop4: detected capacity change from 0 to 40427 [ 142.469431][ T7015] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 142.497129][ T7015] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 142.519354][ T7015] F2FS-fs (loop4): Unrecognized mount option "f2fs" or missing value [ 142.990588][ T7055] loop3: detected capacity change from 0 to 128 [ 143.019211][ T7055] EXT4-fs (loop3): Test dummy encryption mode enabled [ 143.129076][ T7055] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.244941][ T7055] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.374082][ T7043] loop1: detected capacity change from 0 to 32768 [ 143.451026][ T7043] (syz.1.287,7043,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 143.517951][ T7043] (syz.1.287,7043,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 143.576373][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 143.710864][ T7043] JBD2: Ignoring recovery information on journal [ 143.970873][ T9] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 144.000604][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.013095][ T7043] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 144.152329][ T7059] loop4: detected capacity change from 0 to 32768 [ 144.187404][ T7059] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.295 (7059) [ 144.208554][ T5769] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.351872][ T7059] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 144.384514][ T7059] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 144.395206][ T7059] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 144.405713][ T7059] BTRFS info (device loop4): use zstd compression, level 3 [ 144.413178][ T7059] BTRFS info (device loop4): using free space tree [ 144.469839][ T7076] loop3: detected capacity change from 0 to 164 [ 144.516866][ T7059] BTRFS info (device loop4): enabling ssd optimizations [ 144.516887][ T7059] BTRFS info (device loop4): auto enabling async discard [ 144.536092][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 144.546007][ T9] cxacru 3-1:1.0: invalid response length to cm 0x91: 32 [ 144.566461][ T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 144.576542][ T9] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 144.602274][ T9] cxacru: probe of 3-1:1.0 failed with error -5 [ 145.009904][ T7058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.054109][ T5807] usb 3-1: USB disconnect, device number 14 [ 145.571651][ T7100] Could not find key with description: [0123456789abcdef] [ 145.584814][ C1] net_ratelimit: 51 callbacks suppressed [ 145.585817][ T7100] process_request_key_err: No key [ 145.618156][ T7100] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef] [ 145.643259][ T7100] One or more global auth toks could not properly register; rc = [-2] [ 145.684915][ T7100] Error parsing options; rc = [-2] [ 145.799746][ T6045] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 146.605084][ T8] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 146.802124][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.834570][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 146.874804][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.898546][ T8] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 146.928952][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.953912][ T8] usb 3-1: config 0 descriptor?? [ 146.987603][ T7116] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 147.204927][ T5807] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 147.266878][ T7126] loop3: detected capacity change from 0 to 164 [ 147.427213][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 147.461091][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 147.534515][ T8] usb 3-1: USB disconnect, device number 15 [ 147.560218][ T5807] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.572168][ T7131] Could not find key with description: [0123456789abcdef] [ 147.579533][ T5807] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 147.588416][ T5807] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.599288][ T7131] process_request_key_err: No key [ 147.604929][ T7131] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef] [ 147.618317][ T5807] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.631885][ T7131] One or more global auth toks could not properly register; rc = [-2] [ 147.642303][ T5807] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.643602][ T7131] Error parsing options; rc = [-2] [ 147.652299][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.666212][ T5807] usb 5-1: Product: syz [ 147.670433][ T5807] usb 5-1: Manufacturer: syz [ 147.686128][ T5807] cdc_wdm 5-1:1.0: skipping garbage [ 147.695475][ T5807] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 147.900101][ T5807] usb 5-1: USB disconnect, device number 12 [ 149.564847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 150.470017][ T5778] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 150.474906][ T5771] Bluetooth: hci4: command 0x1003 tx timeout [ 150.624794][ C0] net_ratelimit: 40 callbacks suppressed [ 150.882699][ T7161] Zero length message leads to an empty skb [ 152.021641][ T7161] loop4: detected capacity change from 0 to 32768 [ 152.887432][ T5807] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 153.624566][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.786877][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 153.868847][ T7171] binder: BINDER_SET_CONTEXT_MGR already set [ 153.875607][ T5807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.925824][ T7171] binder: 7169:7171 ioctl 4018620d 200000004a80 returned -16 [ 153.963088][ T5807] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 154.015135][ T7161] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.092766][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.164323][ T5807] usb 4-1: config 0 descriptor?? [ 154.171686][ T7163] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 154.268716][ T7179] loop2: detected capacity change from 0 to 164 [ 154.303651][ T5807] usbhid 4-1:0.0: can't add hid device: -71 [ 154.310326][ T5807] usbhid: probe of 4-1:0.0 failed with error -71 [ 154.505449][ T5807] usb 4-1: USB disconnect, device number 7 [ 154.527824][ T7161] XFS (loop4): Ending clean mount [ 154.610956][ T7161] XFS (loop4): Quotacheck needed: Please wait. [ 154.741519][ T7161] XFS (loop4): Quotacheck: Done. [ 154.794863][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 155.152292][ T7159] syz.4.325 (7159): drop_caches: 2 [ 155.211937][ T6045] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 155.235514][ T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 155.244183][ T8] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 155.282339][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.339467][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.391009][ T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.407221][ T7189] loop2: detected capacity change from 0 to 512 [ 155.437706][ T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.505785][ T7189] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 155.508238][ T8] usb 2-1: Product: syz [ 155.514525][ T7189] UDF-fs: Scanning with blocksize 512 failed [ 155.553654][ T8] usb 2-1: Manufacturer: syz [ 155.601510][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 155.605411][ T7189] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 155.617951][ T8] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 155.659912][ T7189] UDF-fs: Scanning with blocksize 1024 failed [ 155.721050][ T7189] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 155.792324][ T7189] UDF-fs: Scanning with blocksize 2048 failed [ 155.972014][ T7189] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 156.064983][ C1] net_ratelimit: 48 callbacks suppressed [ 156.169402][ T7189] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.401533][ T8] usb 2-1: USB disconnect, device number 10 [ 157.181917][ T7209] loop1: detected capacity change from 0 to 164 [ 157.314787][ T8] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 157.508011][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.521691][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 157.532770][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.548013][ T8] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 157.558431][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.570974][ T8] usb 4-1: config 0 descriptor?? [ 157.576959][ T7207] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.904838][ T5778] Bluetooth: hci4: command 0x1003 tx timeout [ 157.911766][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 158.885482][ T7213] loop2: detected capacity change from 0 to 32768 [ 159.255182][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 159.337784][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 159.783949][ T8] usb 4-1: USB disconnect, device number 8 [ 161.078608][ C0] net_ratelimit: 41 callbacks suppressed [ 161.131910][ T7213] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 161.284550][ T7232] FAULT_INJECTION: forcing a failure. [ 161.284550][ T7232] name failslab, interval 1, probability 0, space 0, times 0 [ 161.299850][ T7232] CPU: 0 PID: 7232 Comm: syz.4.346 Not tainted syzkaller #0 [ 161.307164][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.307179][ T7232] Call Trace: [ 161.307187][ T7232] [ 161.307195][ T7232] dump_stack_lvl+0x18c/0x250 [ 161.307229][ T7232] ? show_regs_print_info+0x20/0x20 [ 161.307254][ T7232] ? load_image+0x420/0x420 [ 161.307278][ T7232] ? __might_sleep+0xe0/0xe0 [ 161.307303][ T7232] ? __lock_acquire+0x7d80/0x7d80 [ 161.307339][ T7232] should_fail_ex+0x394/0x4c0 [ 161.307369][ T7232] should_failslab+0x9/0x20 [ 161.307396][ T7232] slab_pre_alloc_hook+0x59/0x300 [ 161.320971][ T7232] kmem_cache_alloc+0x5a/0x2c0 [ 161.338267][ T7232] ? __kernfs_new_node+0xe5/0x7f0 [ 161.347891][ T7232] __kernfs_new_node+0xe5/0x7f0 [ 161.347928][ T7232] ? kernfs_new_node+0x260/0x260 [ 161.347962][ T7232] ? up_write+0x1be/0x410 [ 161.347986][ T7232] kernfs_new_node+0x14c/0x260 [ 161.357141][ T7232] __kernfs_create_file+0x4b/0x2e0 [ 161.366915][ T7232] sysfs_add_file_mode_ns+0x237/0x2f0 [ 161.366946][ T7232] internal_create_group+0x431/0xd10 [ 161.371975][ T7232] ? kernfs_add_one+0x149/0x6b0 [ 161.411565][ T7232] ? sysfs_create_group+0x20/0x20 [ 161.416602][ T7232] ? up_write+0x1be/0x410 [ 161.420938][ T7232] sysfs_create_groups+0x59/0x120 [ 161.425996][ T7232] device_add_attrs+0xdf/0x830 [ 161.430783][ T7232] ? device_add_class_symlinks+0x240/0x240 [ 161.436601][ T7232] ? device_add_class_symlinks+0x21f/0x240 [ 161.442421][ T7232] device_add+0x51a/0xc40 [ 161.446781][ T7232] netdev_register_kobject+0x188/0x320 [ 161.452369][ T7232] register_netdevice+0x12aa/0x1ba0 [ 161.457621][ T7232] ? netif_stacked_transfer_operstate+0x210/0x210 [ 161.464098][ T7232] ? __asan_memset+0x22/0x40 [ 161.468812][ T7232] ? tun_net_initialize+0x1ac/0x480 [ 161.474527][ T7232] ? tun_not_capable+0x1f0/0x1f0 [ 161.480310][ T7232] ? alloc_netdev_mqs+0xc23/0x1040 [ 161.485448][ T7232] tun_set_iff+0x82b/0xea0 [ 161.489904][ T7232] __tun_chr_ioctl+0x7e0/0x2070 [ 161.494773][ T7232] ? tun_flow_create+0x310/0x310 [ 161.499736][ T7232] ? bpf_lsm_file_ioctl+0x9/0x10 [ 161.504715][ T7232] ? security_file_ioctl+0x80/0xa0 [ 161.509847][ T7232] ? tun_chr_poll+0x630/0x630 [ 161.514531][ T7232] __se_sys_ioctl+0xfd/0x170 [ 161.519133][ T7232] do_syscall_64+0x55/0xb0 [ 161.523729][ T7232] ? clear_bhb_loop+0x40/0x90 [ 161.528433][ T7232] ? clear_bhb_loop+0x40/0x90 [ 161.533126][ T7232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.539028][ T7232] RIP: 0033:0x7fdd0199e159 [ 161.543445][ T7232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.563157][ T7232] RSP: 002b:00007fdd0287e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.571619][ T7232] RAX: ffffffffffffffda RBX: 00007fdd01c25fa0 RCX: 00007fdd0199e159 [ 161.580063][ T7232] RDX: 00002000000002c0 RSI: 00000000400454ca RDI: 0000000000000005 [ 161.588082][ T7232] RBP: 00007fdd01a3506b R08: 0000000000000000 R09: 0000000000000000 [ 161.596098][ T7232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.604069][ T7232] R13: 00007fdd01c26038 R14: 00007fdd01c25fa0 R15: 00007ffc56d0db18 [ 161.612069][ T7232] [ 161.869735][ T7213] XFS (loop2): Ending clean mount [ 161.878835][ T7213] XFS (loop2): Quotacheck needed: Please wait. [ 161.969347][ T7213] XFS (loop2): Quotacheck: Done. [ 162.114414][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.414799][ T5807] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 162.634872][ T5807] usb 5-1: Using ep0 maxpacket: 8 [ 162.642695][ T5807] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.661842][ T5807] usb 5-1: config 0 interface 0 has no altsetting 0 [ 162.678646][ T5807] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 162.698895][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.722811][ T5807] usb 5-1: config 0 descriptor?? [ 162.884631][ T7250] Could not find key with description: [0123456789abcdef] [ 162.892650][ T7250] process_request_key_err: No key [ 162.898074][ T7250] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef] [ 162.910006][ T7250] One or more global auth toks could not properly register; rc = [-2] [ 162.918600][ T7250] Error parsing options; rc = [-2] [ 162.981433][ T7245] loop3: detected capacity change from 0 to 32768 [ 163.011252][ T7245] (syz.3.352,7245,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 163.053313][ T7245] (syz.3.352,7245,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 163.098441][ T7245] JBD2: Ignoring recovery information on journal [ 163.161314][ T7245] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 163.236997][ T5807] input: HID 17ef:60b5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:17EF:60B5.0002/input/input5 [ 163.398444][ T5807] lenovo 0003:17EF:60B5.0002: input,hidraw0: USB HID v0.02 Joystick [HID 17ef:60b5] on usb-dummy_hcd.4-1/input0 [ 163.423802][ T5807] usb 5-1: USB disconnect, device number 13 [ 163.465041][ T23] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 163.547648][ T7260] fido_id[7260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 163.563826][ T5881] udevd[5881]: Error opening device "/dev/input/event4": No such file or directory [ 163.600824][ T5881] udevd[5881]: Unable to EVIOCGABS device "/dev/input/event4" [ 163.634071][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 163.635159][ T5881] udevd[5881]: Unable to EVIOCGABS device "/dev/input/event4" [ 163.699300][ T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 163.703185][ T5881] udevd[5881]: Unable to EVIOCGABS device "/dev/input/event4" [ 163.730246][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.742172][ T5881] udevd[5881]: Unable to EVIOCGABS device "/dev/input/event4" [ 163.774736][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.794777][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 163.820611][ T23] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 163.838964][ T23] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 163.857422][ T23] usb 3-1: Manufacturer: syz [ 163.876112][ T23] usb 3-1: config 0 descriptor?? [ 164.104541][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 164.115001][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 164.129186][ T23] usb 3-1: USB disconnect, device number 16 [ 165.334900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 165.489778][ T7275] loop3: detected capacity change from 0 to 32768 [ 166.144935][ C0] net_ratelimit: 39 callbacks suppressed [ 166.737317][ T7275] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 166.819793][ T7286] Could not find key with description: [0123456789abcdef] [ 166.889395][ T7286] process_request_key_err: No key [ 166.914747][ T41] Bluetooth: hci4: Frame reassembly failed (-84) [ 166.974853][ T7286] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef] [ 167.125000][ T7286] One or more global auth toks could not properly register; rc = [-2] [ 167.174266][ T7286] Error parsing options; rc = [-2] [ 167.525880][ T7275] XFS (loop3): Ending clean mount [ 167.561068][ T7275] XFS (loop3): Quotacheck needed: Please wait. [ 167.675044][ T23] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 167.697265][ T7275] XFS (loop3): Quotacheck: Done. [ 167.752124][ T5769] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.911811][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 167.940317][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 167.957616][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.999142][ T23] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 168.009452][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.026902][ T23] usb 5-1: config 0 descriptor?? [ 168.039774][ T7295] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 168.078884][ T7297] loop2: detected capacity change from 0 to 32768 [ 168.107545][ T7297] (syz.2.365,7297,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 168.143911][ T7297] (syz.2.365,7297,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 168.239878][ T7297] JBD2: Ignoring recovery information on journal [ 168.366655][ T7297] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 168.391555][ T5778] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 168.401703][ T5778] Bluetooth: hci2: Injecting HCI hardware error event [ 168.414404][ T5771] Bluetooth: hci2: hardware error 0x00 [ 168.480029][ T23] usbhid 5-1:0.0: can't add hid device: -71 [ 168.500654][ T23] usbhid: probe of 5-1:0.0 failed with error -71 [ 168.520046][ T23] usb 5-1: USB disconnect, device number 14 [ 168.557072][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 168.602141][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 168.748349][ T8] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 168.758946][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.945163][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 169.024720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 169.306170][ T8] cxacru 4-1:1.0: invalid response length to cm 0x91: 56 [ 169.313465][ T8] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 169.353546][ T8] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 169.386154][ T8] cxacru: probe of 4-1:1.0 failed with error -5 [ 169.604982][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 169.613560][ T7308] loop2: detected capacity change from 0 to 40427 [ 169.622647][ T7308] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 169.629806][ T7308] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 169.651330][ T7308] F2FS-fs (loop2): Unrecognized mount option "f2fs" or missing value [ 169.705554][ T5804] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 169.727353][ T1209] usb 4-1: USB disconnect, device number 9 [ 170.147750][ T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 170.159046][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.170023][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.179871][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 170.195308][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 170.204398][ T23] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 170.212826][ T23] usb 2-1: Manufacturer: syz [ 170.220571][ T23] usb 2-1: config 0 descriptor?? [ 170.247839][ T5804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.260268][ T5804] usb 5-1: config 1 has an invalid descriptor of length 164, skipping remainder of the config [ 170.272366][ T5804] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.289920][ T5804] usb 5-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 170.299232][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.307273][ T5804] usb 5-1: Product: syz [ 170.311473][ T5804] usb 5-1: Manufacturer: syz [ 170.316226][ T5804] usb 5-1: SerialNumber: syz [ 170.464887][ T5771] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 170.700842][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 171.184744][ C1] net_ratelimit: 40 callbacks suppressed [ 171.575971][ T7323] loop3: detected capacity change from 0 to 32768 [ 172.277190][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 173.014798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 173.411791][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.377'. [ 174.113367][ T23] usb 2-1: USB disconnect, device number 11 [ 174.330587][ T5804] usb 5-1: USB disconnect, device number 15 [ 174.402798][ T7323] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.423001][ T7334] loop1: detected capacity change from 0 to 32768 [ 174.614441][ T7334] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 174.689597][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.724171][ T7334] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 174.796357][ T7334] BTRFS info (device loop1): enabling ssd optimizations [ 174.797191][ T7323] XFS (loop3): Ending clean mount [ 174.837645][ T7323] XFS (loop3): Quotacheck needed: Please wait. [ 174.858806][ T7334] BTRFS info (device loop1): using spread ssd allocation scheme [ 174.885109][ T7334] BTRFS error (device loop1): unrecognized mount option 'fragment=data' [ 174.931860][ T7334] BTRFS error (device loop1): open_ctree failed: -22 [ 174.940089][ T7323] XFS (loop3): Quotacheck: Done. [ 175.045291][ T5769] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.285413][ C1] net_ratelimit: 42 callbacks suppressed [ 176.466650][ T5771] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 176.473501][ T5087] Bluetooth: hci4: command 0x1003 tx timeout [ 176.557855][ T5760] IPVS: starting estimator thread 0... [ 176.644911][ T7373] IPVS: using max 22 ests per chain, 52800 per kthread [ 176.722939][ T7376] syzkaller0: entered promiscuous mode [ 176.750278][ T7376] syzkaller0: entered allmulticast mode [ 176.778447][ T7381] netlink: 52 bytes leftover after parsing attributes in process `syz.2.387'. [ 177.082173][ T7378] loop1: detected capacity change from 0 to 32768 [ 177.097365][ T7378] (syz.1.386,7378,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 177.113569][ T7378] (syz.1.386,7378,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 177.179893][ T7378] JBD2: Ignoring recovery information on journal [ 177.507665][ T7378] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 178.550810][ T7390] loop3: detected capacity change from 0 to 32768 [ 179.195805][ T7390] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 180.266459][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 180.332446][ T7390] XFS (loop3): Ending clean mount [ 180.473373][ T7390] XFS (loop3): Quotacheck needed: Please wait. [ 180.599998][ T7390] XFS (loop3): Quotacheck: Done. [ 180.637693][ T5769] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 180.665273][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 180.925018][ T1209] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 181.033059][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 181.158328][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 181.170645][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 181.194812][ T1209] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.204331][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.219991][ T1209] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 181.229605][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.271292][ T1209] usb 3-1: config 0 descriptor?? [ 181.277403][ T7410] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 181.445709][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.500083][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 181.540162][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 181.567639][ T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 181.580067][ T9] usb 5-1: Manufacturer: syz [ 181.593396][ T9] usb 5-1: config 0 descriptor?? [ 181.714790][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 181.724756][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 181.733031][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 181.740544][ T1209] usbhid 3-1:0.0: can't add hid device: -32 [ 181.747027][ T1209] usbhid: probe of 3-1:0.0 failed with error -32 [ 181.769919][ T1209] usb 3-1: USB disconnect, device number 17 [ 181.984751][ C1] net_ratelimit: 49 callbacks suppressed [ 182.223335][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 182.270642][ T7415] loop3: detected capacity change from 0 to 32768 [ 182.303440][ T9] usbhid: probe of 5-1:0.0 failed with error -71 [ 182.336299][ T7415] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.395 (7415) [ 182.443777][ T9] usb 5-1: USB disconnect, device number 16 [ 182.473841][ T7415] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.531637][ T7415] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 182.564529][ T7415] BTRFS info (device loop3): enabling ssd optimizations [ 182.582528][ T7415] BTRFS info (device loop3): using spread ssd allocation scheme [ 182.607595][ T7415] BTRFS error (device loop3): unrecognized mount option 'fragment=data' [ 182.630224][ T7415] BTRFS error (device loop3): open_ctree failed: -22 [ 182.631309][ T6052] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (6052) [ 182.815161][ T1209] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 183.021246][ T1209] usb 3-1: unable to get BOS descriptor or descriptor too short [ 183.046828][ T1209] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.066200][ T1209] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.089871][ T1209] usb 3-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 183.125001][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.154781][ T1209] usb 3-1: Product: syz [ 183.159813][ T1209] usb 3-1: Manufacturer: syz [ 183.185253][ T1209] usb 3-1: SerialNumber: syz [ 183.476430][ T1209] usb 3-1: USB disconnect, device number 18 [ 183.577947][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.831560][ T7425] loop4: detected capacity change from 0 to 40427 [ 183.852892][ T7425] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 183.861857][ T7425] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 183.873920][ T7425] F2FS-fs (loop4): Unrecognized mount option "f2fs" or missing value [ 183.883561][ T7428] loop3: detected capacity change from 0 to 32768 [ 183.915378][ T7428] (syz.3.401,7428,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 183.953557][ T7428] (syz.3.401,7428,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 184.018614][ T7428] JBD2: Ignoring recovery information on journal [ 184.180915][ T7428] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 184.464835][ T5087] Bluetooth: hci4: command 0x1003 tx timeout [ 185.387533][ T7436] loop2: detected capacity change from 0 to 32768 [ 185.405205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 186.785981][ T5771] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 186.919748][ T7437] netlink: 52 bytes leftover after parsing attributes in process `syz.4.402'. [ 186.965930][ T7436] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 187.146440][ T5769] ocfs2: Unmounting device (7,3) on (node local) [ 187.318545][ T7451] loop1: detected capacity change from 0 to 1024 [ 187.664746][ C1] net_ratelimit: 47 callbacks suppressed [ 187.964844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 189.371236][ T7436] XFS (loop2): Ending clean mount [ 189.471877][ T7436] XFS (loop2): Quotacheck needed: Please wait. [ 189.632953][ T7436] XFS (loop2): Quotacheck: Done. [ 189.840140][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.616797][ T7462] loop2: detected capacity change from 0 to 164 [ 191.422010][ T7463] macvlan1: entered promiscuous mode [ 191.704966][ T5804] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 191.913824][ T1209] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 191.942286][ T5804] usb 2-1: unable to get BOS descriptor or descriptor too short [ 192.002180][ T5804] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.100155][ T5804] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.174317][ T5804] usb 2-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 192.210484][ T1209] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 192.289298][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.341472][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.450990][ T5804] usb 2-1: Product: syz [ 192.508935][ T5804] usb 2-1: Manufacturer: syz [ 192.543420][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.587677][ T5804] usb 2-1: SerialNumber: syz [ 192.693806][ T1209] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 192.714879][ C0] net_ratelimit: 39 callbacks suppressed [ 192.887828][ T1209] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 192.936416][ T1209] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 192.992704][ T1209] usb 5-1: Manufacturer: syz [ 193.385874][ T1209] usb 5-1: config 0 descriptor?? [ 194.369946][ T5804] usb 2-1: USB disconnect, device number 12 [ 194.641156][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.676130][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.159160][ T7487] loop3: detected capacity change from 0 to 32768 [ 196.101127][ T1209] usbhid 5-1:0.0: can't add hid device: -71 [ 196.292888][ T1209] usbhid: probe of 5-1:0.0 failed with error -71 [ 196.928053][ T1209] usb 5-1: USB disconnect, device number 17 [ 197.033721][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 197.043917][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 197.151778][ T7487] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 197.178325][ T7487] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop3": -EINTR [ 197.243972][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.310769][ T7487] XFS (loop3): log mount failed [ 197.330803][ T7512] netlink: 52 bytes leftover after parsing attributes in process `syz.2.420'. [ 197.446998][ T7516] loop1: detected capacity change from 0 to 164 [ 198.144747][ C1] net_ratelimit: 40 callbacks suppressed [ 200.465012][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 200.680740][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 200.713573][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.758217][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.772324][ T7548] loop1: detected capacity change from 0 to 4096 [ 200.801394][ T8] usb 4-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 200.824240][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.852773][ T8] usb 4-1: Product: syz [ 200.873105][ T8] usb 4-1: Manufacturer: syz [ 200.939211][ T8] usb 4-1: SerialNumber: syz [ 201.015189][ T1209] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 201.268435][ T8] usb 4-1: USB disconnect, device number 10 [ 201.676331][ T1209] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 201.866476][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.889706][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.905396][ T1209] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 201.926247][ T1209] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 201.939439][ T1209] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 201.953375][ T1209] usb 5-1: Manufacturer: syz [ 201.978456][ T7562] loop2: detected capacity change from 0 to 128 [ 201.999174][ T1209] usb 5-1: config 0 descriptor?? [ 202.029515][ T7562] EXT4-fs (loop2): Test dummy encryption mode enabled [ 202.099876][ T7562] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.185093][ T7562] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.240810][ T7566] X25: received unknown 00 with LCI 000 [ 203.143274][ T1209] usbhid 5-1:0.0: can't add hid device: -71 [ 203.149512][ T1209] usbhid: probe of 5-1:0.0 failed with error -71 [ 203.159615][ T1209] usb 5-1: USB disconnect, device number 18 [ 203.198722][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.495419][ T1089] Bluetooth: hci4: Frame reassembly failed (-84) [ 203.640441][ T7590] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 203.647628][ T7590] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 203.674270][ T7595] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 203.680906][ T7595] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 203.698961][ T7590] vhci_hcd vhci_hcd.0: Device attached [ 203.756946][ T7595] vhci_hcd vhci_hcd.0: Device attached [ 203.770933][ T7590] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(6) [ 203.777519][ T7590] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 203.810363][ T7595] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 203.816963][ T7595] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 203.849731][ T7590] vhci_hcd vhci_hcd.0: Device attached [ 203.872344][ T7595] vhci_hcd vhci_hcd.0: Device attached [ 203.904542][ T7590] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 203.911232][ T7590] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 203.935650][ T7590] vhci_hcd vhci_hcd.0: Device attached [ 203.994813][ T9] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 204.050626][ T7590] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(13) [ 204.057280][ T7590] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 204.075446][ T7590] vhci_hcd vhci_hcd.0: Device attached [ 204.095965][ T7590] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(16) [ 204.102645][ T7590] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 204.134590][ T7590] vhci_hcd vhci_hcd.0: Device attached [ 204.140953][ T7576] loop1: detected capacity change from 0 to 32768 [ 204.147558][ C1] net_ratelimit: 51 callbacks suppressed [ 204.181204][ T7590] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 204.193758][ T7576] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.436 (7576) [ 204.273880][ T7576] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 204.288416][ T7576] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 204.303928][ T7576] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 204.315337][ T7576] BTRFS info (device loop1): use zstd compression, level 3 [ 204.323056][ T7576] BTRFS info (device loop1): using free space tree [ 204.324538][ T7604] vhci_hcd: connection closed [ 204.330736][ T7601] vhci_hcd: connection closed [ 204.330918][ T7596] vhci_hcd: connection closed [ 204.335612][ T7593] vhci_hcd: connection reset by peer [ 204.352121][ T7607] vhci_hcd: connection closed [ 204.354882][ T7610] vhci_hcd: connection closed [ 204.362655][ T7612] vhci_hcd: connection closed [ 204.371790][ T41] vhci_hcd: stop threads [ 204.378311][ T41] vhci_hcd: release socket [ 204.385017][ T41] vhci_hcd: disconnect device [ 204.390501][ T41] vhci_hcd: stop threads [ 204.396410][ T41] vhci_hcd: release socket [ 204.401504][ T41] vhci_hcd: disconnect device [ 204.407396][ T41] vhci_hcd: stop threads [ 204.412246][ T41] vhci_hcd: release socket [ 204.421354][ T41] vhci_hcd: disconnect device [ 204.428978][ T41] vhci_hcd: stop threads [ 204.434220][ T41] vhci_hcd: release socket [ 204.439211][ T41] vhci_hcd: disconnect device [ 204.447735][ T41] vhci_hcd: stop threads [ 204.454030][ T41] vhci_hcd: release socket [ 204.458811][ T41] vhci_hcd: disconnect device [ 204.470289][ T41] vhci_hcd: stop threads [ 204.488109][ T41] vhci_hcd: release socket [ 204.518103][ T41] vhci_hcd: disconnect device [ 204.535780][ T7576] BTRFS info (device loop1): enabling ssd optimizations [ 204.542765][ T7576] BTRFS info (device loop1): auto enabling async discard [ 204.556595][ T41] vhci_hcd: stop threads [ 204.560903][ T41] vhci_hcd: release socket [ 204.577508][ T41] vhci_hcd: disconnect device [ 204.582981][ T7582] loop3: detected capacity change from 0 to 32768 [ 204.629491][ T7582] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 204.643351][ T7582] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 204.677644][ T7582] BTRFS info (device loop3): enabling ssd optimizations [ 204.699481][ T7582] BTRFS info (device loop3): using spread ssd allocation scheme [ 204.767166][ T7582] BTRFS error (device loop3): unrecognized mount option 'fragment=data' [ 204.808932][ T7582] BTRFS error (device loop3): open_ctree failed: -22 [ 204.819943][ T5881] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (5881) [ 205.053685][ T28] audit: type=1804 audit(1789701885.622:8): pid=7576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.436" name="/newroot/110/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 205.380778][ T5777] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 205.504922][ T5087] Bluetooth: hci4: command 0x1003 tx timeout [ 205.511597][ T5771] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 207.624975][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 207.817265][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 207.868886][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.900537][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.920694][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 207.935583][ T5760] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 207.966419][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 207.982403][ T8] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 207.994781][ T8] usb 3-1: Manufacturer: syz [ 208.012536][ T8] usb 3-1: config 0 descriptor?? [ 208.092615][ T7686] loop1: detected capacity change from 0 to 32768 [ 208.109179][ T7686] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.451 (7686) [ 208.141718][ T5760] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.180172][ T5760] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 208.209766][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.240889][ T5760] usb 4-1: Product: syz [ 208.246559][ T7702] loop4: detected capacity change from 0 to 16 [ 208.253599][ T5760] usb 4-1: Manufacturer: syz [ 208.256583][ T7686] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 208.268392][ T5760] usb 4-1: SerialNumber: syz [ 208.283861][ T7686] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 208.307213][ T5760] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 208.332452][ T7686] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 208.345242][ T5760] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 87 [ 208.354970][ T7702] erofs: (device loop4): mounted with root inode @ nid 36. [ 208.368158][ T7686] BTRFS info (device loop1): use zstd compression, level 3 [ 208.384938][ T5760] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 7 [ 208.390146][ T7686] BTRFS info (device loop1): using free space tree [ 208.415461][ T5760] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 208.468863][ T5760] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82 [ 208.486701][ T5760] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 208.494613][ T5760] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 208.502665][ T5760] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 85 [ 208.526378][ T5760] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 5 [ 208.552011][ T5760] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 208.564575][ T5760] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 83 [ 208.572739][ T5760] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 208.580706][ T5760] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 3 [ 208.588699][ T5760] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 4 [ 208.596667][ T5760] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 86 [ 208.606612][ T5760] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 208.617693][ T5760] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 208.653071][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 208.663855][ T5760] usb 4-1: USB disconnect, device number 11 [ 208.672778][ T7686] BTRFS info (device loop1): enabling ssd optimizations [ 208.682206][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 208.707388][ T7686] BTRFS info (device loop1): auto enabling async discard [ 208.762244][ T8] usb 3-1: USB disconnect, device number 19 [ 208.800901][ T5760] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 208.901065][ T5760] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 208.919737][ T5760] keyspan 4-1:1.0: device disconnected [ 208.936877][ T28] audit: type=1804 audit(1789701889.502:9): pid=7686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.451" name="/newroot/113/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 209.132318][ T7728] loop4: detected capacity change from 0 to 1024 [ 209.168121][ T9] vhci_hcd: vhci_device speed not set [ 209.424737][ C1] net_ratelimit: 53 callbacks suppressed [ 209.780617][ T5777] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 210.459287][ T7741] loop2: detected capacity change from 0 to 128 [ 210.769790][ T7741] EXT4-fs (loop2): Test dummy encryption mode enabled [ 210.869350][ T7741] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.955040][ T7741] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 211.901804][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 212.112140][ T7765] loop2: detected capacity change from 0 to 256 [ 212.930209][ T7776] loop1: detected capacity change from 0 to 1024 [ 213.958816][ T7779] loop3: detected capacity change from 0 to 32768 [ 214.018003][ T7779] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.468 (7779) [ 214.191779][ T7790] IPVS: ip_vs_add_dest(): server weight less than zero [ 214.340431][ T7789] loop1: detected capacity change from 0 to 1024 [ 215.104711][ C1] net_ratelimit: 47 callbacks suppressed [ 215.854859][ T7779] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 215.878866][ T7779] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 215.915457][ T7779] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 215.945059][ T7779] BTRFS info (device loop3): use zstd compression, level 3 [ 215.960223][ T7779] BTRFS info (device loop3): using free space tree [ 216.137875][ T7779] BTRFS info (device loop3): enabling ssd optimizations [ 216.151189][ T7779] BTRFS info (device loop3): auto enabling async discard [ 216.219751][ T5769] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 216.385010][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 216.600566][ T9] usb 2-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice= 1.00 [ 216.639920][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.703542][ T7826] loop4: detected capacity change from 0 to 1024 [ 217.018064][ T9] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 217.625332][ T9] gspca_nw80x: reg_w err -110 [ 217.635863][ T9] gspca_nw80x: Bad webcam type 6 for NW801 [ 218.014754][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 218.204990][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 218.219651][ T8] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.246096][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 218.258796][ T8] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 218.282534][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.313887][ T8] usb 4-1: config 0 descriptor?? [ 218.362416][ T7841] loop4: detected capacity change from 0 to 32768 [ 218.372896][ T7841] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.485 (7841) [ 218.455461][ T7841] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 218.504876][ T7841] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 218.514336][ T7841] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 218.561232][ T7841] BTRFS info (device loop4): use zstd compression, level 3 [ 218.589074][ T5760] usb 2-1: USB disconnect, device number 13 [ 218.606614][ T7841] BTRFS info (device loop4): using free space tree [ 218.758037][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 218.768921][ T7841] BTRFS info (device loop4): enabling ssd optimizations [ 218.782403][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 218.794571][ T7841] BTRFS info (device loop4): auto enabling async discard [ 218.821541][ T8] usb 4-1: USB disconnect, device number 12 [ 219.113628][ T28] audit: type=1804 audit(1789701899.682:10): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.485" name="/newroot/90/file0/bus" dev="loop4" ino=263 res=1 errno=0 [ 220.145734][ T8] net_ratelimit: 85 callbacks suppressed [ 220.358618][ T6045] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 221.195598][ T7896] loop3: detected capacity change from 0 to 32768 [ 221.220535][ T7896] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.495 (7896) [ 221.299381][ T7896] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 221.356039][ T7896] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 221.390428][ T7896] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 221.420188][ T7896] BTRFS info (device loop3): use zstd compression, level 3 [ 221.444800][ T7896] BTRFS info (device loop3): using free space tree [ 222.133960][ T7896] BTRFS info (device loop3): enabling ssd optimizations [ 222.288632][ T7896] BTRFS info (device loop3): auto enabling async discard [ 222.484314][ T28] audit: type=1804 audit(1789701903.032:11): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.495" name="/newroot/128/file0/bus" dev="loop3" ino=263 res=1 errno=0 [ 222.740740][ T5769] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 223.942500][ T7928] loop4: detected capacity change from 0 to 40427 [ 223.978288][ T7928] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 224.010352][ T7928] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 224.049683][ T5804] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 224.050961][ T7928] F2FS-fs (loop4): Unrecognized mount option "f2fs" or missing value [ 224.269376][ T5804] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 224.279004][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.305012][ T5804] usb 4-1: Product: syz [ 224.309240][ T5804] usb 4-1: Manufacturer: syz [ 224.313863][ T5804] usb 4-1: SerialNumber: syz [ 224.366246][ T5804] usb 4-1: config 0 descriptor?? [ 224.378290][ T5804] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 224.475289][ T5804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.499645][ T5804] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 224.516385][ T7954] loop1: detected capacity change from 0 to 32768 [ 224.539535][ T5804] usb 4-1: media controller created [ 224.549833][ T7954] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.506 (7954) [ 224.589428][ T7956] dvb-usb: bulk message failed: -22 (7/0) [ 224.691052][ T7965] loop2: detected capacity change from 0 to 1024 [ 224.741765][ T7954] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 224.826813][ T7954] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 224.964363][ T7954] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 225.107995][ T7954] BTRFS info (device loop1): use zstd compression, level 3 [ 225.196138][ C0] net_ratelimit: 41 callbacks suppressed [ 225.272234][ T7954] BTRFS info (device loop1): using free space tree [ 225.422410][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.531330][ T5804] DVB: Unable to find symbol mt352_attach() [ 225.593634][ T5804] DVB: Unable to find symbol nxt6000_attach() [ 225.600137][ T5804] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 225.618725][ T5804] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 225.655425][ T5804] dvb-usb: schedule remote query interval to 1000 msecs. [ 225.662511][ T5804] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 225.662627][ T5804] dvb-usb: bulk message failed: -22 (7/0) [ 225.685149][ T5804] dvb-usb: bulk message failed: -22 (7/0) [ 225.705771][ T5804] usb 4-1: USB disconnect, device number 13 [ 225.747244][ T7954] BTRFS info (device loop1): enabling ssd optimizations [ 225.786571][ T7954] BTRFS info (device loop1): auto enabling async discard [ 225.843927][ T7991] loop2: detected capacity change from 0 to 128 [ 225.905720][ T7991] EXT4-fs (loop2): Test dummy encryption mode enabled [ 225.963587][ T7991] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.061374][ T7991] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 226.351143][ T28] audit: type=1804 audit(1789701906.922:12): pid=7954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.506" name="/newroot/123/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 226.401531][ T5804] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 227.153646][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.356358][ T5777] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 227.485319][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'. [ 227.523700][ T7989] loop3: detected capacity change from 0 to 32768 [ 227.573430][ T7989] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.513 (7989) [ 227.794902][ T7989] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 227.867828][ T7989] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 227.867891][ T7989] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 227.925755][ T7989] BTRFS info (device loop3): use zstd compression, level 3 [ 227.967060][ T7989] BTRFS info (device loop3): using free space tree [ 228.729449][ T7989] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 228.730867][ T7989] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 228.805708][ T7989] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 228.807683][ T7989] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 228.826302][ T7989] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 228.881066][ T7989] BTRFS error (device loop3): open_ctree failed: -12 [ 229.324330][ T8040] loop3: detected capacity change from 0 to 1024 [ 229.379845][ T5804] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 229.761918][ T5804] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 229.928267][ T5804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.054890][ T5804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.084828][ T5804] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 230.100947][ T8044] loop1: detected capacity change from 0 to 128 [ 230.143941][ T8044] EXT4-fs (loop1): Test dummy encryption mode enabled [ 230.196189][ T5804] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 230.224711][ C1] net_ratelimit: 52 callbacks suppressed [ 230.244783][ T5804] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 230.292867][ T5804] usb 3-1: Manufacturer: syz [ 230.303382][ T8044] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.355664][ T8044] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 230.421264][ T5804] usb 3-1: config 0 descriptor?? [ 230.711170][ T5804] usbhid 3-1:0.0: can't add hid device: -71 [ 230.762777][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.527'. [ 231.336862][ T5804] usbhid: probe of 3-1:0.0 failed with error -71 [ 231.351818][ T5804] usb 3-1: USB disconnect, device number 20 [ 231.415674][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.458504][ T8035] loop4: detected capacity change from 0 to 32768 [ 231.467201][ T8035] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.523 (8035) [ 231.488155][ T8035] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.522027][ T8061] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 231.556888][ T8035] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 231.588571][ T8035] BTRFS info (device loop4): enabling ssd optimizations [ 231.607093][ T8035] BTRFS info (device loop4): using spread ssd allocation scheme [ 231.620588][ T8035] BTRFS error (device loop4): unrecognized mount option 'fragment=data' [ 231.664378][ T8035] BTRFS error (device loop4): open_ctree failed: -22 [ 231.776364][ T5881] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (5881) [ 232.809015][ T8077] loop1: detected capacity change from 0 to 32768 [ 232.874831][ T8077] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.532 (8077) [ 232.970240][ T8077] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 233.013002][ T8077] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 233.054716][ T8077] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 233.104922][ T8077] BTRFS info (device loop1): use zstd compression, level 3 [ 233.122534][ T8077] BTRFS info (device loop1): using free space tree [ 233.288323][ T8077] BTRFS info (device loop1): enabling ssd optimizations [ 233.329476][ T8077] BTRFS info (device loop1): auto enabling async discard [ 233.442925][ T28] audit: type=1804 audit(1789701914.012:13): pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.532" name="/newroot/128/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 233.621772][ T5777] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 233.866304][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 233.893605][ T6052] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop1 scanned by udevd (6052) [ 235.402639][ T8131] loop1: detected capacity change from 0 to 1024 [ 235.426112][ C0] net_ratelimit: 45 callbacks suppressed [ 236.978242][ T8150] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 237.384793][ T8143] loop2: detected capacity change from 0 to 32768 [ 237.397977][ T8143] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 237.572821][ T6052] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 237.783151][ T8158] loop3: detected capacity change from 0 to 1024 [ 238.477991][ T8165] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 238.581488][ T8155] loop4: detected capacity change from 0 to 32768 [ 238.610270][ T8155] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 238.635166][ T8155] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 238.643872][ T8155] BTRFS info (device loop4): enabling ssd optimizations [ 238.659218][ T8155] BTRFS info (device loop4): using spread ssd allocation scheme [ 238.667045][ T8155] BTRFS error (device loop4): unrecognized mount option 'fragment=data' [ 238.678722][ T8155] BTRFS error (device loop4): open_ctree failed: -22 [ 238.872199][ T5881] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (5881) [ 239.195183][ T5760] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 240.030846][ T5760] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 240.078990][ T5760] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 240.136733][ T5760] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 240.179183][ T5760] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 240.204672][ T5760] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 240.236667][ T5760] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 240.247692][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 240.259577][ T5760] usb 3-1: Product: syz [ 240.263884][ T5760] usb 3-1: Manufacturer: syz [ 240.288449][ T5760] cdc_wdm 3-1:1.0: skipping garbage [ 240.319524][ T5760] cdc_wdm 3-1:1.0: skipping garbage [ 240.344514][ T5760] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 240.378102][ T5760] cdc_wdm 3-1:1.0: Unknown control protocol [ 240.517793][ T8189] loop1: detected capacity change from 0 to 128 [ 240.526323][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 240.533258][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 240.539755][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 240.546462][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 240.554881][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 240.561598][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 240.568498][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 240.575114][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 240.581460][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 240.588409][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 240.594941][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 240.601559][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 240.609674][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 240.616337][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 240.619060][ T8189] EXT4-fs (loop1): Test dummy encryption mode enabled [ 240.629806][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 240.636461][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 240.642933][ T5760] usb 3-1: USB disconnect, device number 21 [ 240.649018][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 240.649040][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 240.649059][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 240.716249][ T8189] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.733909][ T8189] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 241.004382][ T5804] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 241.344716][ C1] net_ratelimit: 59 callbacks suppressed [ 241.472879][ T5804] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 241.683344][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.759624][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.783668][ T5804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 241.802846][ T5804] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 241.813938][ T5804] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 241.827970][ T5804] usb 4-1: Manufacturer: syz [ 241.858975][ T5804] usb 4-1: config 0 descriptor?? [ 241.961968][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.213218][ T8204] loop2: detected capacity change from 0 to 1024 [ 242.785082][ T5804] usbhid 4-1:0.0: can't add hid device: -71 [ 242.791238][ T5804] usbhid: probe of 4-1:0.0 failed with error -71 [ 242.918196][ T5804] usb 4-1: USB disconnect, device number 14 [ 244.114753][ T5760] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 244.323484][ T5760] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 244.342156][ T8227] loop3: detected capacity change from 0 to 128 [ 244.346632][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.363662][ T8227] EXT4-fs (loop3): Test dummy encryption mode enabled [ 244.378312][ T5760] usb 2-1: Product: syz [ 244.379092][ T8227] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.398261][ T8227] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 244.409230][ T5760] usb 2-1: Manufacturer: syz [ 244.418285][ T8221] loop4: detected capacity change from 0 to 32768 [ 244.431034][ T5760] usb 2-1: SerialNumber: syz [ 244.452914][ T5760] usb 2-1: config 0 descriptor?? [ 244.613974][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 244.648021][ T8221] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 244.658743][ T8221] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 244.667709][ T8221] BTRFS info (device loop4): enabling ssd optimizations [ 244.674817][ T8221] BTRFS info (device loop4): using spread ssd allocation scheme [ 244.682624][ T8221] BTRFS error (device loop4): unrecognized mount option 'fragment=data' [ 244.695829][ T8221] BTRFS error (device loop4): open_ctree failed: -22 [ 244.938684][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 245.260977][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 245.306213][ T5760] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 245.331605][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 245.466763][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 245.483015][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 245.497711][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 245.512678][ T5769] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 245.535227][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 245.553845][ T9] usb 3-1: Product: syz [ 245.564195][ T9] usb 3-1: Manufacturer: syz [ 245.598041][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 245.614811][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 245.655542][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 245.662037][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 245.898678][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.905634][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.905974][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.905994][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.925872][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.932507][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.939410][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.946809][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.953471][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.960097][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.966509][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.973153][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.982099][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 245.988846][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 245.996133][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 246.002741][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 246.009408][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 246.016062][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 246.022854][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 246.029751][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 246.040649][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 246.049916][ T5804] usb 3-1: USB disconnect, device number 22 [ 246.188776][ T8241] loop3: detected capacity change from 0 to 1024 [ 246.218508][ T8241] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 246.238345][ T8241] JBD2: no valid journal superblock found [ 246.253544][ T8241] EXT4-fs (loop3): Could not load journal inode [ 246.484017][ C1] net_ratelimit: 74 callbacks suppressed [ 247.585578][ T8247] loop2: detected capacity change from 0 to 1024 [ 247.668732][ T8247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.975527][ T5760] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 248.005419][ T5760] usb 2-1: USB disconnect, device number 14 [ 248.178832][ T28] audit: type=1800 audit(1789701928.662:14): pid=8257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.573" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 248.518658][ T28] audit: type=1800 audit(1789701928.682:15): pid=8257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.573" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 248.580072][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.843895][ T8266] loop1: detected capacity change from 0 to 1024 [ 250.044782][ T5827] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 250.238606][ T5827] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 250.260961][ T5827] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 250.289424][ T5827] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 250.311013][ T5827] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 250.345052][ T5827] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 250.370293][ T5827] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 250.397307][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 250.414709][ T5827] usb 2-1: Product: syz [ 250.418988][ T5827] usb 2-1: Manufacturer: syz [ 250.448220][ T5827] cdc_wdm 2-1:1.0: skipping garbage [ 250.453478][ T5827] cdc_wdm 2-1:1.0: skipping garbage [ 250.483754][ T5827] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 250.493029][ T5827] cdc_wdm 2-1:1.0: Unknown control protocol [ 250.723962][ T5760] usb 2-1: USB disconnect, device number 15 [ 250.730223][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 250.916838][ T8281] loop4: detected capacity change from 0 to 32768 [ 250.953113][ T8281] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 250.972533][ T8286] loop2: detected capacity change from 0 to 256 [ 250.986312][ T8286] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 251.082835][ T8286] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 251.222737][ T6052] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 251.486289][ T8290] No such timeout policy "syz1" [ 251.504696][ C0] net_ratelimit: 60 callbacks suppressed [ 251.881191][ T8292] ip_tables: iptables: counters copy to user failed while replacing table [ 252.075170][ T8] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 252.083416][ T8294] sd 0:0:1:0: PR command failed: 1026 [ 252.113531][ T8294] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 252.133174][ T8294] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 252.197142][ T8298] FAULT_INJECTION: forcing a failure. [ 252.197142][ T8298] name failslab, interval 1, probability 0, space 0, times 0 [ 252.214830][ T8298] CPU: 1 PID: 8298 Comm: syz.2.590 Not tainted syzkaller #0 [ 252.222157][ T8298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.222173][ T8298] Call Trace: [ 252.222180][ T8298] [ 252.222190][ T8298] dump_stack_lvl+0x18c/0x250 [ 252.222226][ T8298] ? show_regs_print_info+0x20/0x20 [ 252.249233][ T8298] ? load_image+0x420/0x420 [ 252.253781][ T8298] ? __might_sleep+0xe0/0xe0 [ 252.253814][ T8298] ? __lock_acquire+0x7d80/0x7d80 [ 252.253841][ T8298] should_fail_ex+0x394/0x4c0 [ 252.253872][ T8298] should_failslab+0x9/0x20 [ 252.253898][ T8298] slab_pre_alloc_hook+0x59/0x300 [ 252.253931][ T8298] kmem_cache_alloc+0x5a/0x2c0 [ 252.253953][ T8298] ? __kernfs_new_node+0xe5/0x7f0 [ 252.253981][ T8298] __kernfs_new_node+0xe5/0x7f0 [ 252.254014][ T8298] ? kernfs_new_node+0x260/0x260 [ 252.269157][ T8298] ? up_write+0x1be/0x410 [ 252.269193][ T8298] kernfs_new_node+0x14c/0x260 [ 252.269228][ T8298] __kernfs_create_file+0x4b/0x2e0 [ 252.289248][ T8298] sysfs_add_file_mode_ns+0x237/0x2f0 [ 252.299425][ T8298] internal_create_group+0x431/0xd10 [ 252.309779][ T8298] ? kernfs_add_one+0x149/0x6b0 [ 252.321020][ T8298] ? sysfs_create_group+0x20/0x20 [ 252.331283][ T8298] ? up_write+0x1be/0x410 [ 252.341722][ T8298] sysfs_create_groups+0x59/0x120 [ 252.346808][ T8298] device_add_attrs+0xdf/0x830 [ 252.351812][ T8298] ? device_add_class_symlinks+0x240/0x240 [ 252.358645][ T8298] ? device_add_class_symlinks+0x21f/0x240 [ 252.364593][ T8298] device_add+0x51a/0xc40 [ 252.369544][ T8298] netdev_register_kobject+0x188/0x320 [ 252.375205][ T8298] register_netdevice+0x12aa/0x1ba0 [ 252.380437][ T8298] ? netif_stacked_transfer_operstate+0x210/0x210 [ 252.380478][ T8298] ? __asan_memset+0x22/0x40 [ 252.392399][ T8298] ? tun_net_initialize+0x1ac/0x480 [ 252.397634][ T8298] ? tun_not_capable+0x1f0/0x1f0 [ 252.402984][ T8298] ? alloc_netdev_mqs+0xc23/0x1040 [ 252.408306][ T8298] tun_set_iff+0x82b/0xea0 [ 252.408348][ T8298] __tun_chr_ioctl+0x7e0/0x2070 [ 252.408380][ T8298] ? tun_flow_create+0x310/0x310 [ 252.417696][ T8298] ? bpf_lsm_file_ioctl+0x9/0x10 [ 252.427658][ T8298] ? security_file_ioctl+0x80/0xa0 [ 252.427705][ T8298] ? tun_chr_poll+0x630/0x630 [ 252.437571][ T8298] __se_sys_ioctl+0xfd/0x170 [ 252.437621][ T8298] do_syscall_64+0x55/0xb0 [ 252.447169][ T8298] ? clear_bhb_loop+0x40/0x90 [ 252.447209][ T8298] ? clear_bhb_loop+0x40/0x90 [ 252.456593][ T8298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.462518][ T8298] RIP: 0033:0x7f1fe2f9e159 [ 252.467077][ T8298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.467100][ T8298] RSP: 002b:00007f1fe3d94028 EFLAGS: 00000246 [ 252.496611][ T8298] ORIG_RAX: 0000000000000010 [ 252.496629][ T8298] RAX: ffffffffffffffda RBX: 00007f1fe3225fa0 RCX: 00007f1fe2f9e159 [ 252.496646][ T8298] RDX: 00002000000002c0 RSI: 00000000400454ca RDI: 0000000000000004 [ 252.509328][ T8298] RBP: 00007f1fe303506b R08: 0000000000000000 R09: 0000000000000000 [ 252.525392][ T8298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.525415][ T8298] R13: 00007f1fe3226038 R14: 00007f1fe3225fa0 R15: 00007ffe502ab758 [ 252.525442][ T8298] [ 252.597389][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 252.607415][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.648046][ T8] usb 4-1: Product: syz [ 252.652385][ T8] usb 4-1: Manufacturer: syz [ 252.705116][ T8] usb 4-1: SerialNumber: syz [ 252.725543][ T8] usb 4-1: config 0 descriptor?? [ 252.941585][ T8] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 253.151314][ T8296] loop4: detected capacity change from 0 to 40427 [ 253.164793][ T8296] F2FS-fs (loop4): heap/no_heap options were deprecated [ 253.183914][ T8296] F2FS-fs (loop4): build fault injection attr: rate: 19, type: 0x7ffff [ 254.933616][ T8] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 254.967479][ T8329] futex_wake_op: syz.1.598 tries to shift op by 144; fix this program [ 255.024843][ T8329] loop1: detected capacity change from 0 to 256 [ 255.685280][ T8329] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 256.156062][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.162644][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.219153][ T8] usb 4-1: USB disconnect, device number 15 [ 256.624704][ C1] net_ratelimit: 39 callbacks suppressed [ 256.687721][ T8334] loop4: detected capacity change from 0 to 32768 [ 256.704454][ T8334] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.600 (8334) [ 256.726861][ T8334] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 256.738559][ T8334] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 256.748515][ T8334] BTRFS info (device loop4): setting nodatasum [ 256.756207][ T8334] BTRFS info (device loop4): force zlib compression, level 3 [ 256.764894][ T8334] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 256.774559][ T8334] BTRFS info (device loop4): use lzo compression, level 0 [ 256.784485][ T8334] BTRFS info (device loop4): turning on flush-on-commit [ 256.794422][ T8334] BTRFS info (device loop4): enabling auto defrag [ 256.802151][ T8334] BTRFS info (device loop4): max_inline at 4096 [ 256.810205][ T8334] BTRFS info (device loop4): using free space tree [ 256.932704][ T8334] BTRFS info (device loop4): enabling ssd optimizations [ 257.835098][ T6045] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 258.321456][ T8370] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 259.521912][ T5826] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 259.780876][ T5826] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 259.821291][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.840207][ T5826] usb 5-1: Product: syz [ 259.844461][ T5826] usb 5-1: Manufacturer: syz [ 259.844482][ T5826] usb 5-1: SerialNumber: syz [ 259.876628][ T5826] usb 5-1: config 0 descriptor?? [ 260.030897][ T8384] loop1: detected capacity change from 0 to 8 [ 260.107058][ T5826] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 260.385764][ T8366] loop2: detected capacity change from 0 to 40427 [ 260.400156][ T8366] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 260.427772][ T8366] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 260.458773][ T8366] F2FS-fs (loop2): Unrecognized mount option "f2fs" or missing value [ 261.888085][ T8400] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 262.031368][ T8397] syzkaller0: entered promiscuous mode [ 262.067955][ T8397] syzkaller0: entered allmulticast mode [ 262.078421][ T5826] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 262.135981][ T5826] usb 5-1: USB disconnect, device number 19 [ 262.304706][ C0] net_ratelimit: 46 callbacks suppressed [ 262.370732][ T8414] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 262.476547][ T1079] rtrs_client L2018: : CM error (CM event: address error, err: -19) [ 262.660853][ T8414] rtrs_client L2618: : init_conns() failed: err=-113 path=@ip:27.0.0.1 [:0] [ 263.464148][ T5760] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 263.662086][ T5760] usb 3-1: Using ep0 maxpacket: 8 [ 263.685873][ T5760] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.715972][ T5760] usb 3-1: config 0 interface 0 has no altsetting 0 [ 263.723935][ T5760] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 263.750583][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.772972][ T5760] usb 3-1: config 0 descriptor?? [ 264.198476][ T5760] lenovo 0003:17EF:60B5.0003: unknown main item tag 0x0 [ 264.228727][ T5760] lenovo 0003:17EF:60B5.0003: unbalanced collection at end of report description [ 264.257428][ T5760] lenovo 0003:17EF:60B5.0003: hid_parse failed [ 264.272320][ T5760] lenovo: probe of 0003:17EF:60B5.0003 failed with error -22 [ 264.409978][ T5760] usb 3-1: USB disconnect, device number 23 [ 265.015033][ T5760] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 265.251472][ T5760] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 265.277128][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.314689][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.341839][ T5760] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 265.393700][ T5760] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 265.422274][ T5760] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 265.448505][ T5760] usb 5-1: Manufacturer: syz [ 265.467790][ T5760] usb 5-1: config 0 descriptor?? [ 267.744341][ T8442] loop2: detected capacity change from 0 to 1024 [ 267.816459][ T8442] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 268.064721][ C0] net_ratelimit: 42 callbacks suppressed [ 268.758246][ T8445] loop2: detected capacity change from 0 to 1024 [ 270.557327][ T8452] loop2: detected capacity change from 0 to 1024 [ 270.623030][ T5760] usbhid 5-1:0.0: can't add hid device: -71 [ 270.640729][ T5760] usbhid: probe of 5-1:0.0 failed with error -71 [ 270.661558][ T8452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.679579][ T5760] usb 5-1: USB disconnect, device number 20 [ 270.784733][ T28] audit: type=1800 audit(1789701951.352:16): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.636" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 270.828572][ T28] audit: type=1800 audit(1789701951.402:17): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.636" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 271.344532][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.194786][ C0] net_ratelimit: 51 callbacks suppressed [ 275.385405][ T8480] loop1: detected capacity change from 0 to 32768 [ 277.248386][ T8480] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop1": -EINTR [ 277.691087][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 278.564892][ T5760] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 278.687966][ T8505] FAULT_INJECTION: forcing a failure. [ 278.687966][ T8505] name failslab, interval 1, probability 0, space 0, times 0 [ 278.702918][ T8505] CPU: 0 PID: 8505 Comm: syz.4.651 Not tainted syzkaller #0 [ 278.704709][ C1] net_ratelimit: 45 callbacks suppressed [ 278.710597][ T8505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 278.728764][ T8505] Call Trace: [ 278.728785][ T8505] [ 278.728795][ T8505] dump_stack_lvl+0x18c/0x250 [ 278.728828][ T8505] ? show_regs_print_info+0x20/0x20 [ 278.728854][ T8505] ? load_image+0x420/0x420 [ 278.735783][ T8505] ? __might_sleep+0xe0/0xe0 [ 278.735828][ T8505] ? __lock_acquire+0x7d80/0x7d80 [ 278.735857][ T8505] should_fail_ex+0x394/0x4c0 [ 278.768887][ T8505] should_failslab+0x9/0x20 [ 278.773974][ T8505] slab_pre_alloc_hook+0x59/0x300 [ 278.780930][ T8505] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 278.786715][ T8505] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 278.793697][ T8505] __kmem_cache_alloc_node+0x53/0x250 [ 278.801645][ T8505] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 278.807766][ T8505] __kmalloc+0xa7/0x240 [ 278.813240][ T8505] tomoyo_realpath_from_path+0xe6/0x5c0 [ 278.819721][ T8505] ? tomoyo_domain+0xd6/0x120 [ 278.824983][ T8505] tomoyo_path_number_perm+0x248/0x5e0 [ 278.830847][ T8505] ? tomoyo_path_number_perm+0x217/0x5e0 [ 278.836934][ T8505] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 278.843105][ T8505] ? __fget_files+0x28/0x460 [ 278.848053][ T8505] security_file_ioctl+0x70/0xa0 [ 278.853310][ T8505] __se_sys_ioctl+0x48/0x170 [ 278.858650][ T8505] do_syscall_64+0x55/0xb0 [ 278.863946][ T8505] ? clear_bhb_loop+0x40/0x90 [ 278.870103][ T8505] ? clear_bhb_loop+0x40/0x90 [ 278.875293][ T8505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.881617][ T8505] RIP: 0033:0x7fdd0199e159 [ 278.888262][ T8505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.910974][ T8505] RSP: 002b:00007fdd0287e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.920202][ T8505] RAX: ffffffffffffffda RBX: 00007fdd01c25fa0 RCX: 00007fdd0199e159 [ 278.930999][ T8505] RDX: 00002000000002c0 RSI: 00000000400454ca RDI: 0000000000000004 [ 278.939269][ T8505] RBP: 00007fdd01a3506b R08: 0000000000000000 R09: 0000000000000000 [ 278.950318][ T8505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.960552][ T8505] R13: 00007fdd01c26038 R14: 00007fdd01c25fa0 R15: 00007ffc56d0db18 [ 278.971015][ T8505] [ 278.986295][ T8505] ERROR: Out of memory at tomoyo_realpath_from_path. [ 278.997181][ T8491] loop2: detected capacity change from 0 to 32768 [ 279.021863][ T5760] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 279.044780][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.061241][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.074586][ T5760] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 279.104726][ T8491] JBD2: Ignoring recovery information on journal [ 279.140094][ T5760] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 279.178157][ T5760] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 279.189786][ T5760] usb 4-1: Manufacturer: syz [ 279.215048][ T8491] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 279.256486][ T5760] usb 4-1: config 0 descriptor?? [ 279.374141][ T28] audit: type=1800 audit(1789701959.942:18): pid=8491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.647" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 279.736289][ T788] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 279.748006][ T5087] Bluetooth: hci4: command 0x1003 tx timeout [ 279.758852][ T5771] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 279.892302][ T5760] usbhid 4-1:0.0: can't add hid device: -71 [ 279.914580][ T5760] usbhid: probe of 4-1:0.0 failed with error -71 [ 279.956170][ T8491] syz.2.647 (8491) used greatest stack depth: 18520 bytes left [ 280.062583][ T788] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 280.384470][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 280.793943][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.814776][ T5760] usb 4-1: USB disconnect, device number 16 [ 280.825603][ T788] usb 5-1: Product: syz [ 280.830227][ T788] usb 5-1: Manufacturer: syz [ 280.843465][ T788] usb 5-1: SerialNumber: syz [ 280.851913][ T788] usb 5-1: config 0 descriptor?? [ 281.082349][ T788] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 281.365368][ T8527] loop2: detected capacity change from 0 to 1024 [ 281.426516][ T8527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.458469][ T8530] FAULT_INJECTION: forcing a failure. [ 281.458469][ T8530] name failslab, interval 1, probability 0, space 0, times 0 [ 281.473074][ T8530] CPU: 0 PID: 8530 Comm: syz.1.660 Not tainted syzkaller #0 [ 281.480587][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.492678][ T8530] Call Trace: [ 281.496602][ T8530] [ 281.499812][ T8530] dump_stack_lvl+0x18c/0x250 [ 281.505415][ T8530] ? show_regs_print_info+0x20/0x20 [ 281.511676][ T8530] ? load_image+0x420/0x420 [ 281.516591][ T8530] ? __might_sleep+0xe0/0xe0 [ 281.521431][ T8530] ? __lock_acquire+0x7d80/0x7d80 [ 281.526860][ T8530] should_fail_ex+0x394/0x4c0 [ 281.532265][ T8530] should_failslab+0x9/0x20 [ 281.537181][ T8530] slab_pre_alloc_hook+0x59/0x300 [ 281.543519][ T8530] ? prepend_path+0x8a7/0x950 [ 281.548445][ T8530] ? tomoyo_encode+0x2ad/0x570 [ 281.553897][ T8530] ? tomoyo_encode+0x2ad/0x570 [ 281.559033][ T8530] __kmem_cache_alloc_node+0x53/0x250 [ 281.564841][ T8530] ? tomoyo_encode+0x2ad/0x570 [ 281.569653][ T8530] __kmalloc+0xa7/0x240 [ 281.576398][ T8530] tomoyo_encode+0x2ad/0x570 [ 281.581233][ T8530] tomoyo_realpath_from_path+0x57c/0x5c0 [ 281.587547][ T8530] ? tomoyo_domain+0xd6/0x120 [ 281.592624][ T8530] tomoyo_path_number_perm+0x248/0x5e0 [ 281.599276][ T8530] ? tomoyo_path_number_perm+0x217/0x5e0 [ 281.605508][ T8530] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 281.611208][ T8530] ? futex_wake_mark+0x150/0x150 [ 281.616615][ T8530] ? __fget_files+0x28/0x460 [ 281.621276][ T8530] security_file_ioctl+0x70/0xa0 [ 281.626275][ T8530] __se_sys_ioctl+0x48/0x170 [ 281.631011][ T8530] do_syscall_64+0x55/0xb0 [ 281.640425][ T8530] ? clear_bhb_loop+0x40/0x90 [ 281.645462][ T8530] ? clear_bhb_loop+0x40/0x90 [ 281.653952][ T8530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.659903][ T8530] RIP: 0033:0x7f202ed9e159 [ 281.664660][ T8530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.686914][ T8530] RSP: 002b:00007f202fc1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.696198][ T8530] RAX: ffffffffffffffda RBX: 00007f202f025fa0 RCX: 00007f202ed9e159 [ 281.705953][ T8530] RDX: 00002000000002c0 RSI: 00000000400454ca RDI: 0000000000000004 [ 281.714428][ T8530] RBP: 00007f202ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 281.722808][ T8530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.730817][ T8530] R13: 00007f202f026038 R14: 00007f202f025fa0 R15: 00007ffe16439068 [ 281.739003][ T8530] [ 281.774150][ T8530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 281.958585][ T28] audit: type=1800 audit(1789701962.442:19): pid=8538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.655" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 282.088157][ T788] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 282.170607][ T788] usb 5-1: USB disconnect, device number 21 [ 282.213530][ T28] audit: type=1800 audit(1789701962.452:20): pid=8538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.655" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 282.400011][ T8542] netlink: 'syz.3.661': attribute type 1 has an invalid length. [ 282.408043][ T8542] netlink: 'syz.3.661': attribute type 2 has an invalid length. [ 282.440079][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.837830][ T8550] loop2: detected capacity change from 0 to 256 [ 282.884458][ T8550] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 282.942147][ T28] audit: type=1800 audit(1789701963.512:21): pid=8550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.663" name="file1" dev="loop2" ino=1048599 res=0 errno=0 [ 282.971545][ T28] audit: type=1800 audit(1789701963.542:22): pid=8550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.663" name="file1" dev="loop2" ino=1048599 res=0 errno=0 [ 283.420996][ T5760] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 284.003968][ T5760] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 284.093156][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.133890][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.193989][ T5760] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 284.219067][ T8560] bio_check_eod: 12 callbacks suppressed [ 284.219081][ T8560] syz.2.666: attempt to access beyond end of device [ 284.219081][ T8560] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 284.243650][ T8560] syz.2.666: attempt to access beyond end of device [ 284.243650][ T8560] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 284.258651][ T5760] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 284.269771][ T8560] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 284.272014][ T5760] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 284.296171][ T8560] syz.2.666: attempt to access beyond end of device [ 284.296171][ T8560] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 284.314492][ T8560] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 284.323428][ T5760] usb 5-1: Manufacturer: syz [ 284.339481][ T5760] usb 5-1: config 0 descriptor?? [ 284.347291][ T8560] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 284.369779][ T8560] UDF-fs: Scanning with blocksize 512 failed [ 284.378973][ T8560] syz.2.666: attempt to access beyond end of device [ 284.378973][ T8560] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 284.397346][ T8560] syz.2.666: attempt to access beyond end of device [ 284.397346][ T8560] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 284.417349][ T8560] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 284.435386][ T8560] syz.2.666: attempt to access beyond end of device [ 284.435386][ T8560] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 284.453375][ T8560] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 284.465602][ C1] net_ratelimit: 48 callbacks suppressed [ 284.473953][ T8560] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 284.483958][ T8560] UDF-fs: Scanning with blocksize 1024 failed [ 284.491199][ T8560] syz.2.666: attempt to access beyond end of device [ 284.491199][ T8560] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 284.505375][ T8560] syz.2.666: attempt to access beyond end of device [ 284.505375][ T8560] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 284.520719][ T8560] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 284.520910][ T8560] syz.2.666: attempt to access beyond end of device [ 284.520910][ T8560] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 284.588048][ T8560] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 284.610902][ T8560] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 284.620546][ T8560] UDF-fs: Scanning with blocksize 2048 failed [ 284.632303][ T8560] syz.2.666: attempt to access beyond end of device [ 284.632303][ T8560] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 284.661962][ T8560] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 284.679242][ T8560] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 284.698043][ T8560] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 284.730375][ T8560] UDF-fs: Scanning with blocksize 4096 failed [ 284.743668][ T8560] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 284.784921][ T5771] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 285.030704][ T8574] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 285.084298][ T5760] usbhid 5-1:0.0: can't add hid device: -71 [ 285.092955][ T5760] usbhid: probe of 5-1:0.0 failed with error -71 [ 285.137841][ T5760] usb 5-1: USB disconnect, device number 22 [ 285.247287][ T8576] FAULT_INJECTION: forcing a failure. [ 285.247287][ T8576] name failslab, interval 1, probability 0, space 0, times 0 [ 285.262448][ T8576] CPU: 0 PID: 8576 Comm: syz.2.671 Not tainted syzkaller #0 [ 285.269890][ T8576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.269918][ T8576] Call Trace: [ 285.269931][ T8576] [ 285.269942][ T8576] dump_stack_lvl+0x18c/0x250 [ 285.269982][ T8576] ? show_regs_print_info+0x20/0x20 [ 285.270005][ T8576] ? load_image+0x420/0x420 [ 285.270031][ T8576] ? __might_sleep+0xe0/0xe0 [ 285.270060][ T8576] ? __lock_acquire+0x7d80/0x7d80 [ 285.284800][ T8576] should_fail_ex+0x394/0x4c0 [ 285.284848][ T8576] should_failslab+0x9/0x20 [ 285.284879][ T8576] slab_pre_alloc_hook+0x59/0x300 [ 285.293138][ T8576] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 285.293172][ T8576] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 285.293190][ T8576] __kmem_cache_alloc_node+0x53/0x250 [ 285.304029][ T8576] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 285.314209][ T8576] __kmalloc+0xa7/0x240 [ 285.325151][ T8576] tomoyo_realpath_from_path+0xe6/0x5c0 [ 285.325195][ T8576] ? tomoyo_domain+0xd6/0x120 [ 285.325218][ T8576] tomoyo_path_number_perm+0x248/0x5e0 [ 285.325243][ T8576] ? tomoyo_path_number_perm+0x217/0x5e0 [ 285.325264][ T8576] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 285.325321][ T8576] ? __fget_files+0x28/0x460 [ 285.325356][ T8576] security_file_ioctl+0x70/0xa0 [ 285.325386][ T8576] __se_sys_ioctl+0x48/0x170 [ 285.404234][ T8576] do_syscall_64+0x55/0xb0 [ 285.408867][ T8576] ? clear_bhb_loop+0x40/0x90 [ 285.416461][ T8576] ? clear_bhb_loop+0x40/0x90 [ 285.421527][ T8576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.427687][ T8576] RIP: 0033:0x7f1fe2f9e159 [ 285.432767][ T8576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.457263][ T8576] RSP: 002b:00007f1fe3d94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.470188][ T8576] RAX: ffffffffffffffda RBX: 00007f1fe3225fa0 RCX: 00007f1fe2f9e159 [ 285.478635][ T8576] RDX: 00002000000002c0 RSI: 00000000400454ca RDI: 0000000000000004 [ 285.487719][ T8576] RBP: 00007f1fe303506b R08: 0000000000000000 R09: 0000000000000000 [ 285.496643][ T8576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.507621][ T8576] R13: 00007f1fe3226038 R14: 00007f1fe3225fa0 R15: 00007ffe502ab758 [ 285.507656][ T8576] [ 285.576176][ T8576] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.816004][ T8593] ip6erspan0: entered allmulticast mode [ 287.247079][ T8599] [ 287.249765][ T8599] ====================================================== [ 287.250659][ T8607] kcov: kcov_start: t = ffff888079998000, size = 524288, area = ffffc9000cdb9000 [ 287.258196][ T8599] WARNING: possible circular locking dependency detected [ 287.258223][ T8599] syzkaller #0 Not tainted [ 287.280922][ T5758] No more buffers in queue [ 287.286550][ T8599] ------------------------------------------------------ [ 287.286565][ T8599] syz.3.681/8599 is trying to acquire lock: [ 287.286582][ T8599] ffffffff8de55e88 (tpg_instances_lock){+.+.}-{3:3}, at: tcm_alloc+0x21/0x2d0 [ 287.286634][ T8599] [ 287.286634][ T8599] but task is already holding lock: [ 287.286638][ T8599] ffff88807b1b8398 (&gi->lock){+.+.}-{3:3} [ 287.291576][ T5758] eth0: xmit ffff88802e01f4f0 42:01:0a:80:00:01 [ 287.300794][ T8599] , at: config_usb_cfg_link+0x59/0x250 [ 287.300830][ T8599] [ 287.300830][ T8599] which lock already depends on the new lock. [ 287.300830][ T8599] [ 287.300836][ T8599] [ 287.300836][ T8599] the existing dependency chain (in reverse order) is: [ 287.300842][ T8599] [ 287.300842][ T8599] -> #2 (&gi->lock){+.+.}-{3:3}: [ 287.300869][ C0] virtqueue callback for ffff888021297600 (ffffffff85c745d0) [ 287.300867][ T8599] __mutex_lock+0x135/0xc80 [ 287.300887][ T8599] config_usb_cfg_link+0x59/0x250 [ 287.300905][ T8599] configfs_symlink+0x5a5/0xfe0 [ 287.309053][ T5758] Added buffer head 5 to ffff888021297800 [ 287.321661][ T8599] vfs_symlink+0x138/0x2b0 [ 287.321694][ T8599] do_symlinkat+0x1ba/0x400 [ 287.321709][ T8599] __x64_sys_symlinkat+0x99/0xb0 [ 287.321723][ C0] virtqueue callback for ffff888021297600 (ffffffff85c745d0) [ 287.321726][ T8599] do_syscall_64+0x55/0xb0 [ 287.321748][ C0] virtqueue callback for ffff888021297800 (ffffffff85c746c0) [ 287.321845][ T8599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.330688][ C0] Sent skb ffff88802e01f4f0 [ 287.335985][ T8599] [ 287.335985][ T8599] -> #1 (&sb->s_type->i_mutex_key#29){++++}-{3:3} [ 287.343506][ C0] No more buffers in queue [ 287.350119][ T8599] : [ 287.350133][ T8599] down_write+0x97/0x200 [ 287.350159][ T8599] configfs_depend_item_unlocked+0x157/0x430 [ 287.350178][ T8599] usbg_make_tpg+0x1e1/0x550 [ 287.350202][ T8599] target_fabric_make_tpg+0xa4/0x6d0 [ 287.362138][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 287.373030][ T8599] configfs_mkdir+0x515/0x9e0 [ 287.373065][ T8599] vfs_mkdir+0x2a5/0x470 [ 287.373082][ T8599] do_mkdirat+0x1dc/0x450 [ 287.381326][ C0] Receiving skb proto 0x0800 len 40 type 0 [ 287.391083][ T8599] __x64_sys_mkdirat+0x89/0xa0 [ 287.391116][ T8599] do_syscall_64+0x55/0xb0 [ 287.391138][ T8599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.396464][ C0] No more buffers in queue [ 287.402244][ T8599] [ 287.402244][ T8599] -> #0 ( [ 287.408688][ C0] Added buffer head 1884 to ffff888021297600 [ 287.417551][ T8599] tpg_instances_lock){+.+.}-{3:3}: [ 287.417580][ T8599] __lock_acquire+0x37ef/0x7d80 [ 287.417608][ T8599] lock_acquire+0x19e/0x420 [ 287.422574][ C0] Added buffer head 1715 to ffff888021297600 [ 287.428232][ T8599] __mutex_lock+0x135/0xc80 [ 287.428271][ T8599] tcm_alloc+0x21/0x2d0 [ 287.428287][ T8599] usb_get_function+0x5d/0xb0 [ 287.428305][ T8599] config_usb_cfg_link+0x148/0x250 [ 287.434808][ C0] Added buffer head 1714 to ffff888021297600 [ 287.443170][ T8599] configfs_symlink+0x5a5/0xfe0 [ 287.448510][ C0] Added buffer head 1713 to ffff888021297600 [ 287.456345][ T8599] vfs_symlink+0x138/0x2b0 [ 287.456374][ T8599] do_symlinkat+0x1ba/0x400 [ 287.462987][ C0] Added buffer head 1712 to ffff888021297600 [ 287.468115][ T8599] __x64_sys_symlinkat+0x99/0xb0 [ 287.468147][ T8599] do_syscall_64+0x55/0xb0 [ 287.468167][ T8599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.479400][ C0] Added buffer head 1711 to ffff888021297600 [ 287.483950][ T8599] [ 287.483950][ T8599] other info that might help us debug this: [ 287.483950][ T8599] [ 287.486458][ C0] Added buffer head 1710 to ffff888021297600 [ 287.491683][ T8599] Chain exists of: [ 287.491683][ T8599] tpg_instances_lock [ 287.498370][ C0] Added buffer head 1709 to ffff888021297600 [ 287.503584][ T8599] --> &sb->s_type->i_mutex_key [ 287.509876][ C0] Added buffer head 1708 to ffff888021297600 [ 287.515610][ T8599] #29 --> &gi->lock [ 287.515610][ T8599] [ 287.515630][ T8599] Possible unsafe locking scenario: [ 287.515630][ T8599] [ 287.515635][ T8599] CPU0 CPU1 [ 287.515640][ T8599] ---- ---- [ 287.515645][ T8599] lock(&gi->lock); [ 287.515658][ T8599] lock( [ 287.520862][ C0] Added buffer head 1707 to ffff888021297600 [ 287.526576][ T8599] &sb->s_type->i_mutex_key#29); [ 287.526600][ T8599] lock(&gi->lock); [ 287.526612][ T8599] lock(tpg_instances_lock); [ 287.526624][ T8599] [ 287.526624][ T8599] *** DEADLOCK *** [ 287.526624][ T8599] [ 287.526629][ T8599] 3 locks held by syz.3.681/8599: [ 287.532573][ C0] Added buffer head 1706 to ffff888021297600 [ 287.538392][ T8599] #0: ffff888142296418 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 287.543883][ C0] Added buffer head 1705 to ffff888021297600 [ 287.548825][ T8599] #1: ffff888041cb3910 (&sb->s_type->i_mutex_key#29){++++}-{3:3}, at: configfs_symlink+0x47a/0xfe0 [ 287.555884][ C0] Added buffer head 1704 to ffff888021297600 [ 287.560328][ T8599] #2: [ 287.565525][ C0] Added buffer head 1703 to ffff888021297600 [ 287.571849][ T8599] ffff88807b1b8398 [ 287.577195][ C0] Added buffer head 1702 to ffff888021297600 [ 287.582702][ T8599] (&gi->lock){+.+.}-{3:3} [ 287.589488][ C0] Added buffer head 1701 to ffff888021297600 [ 287.595371][ T8599] , at: config_usb_cfg_link+0x59/0x250 [ 287.595408][ T8599] [ 287.595408][ T8599] stack backtrace: [ 287.595415][ T8599] CPU: 1 PID: 8599 Comm: syz.3.681 Not tainted syzkaller #0 [ 287.600854][ C0] Added buffer head 1700 to ffff888021297600 [ 287.605818][ T8599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.605837][ T8599] Call Trace: [ 287.605847][ T8599] [ 287.605856][ T8599] dump_stack_lvl+0x18c/0x250 [ 287.611500][ C0] Added buffer head 1699 to ffff888021297600 [ 287.617501][ T8599] ? load_image+0x420/0x420 [ 287.617536][ T8599] ? show_regs_print_info+0x20/0x20 [ 287.617563][ T8599] ? print_circular_bug+0x12b/0x1a0 [ 287.623538][ C0] Added buffer head 1698 to ffff888021297600 [ 287.629436][ T8599] check_noncircular+0x2fc/0x400 [ 287.629469][ T8599] ? print_deadlock_bug+0x5d0/0x5d0 [ 287.629488][ T8599] ? lockdep_lock+0xf5/0x230 [ 287.629498][ C0] virtqueue callback for ffff88814127c400 (ffffffff84a02460) [ 287.629511][ T8599] ? _find_first_zero_bit+0xd6/0x100 [ 287.629529][ T8599] __lock_acquire+0x37ef/0x7d80 [ 287.629558][ T8599] ? verify_lock_unused+0x140/0x140 [ 287.629570][ C0] virtqueue interrupt with no work for ffff88814127c200 [ 287.629578][ T8599] ? __lock_acquire+0x357f/0x7d80 [ 287.629583][ C0] virtqueue interrupt with no work for ffff88814127c000 [ 287.629600][ T8599] ? verify_lock_unused+0x140/0x140 [ 287.629625][ T8599] lock_acquire+0x19e/0x420 [ 287.636200][ C0] Added buffer head 1697 to ffff888021297600 [ 287.641457][ T8599] ? tcm_alloc+0x21/0x2d0 [ 287.646814][ C0] Added buffer head 1696 to ffff888021297600 [ 287.652930][ T8599] ? __might_sleep+0xe0/0xe0 [ 287.658646][ C0] Added buffer head 1776 to ffff888021297600 [ 287.664154][ T8599] ? read_lock_is_recursive+0x20/0x20 [ 287.670990][ C0] Added buffer head 1775 to ffff888021297600 [ 287.677181][ T8599] ? __mutex_trylock_common+0x160/0x270 [ 287.677219][ T8599] __mutex_lock+0x135/0xc80 [ 287.689957][ C0] Added buffer head 1774 to ffff888021297600 [ 287.697529][ T8599] ? tcm_alloc+0x21/0x2d0 [ 287.697566][ T8599] ? trace_contention_end+0x39/0xe0 [ 287.697587][ T8599] ? __mutex_lock+0x30d/0xc80 [ 287.705656][ C0] Added buffer head 1773 to ffff888021297600 [ 287.712671][ T8599] ? tcm_alloc+0x21/0x2d0 [ 287.718907][ C0] Added buffer head 1772 to ffff888021297600 [ 287.725422][ T8599] ? mutex_lock_nested+0x20/0x20 [ 287.725453][ T8599] ? read_lock_is_recursive+0x20/0x20 [ 287.725477][ T8599] ? config_usb_cfg_link+0x59/0x250 [ 287.732043][ C0] Added buffer head 1771 to ffff888021297600 [ 287.740764][ T8599] ? mutex_lock_nested+0x20/0x20 [ 287.740806][ T8599] ? configfs_symlink+0x469/0xfe0 [ 287.747370][ C0] Added buffer head 1770 to ffff888021297600 [ 287.753606][ T8599] tcm_alloc+0x21/0x2d0 [ 287.757873][ C0] Added buffer head 1769 to ffff888021297600 [ 287.763950][ T8599] usb_get_function+0x5d/0xb0 [ 287.770167][ C0] Added buffer head 1768 to ffff888021297600 [ 287.777983][ T8599] config_usb_cfg_link+0x148/0x250 [ 287.778023][ T8599] configfs_symlink+0x5a5/0xfe0 [ 287.785577][ C0] Added buffer head 1767 to ffff888021297600 [ 287.790919][ T8599] ? from_kgid+0x153/0x6a0 [ 287.800342][ C0] Added buffer head 1766 to ffff888021297600 [ 287.806198][ T8599] ? generic_permission+0x1ed/0x590 [ 287.806231][ T8599] ? detach_groups+0x370/0x370 [ 287.812399][ C0] Added buffer head 1765 to ffff888021297600 [ 287.823423][ T8599] ? inode_permission+0xf3/0x480 [ 287.823453][ T8599] ? bpf_lsm_inode_symlink+0x9/0x10 [ 287.823472][ T8599] ? security_inode_symlink+0xb6/0x100 [ 287.831057][ C0] No more buffers in queue [ 287.844857][ T8599] vfs_symlink+0x138/0x2b0 [ 287.844894][ T8599] do_symlinkat+0x1ba/0x400 [ 287.844913][ T8599] ? vfs_symlink+0x2b0/0x2b0 [ 287.844934][ T8599] __x64_sys_symlinkat+0x99/0xb0 [ 287.854002][ C0] No more buffers in queue [ 287.857905][ T8599] do_syscall_64+0x55/0xb0 [ 287.857945][ T8599] ? clear_bhb_loop+0x40/0x90 [ 287.857971][ T8599] ? clear_bhb_loop+0x40/0x90 [ 287.866435][ C0] No more buffers in queue [ 287.870992][ T8599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.878050][ T8] Added buffer head 0 to ffff88814127c400 [ 287.882461][ T8599] RIP: 0033:0x7fed6479e159 [ 287.897620][ T6045] send_to_group: group=ffff8880318b3800 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff88802bde2680 data_type=1 dir=0000000000000000 cookie=0 [ 287.903921][ T8599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.903951][ T8599] RSP: 002b:00007fed65651028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 287.903971][ T8599] RAX: ffffffffffffffda RBX: 00007fed64a25fa0 RCX: 00007fed6479e159 [ 287.903986][ T8599] RDX: 0000200000000600 RSI: ffffffffffffff9c RDI: 00002000000005c0 [ 288.452872][ T8599] RBP: 00007fed6483506b R08: 0000000000000000 R09: 0000000000000000 [ 288.462100][ T8599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.470797][ T8599] R13: 00007fed64a26038 R14: 00007fed64a25fa0 R15: 00007ffdc5300278 [ 288.479957][ T8599] [ 288.485290][ T8610] kcov: kcov_start: t = ffff88807999bc00, size = 524288, area = ffffc9000edc1000 [ 288.498384][ T8610] device-mapper: ioctl: Unable to rename non-existent device, m to [ 288.501643][ T6045] inotify_handle_inode_event: group=ffff8880318b3800 mark=ffff888068a3dd48 mask=8 [ 288.508427][ T8599] configfs: configfs_get_target_path: depth = 4, size = 45 [ 288.525249][ T5768] kcov: kcov_task_exit: t = ffff8880226c0000, kcov->t = ffff8880226c0000 [ 288.530916][ T6007] kcov: kcov_task_exit: t = ffff888022555a00, kcov->t = ffff888022555a00 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 288.539545][ T6045] fsnotify_insert_event: group=ffff8880318b3800 event=ffff88802eb75a00 [ 288.551320][ T8608] kcov: kcov_start: t = ffff888079999e00, size = 524288, area = ffffc9000e5bf000 [ 288.561696][ T5766] kcov: kcov_task_exit: t = ffff8880183e8000, kcov->t = ffff8880183e8000 [ 288.580808][ T5757] No more buffers in queue [ 288.581643][ T5767] kcov: kcov_task_exit: t = ffff8880226c5a00, kcov->t = ffff8880226c5a00 [ 288.587151][ T5757] eth0: xmit ffff88802e01f770 42:01:0a:80:00:01 [ 288.605351][ T5757] Added buffer head 5 to ffff888021297800 [ 288.611367][ C0] virtqueue callback for ffff888021297600 (ffffffff85c745d0) [ 288.611415][ C0] virtqueue callback for ffff888021297800 (ffffffff85c746c0) [ 288.626629][ C0] virtqueue callback for ffff88814127c400 (ffffffff84a02460) [ 288.626704][ C0] virtqueue interrupt with no work for ffff88814127c200 [ 288.626717][ C0] virtqueue interrupt with no work for ffff88814127c000 [ 288.651998][ C0] Sent skb ffff88802e01f770 [ 288.653315][ T5141] get_one_event: group=ffff8880318b3800 event=ffff88802eb75a00 [ 288.656595][ C0] No more buffers in queue [ 288.656650][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 288.656679][ C0] No more buffers in queue [ 288.656755][ C0] No more buffers in queue [ 288.665072][ T5141] fsnotify_remove_first_event: group=ffff8880318b3800 event=ffff88802eb75a00 [ 288.671092][ T5760] Added buffer head 0 to ffff88814127c400 [ 288.704732][ T8599] configfs: configfs_get_target_path: path = '../../../../usb_gadget/g1/functions/tcm.usb0' [ 288.713030][ T8605] kcov: kcov_task_exit: t = ffff8880671fbc00, kcov->t = ffff8880671fbc00 [ 288.726865][ T5141] inotify_read: group=ffff8880318b3800 kevent=ffff88802eb75a00 [ 288.735221][ T8608] kcov: kcov_task_exit: t = ffff888079999e00, kcov->t = ffff888079999e00 [ 288.736919][ T8610] kcov: kcov_task_exit: t = ffff88807999bc00, kcov->t = ffff88807999bc00 [ 288.753236][ T5141] copy_event_to_user: group=ffff8880318b3800 event=ffff88802eb75a00 [ 288.759342][ T6045] ffff88802672c000 name hci2 bus 0 [ 288.766842][ T5757] No more buffers in queue [ 288.771288][ T5757] eth0: xmit ffff8880608fa5f0 42:01:0a:80:00:01 [ 288.774796][ T5141] inotify_read: group=ffff8880318b3800 kevent=0000000000000000 [ 288.777663][ T5757] Added buffer head 6 to ffff888021297c00 [ 288.785196][ C1] virtqueue callback for ffff888021297c00 (ffffffff85c746c0) [ 288.785196][ C0] virtqueue callback for ffff888021297600 (ffffffff85c745d0) [ 288.785282][ C0] No more buffers in queue [ 288.791409][ C1] Sent skb ffff8880608fa5f0 [ 288.798772][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 288.806556][ C1] No more buffers in queue [ 288.812217][ C0] Receiving skb proto 0x0800 len 88 type 0 [ 288.822666][ C0] virtqueue callback for ffff888021297600 (ffffffff85c745d0) [ 288.842525][ C0] Receiving skb proto 0x0800 len 112 type 0 [ 288.849165][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 288.856633][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 288.862766][ C0] No more buffers in queue [ 288.867757][ C0] No more buffers in queue [ 288.873601][ C0] eth0: xmit ffff88807900d3c0 42:01:0a:80:00:01 [ 288.881478][ C0] Added buffer head 5 to ffff888021297800 [ 288.887236][ C0] virtqueue callback for ffff888021297800 (ffffffff85c746c0) [ 288.900425][ C0] Sent skb ffff88807900d3c0 [ 288.905255][ C0] No more buffers in queue [ 288.906377][ T8607] kcov: kcov_task_exit: t = ffff888079998000, kcov->t = ffff888079998000 [ 288.909781][ C0] No more buffers in queue [ 288.922897][ C0] No more buffers in queue [ 288.933924][ T5141] kobject: 'loop4' (ffff8881488501e8): kobject_uevent_env [ 288.941499][ T6045] hci2 ffff88802672c000 [ 288.964701][ T6045] hci2: [ 288.967774][ T6045] hci2: err 0x13 [ 288.973108][ T6045] hci2: cancelling interleave scan [ 288.979095][ T5141] kobject: 'loop4' (ffff8881488501e8): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 289.004924][ T8599] kcov: kcov_task_exit: t = ffff888024510000, kcov->t = ffff888024510000 [ 289.014172][ C0] virtqueue callback for ffff888021297600 (ffffffff85c745d0) [ 289.032905][ C0] No more buffers in queue [ 289.038167][ C0] Receiving skb proto 0x0800 len 112 type 0 [ 289.044906][ C0] No more buffers in queue [ 289.050135][ T6045] channel 3 len 6 [ 289.058042][ T5757] No more buffers in queue [ 289.061339][ T6052] inotify_handle_inode_event: group=ffff8880318b3800 mark=ffff888068a3dd48 mask=8000 [ 289.064306][ T5757] eth0: xmit ffff88805e6048c0 42:01:0a:80:00:01 [ 289.083928][ T5757] Added buffer head 5 to ffff888021297800 [ 289.090041][ C0] virtqueue callback for ffff888021297800 (ffffffff85c746c0) [ 289.097962][ C0] Sent skb ffff88805e6048c0 [ 289.102940][ C0] No more buffers in queue [ 289.108340][ T6045] channel 3 len 8 [ 289.112373][ T6045] hdev hci2 event 2 [ 289.117958][ T6045] hdev 0000000000000000 len 8 [ 289.123166][ T6045] kernfs runtime_status: removing [ 289.130163][ T6045] kernfs control: removing [ 289.135357][ T6045] kernfs runtime_suspended_time: removing [ 289.142146][ T6045] kernfs runtime_active_time: removing [ 289.142238][ T6052] fsnotify_insert_event: group=ffff8880318b3800 event=ffff88802eb75e00 [ 289.154712][ T6045] kernfs autosuspend_delay_ms: removing [ 289.163361][ T6045] kernfs power: removing [ 289.184907][ T6045] kernfs device: removing [ 289.189983][ T6045] kernfs subsystem: removing [ 289.210821][ T6045] kernfs rfkill18: removing [ 289.216885][ T5141] get_one_event: group=ffff8880318b3800 event=ffff88802eb75e00 [ 289.225692][ T5141] fsnotify_remove_first_event: group=ffff8880318b3800 event=ffff88802eb75e00 [ 289.265569][ T6045] kernfs uevent: removing [ 289.270188][ T6045] kernfs name: removing [ 289.276498][ T5755] No more buffers in queue [ 289.281060][ T5755] eth0: xmit ffff88802e01f9f0 42:01:0a:80:00:01 [ 289.287656][ T5755] Added buffer head 5 to ffff888021297800 [ 289.293877][ C0] virtqueue callback for ffff888021297600 (ffffffff85c745d0) [ 289.293914][ C0] virtqueue callback for ffff888021297800 (ffffffff85c746c0) [ 289.311645][ C0] Sent skb ffff88802e01f9f0 [ 289.315514][ T5141] inotify_read: group=ffff8880318b3800 kevent=ffff88802eb75e00 [ 289.317177][ C0] No more buffers in queue [ 289.331537][ T5141] copy_event_to_user: group=ffff8880318b3800 event=ffff88802eb75e00 [ 289.332388][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 289.346955][ C0] No more buffers in queue [ 289.353228][ T6045] kernfs type: removing [ 289.358110][ C0] No more buffers in queue [ 289.364406][ T6045] kernfs index: removing [ 289.376362][ T5141] inotify_read: group=ffff8880318b3800 kevent=0000000000000000 [ 289.384696][ T6045] kernfs persistent: removing [ 289.390765][ T6045] kernfs state: removing [ 289.404703][ T6045] kernfs soft: removing [ 289.409371][ T6045] kernfs hard: removing [ 289.414073][ T6045] kernfs hard_block_reasons: removing [ 289.434703][ T6045] PM: Removing info for No Bus:rfkill18 [ 289.441025][ T6045] kobject: 'rfkill18' (ffff88805c43c110): kobject_uevent_env [ 289.487163][ T6045] kobject: 'rfkill18' (ffff88805c43c110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/rfkill18' [ 289.504970][ C1] net_ratelimit: 45 callbacks suppressed [ 289.504985][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 289.522658][ T6045] kernfs rfkill18: removing [ 289.524969][ C1] wireguard: wg1: Receiving keepalive packet from peer 27 ([::1]:20001/0%0) [ 289.536213][ T6045] kobject: 'rfkill18' (ffff88805c43c110): kobject_cleanup, parent 0000000000000000 [ 289.584891][ T6045] kobject: 'rfkill18' (ffff88805c43c110): calling ktype release [ 289.593452][ T6045] kobject: 'rfkill18': free name [ 289.624875][ C0] virtqueue callback for ffff88814127c400 (ffffffff84a02460) [ 289.629994][ T8605] ffff88802e338000 name hci1 bus 0 [ 289.632799][ C0] virtqueue interrupt with no work for ffff88814127c200 [ 289.647244][ C0] virtqueue interrupt with no work for ffff88814127c000 [ 289.654677][ T5760] Added buffer head 0 to ffff88814127c400 [ 289.664673][ C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 289.674792][ C1] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 289.683434][ C1] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0) [ 289.697168][ C0] wireguard: wg1: Receiving keepalive packet from peer 15 ([::1]:20001/0%0) [ 289.697222][ C1] wireguard: wg1: Receiving keepalive packet from peer 3 ([::1]:20001/0%0) [ 289.716772][ C1] wireguard: wg1: Receiving keepalive packet from peer 9 ([::1]:20001/0%0) [ 289.734775][ T6045] kernfs runtime_status: removing [ 289.740054][ T8605] hci1 ffff88802e338000 [ 289.740707][ T6045] kernfs control: removing [ 289.744235][ T8605] hci1: [ 289.764995][ T8605] hci1: err 0x13 [ 289.765813][ T6045] kernfs runtime_suspended_time: removing [ 289.768848][ T8605] hci1: cancelling interleave scan [ 289.785700][ T6045] kernfs runtime_active_time: removing [ 289.790817][ T8607] ffff888061dc0000 name hci3 bus 0 [ 289.791226][ T6045] kernfs autosuspend_delay_ms: removing [ 289.796764][ T8605] hci1 state 0 -> 0 [ 289.806616][ T8605] All LE pending actions cleared [ 289.807945][ T6045] kernfs power: removing [ 289.811738][ T8605] hdev hci1 [ 289.820112][ T8605] hcon ffff888030288000 reason 22 [ 289.825388][ T8607] hci3 ffff888061dc0000 [ 289.827693][ T6542] ffff88802d244000 name hci0 bus 0 [ 289.829645][ T8607] hci3: [ 289.838093][ T8607] hci3: err 0x13 [ 289.838502][ T6045] kernfs subsystem: removing [ 289.842738][ T8607] hci3: cancelling interleave scan [ 289.853725][ T8605] hcon ffff888030288000 conn ffff888023a3f800, err 103 [ 289.861506][ T6045] kernfs hci2: removing [ 289.861726][ T8607] hci3 state 0 -> 0 [ 289.868924][ T6542] hci0 ffff88802d244000 [ 289.871830][ T8605] hci1 hcon ffff888030288000 chan ffff888023e15d00 [ 289.876700][ T6045] kernfs uevent: removing [ 289.883208][ T8607] All LE pending actions cleared [ 289.888835][ T6542] hci0: [ 289.893068][ T8607] hdev hci3 [ 289.896288][ T6542] hci0: err 0x13 [ 289.899402][ T8605] hci1 hcon ffff888030288000 handle 201 [ 289.902749][ T6542] hci0: cancelling interleave scan [ 289.908639][ T8607] hcon ffff88807eeca000 reason 22 [ 289.908658][ T8607] hcon ffff88807eeca000 conn ffff8880241c2000, err 103 [ 289.908681][ T8607] hci3 hcon ffff88807eeca000 chan ffff888021eda700 [ 289.908754][ T8605] hci1: hcon ffff888030288000 [ 289.908774][ T8605] hcon ffff888030288000 [ 289.908837][ T6045] PM: Removing info for No Bus:hci2 [ 289.920489][ T6542] channel 3 len 6 [ 289.927138][ T8607] hci3 hcon ffff88807eeca000 handle 201 [ 289.934997][ T6542] channel 3 len 8 [ 289.941310][ T8607] hci3: hcon ffff88807eeca000 [ 289.948034][ T6542] hdev hci0 event 2 [ 289.951294][ T8605] hci1: conn ffff888030288000 [ 289.969457][ T8607] hcon ffff88807eeca000 [ 289.969581][ T6542] hdev 0000000000000000 len 8 [ 289.973795][ T6045] kobject: 'hci2' (ffff88802672d490): kobject_uevent_env [ 289.988877][ T8607] hci3: conn ffff88807eeca000 [ 289.993747][ T8605] device: 'hci1:201': device_unregister [ 290.000376][ T6542] kernfs runtime_status: removing [ 290.007287][ T6045] kobject: 'hci2' (ffff88802672d490): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2' [ 290.012686][ T8607] device: 'hci3:201': device_unregister [ 290.018191][ T8605] kernfs runtime_status: removing [ 290.048216][ T8605] kernfs control: removing [ 290.053877][ T6045] kernfs hci2: removing [ 290.060089][ T6045] hci2 orig refcnt 2 [ 290.065372][ T8607] kernfs runtime_status: removing [ 290.069685][ T6045] kobject: 'hci2' (ffff88802672d490): kobject_cleanup, parent 0000000000000000 [ 290.070856][ T8607] kernfs control: removing [ 290.080400][ T6045] kobject: 'hci2' (ffff88802672d490): calling ktype release [ 290.084738][ T6542] kernfs control: removing [ 290.099049][ T6542] kernfs runtime_suspended_time: removing [ 290.106445][ T8605] kernfs runtime_suspended_time: removing [ 290.112806][ T6542] kernfs runtime_active_time: removing [ 290.115541][ T6045] All LE connection parameters were removed [ 290.129663][ T6045] hci2: Unregister MSFT extension [ 290.129745][ T8607] kernfs runtime_suspended_time: removing [ 290.140797][ T8607] kernfs runtime_active_time: removing [ 290.140900][ T6045] kobject: 'hci2': free name [ 290.149044][ T8607] kernfs autosuspend_delay_ms: removing [ 290.158654][ T8605] kernfs runtime_active_time: removing [ 290.158778][ T6045] syz_tun: bond_netdev_event received NETDEV_GOING_DOWN [ 290.173363][ T6045] net syz_tun: siw: event 10 [ 290.175998][ T8605] kernfs autosuspend_delay_ms: removing [ 290.184035][ T6542] kernfs autosuspend_delay_ms: removing [ 290.190615][ T8607] kernfs power: removing [ 290.190852][ T6045] In tnode_resize ffff888061156920 inflate_threshold=50 threshold=25 [ 290.196755][ T6542] kernfs power: removing [ 290.211619][ T6542] kernfs device: removing [ 290.211662][ T6045] In tnode_resize ffff88805ec3d020 inflate_threshold=50 threshold=25 [ 290.216694][ T8607] kernfs device: removing [ 290.226770][ T6045] In tnode_resize ffff88805e893420 inflate_threshold=50 threshold=25 [ 290.231238][ T8607] kernfs subsystem: removing [ 290.247654][ T8607] kernfs hci3:201: removing [ 290.247689][ T6045] In tnode_resize ffff888075683320 inflate_threshold=50 threshold=25 [ 290.253171][ T6542] kernfs subsystem: removing [ 290.268287][ T6045] In tnode_resize ffff88802e1b4120 inflate_threshold=50 threshold=25 [ 290.270805][ T6542] kernfs rfkill5: removing [ 290.285825][ T6542] kernfs uevent: removing [ 290.285861][ T6045] In tnode_resize ffff888030362ca0 inflate_threshold=50 threshold=25 [ 290.290272][ T8607] kernfs uevent: removing [ 290.300686][ T6045] In tnode_resize ffff8880303624a0 inflate_threshold=50 threshold=25 [ 290.306042][ T8607] PM: Removing info for No Bus:hci3:201 [ 290.313736][ T8605] kernfs power: removing [ 290.320172][ T8607] kobject: 'hci3:201' (ffff88807eeca5f0): kobject_uevent_env [ 290.323698][ T8605] kernfs device: removing [ 290.334755][ T8607] kobject: 'hci3:201' (ffff88807eeca5f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/hci3:201' [ 290.335617][ T6045] trie_flush found=1 [ 290.352968][ T8605] kernfs subsystem: removing [ 290.354971][ T6045] In tnode_resize ffff888061156920 inflate_threshold=50 threshold=25 [ 290.357905][ T8605] kernfs hci1:201: removing [ 290.374201][ T8605] kernfs uevent: removing [ 290.383848][ T6045] In tnode_resize ffff88805ec3d020 inflate_threshold=50 threshold=25 [ 290.384815][ T8607] kernfs hci3:201: removing [ 290.395438][ T6045] In tnode_resize ffff88805e893420 inflate_threshold=50 threshold=25 [ 290.402247][ T8607] kobject: 'hci3:201' (ffff88807eeca5f0): kobject_cleanup, parent 0000000000000000 [ 290.410226][ T6542] kernfs name: removing [ 290.429400][ T8607] kobject: 'hci3:201' (ffff88807eeca5f0): calling ktype release [ 290.430289][ T6045] In tnode_resize ffff888075683320 inflate_threshold=50 threshold=25 [ 290.442271][ T8607] kobject: 'hci3:201': free name [ 290.459768][ T6542] kernfs type: removing [ 290.465060][ T8607] hci3 orig refcnt 7 [ 290.468874][ T5103] sd 0:0:1:0: cmd ffff888024c004d0 CDB: 0x2a [ 290.470214][ T8607] hdev hci3 event 4 [ 290.477237][ T6542] kernfs index: removing [ 290.482165][ T8607] hdev 0000000000000000 len 8 [ 290.495230][ T8607] hci3: Cleanup of MSFT extension [ 290.501717][ T5103] Added buffer head 91 to ffff888021288c00 [ 290.502027][ T8607] hdev hci3 event 8 [ 290.512824][ T6045] In tnode_resize ffff88802e1b4120 inflate_threshold=50 threshold=25 [ 290.515642][ T8607] hci3 orig refcnt 6 [ 290.526481][ T6542] kernfs persistent: removing [ 290.535424][ T8607] channel 3 len 6 [ 290.537398][ T6045] In tnode_resize ffff888030362ca0 inflate_threshold=50 threshold=25 [ 290.541818][ C1] virtqueue callback for ffff888021288c00 (ffffffff857f2980) [ 290.551690][ T8605] PM: Removing info for No Bus:hci1:201 [ 290.559901][ C1] sd 0:0:1:0: cmd ffff888024c004d0 response 0 status 0x0 sense_len 0 [ 290.559930][ C1] No more buffers in queue [ 290.560216][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 290.568736][ T6542] kernfs state: removing [ 290.578487][ T96] sd 0:0:1:0: cmd ffff888022a11110 CDB: 0x35 [ 290.587511][ T8605] kobject: 'hci1:201' (ffff8880302885f0): kobject_uevent_env [ 290.596481][ T96] Added buffer head 91 to ffff888021288c00 [ 290.601222][ T8607] channel 3 len 8 [ 290.611073][ C1] virtqueue callback for ffff888021288c00 (ffffffff857f2980) [ 290.620740][ C0] wireguard: wg1: Receiving keepalive packet from peer 27 ([::1]:20001/0%0) [ 290.627406][ C1] sd 0:0:1:0: cmd ffff888022a11110 response 0 status 0x0 sense_len 0 [ 290.627432][ C1] No more buffers in queue [ 290.627465][ C0] virtqueue callback for ffff88814127c400 (ffffffff84a02460) [ 290.627540][ C0] virtqueue interrupt with no work for ffff88814127c200 [ 290.627550][ C0] virtqueue interrupt with no work for ffff88814127c000 [ 290.627590][ T96] sd 0:0:1:0: cmd ffff888024c02e10 CDB: 0x2a [ 290.631271][ T8] Added buffer head 0 to ffff88814127c400 [ 290.639189][ T96] Added buffer head 91 to ffff888021288c00 [ 290.706054][ T6045] In tnode_resize ffff8880303624a0 inflate_threshold=50 threshold=25 [ 290.709967][ T6542] kernfs soft: removing [ 290.715771][ T6045] trie_flush found=1 [ 290.720798][ T6542] kernfs hard: removing [ 290.724093][ T6045] syz_tun: bond_netdev_event received NETDEV_DOWN [ 290.729927][ T8605] kobject: 'hci1:201' (ffff8880302885f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/hci1:201' [ 290.735603][ C1] virtqueue callback for ffff888021288c00 (ffffffff857f2980) [ 290.735630][ C1] sd 0:0:1:0: cmd ffff888024c02e10 response 0 status 0x0 sense_len 0 [ 290.748778][ T8607] hdev hci3 event 2 [ 290.757140][ C1] No more buffers in queue [ 290.757449][ T96] sd 0:0:1:0: cmd ffff888022a11110 CDB: 0x35 [ 290.769037][ T6542] kernfs hard_block_reasons: removing [ 290.769947][ T96] Added buffer head 91 to ffff888021288c00 [ 290.775421][ T6542] PM: Removing info for No Bus:rfkill5 [ 290.781398][ T6045] net syz_tun: siw: event 2 [ 290.786270][ C1] virtqueue callback for ffff888021288c00 (ffffffff857f2980) [ 290.786297][ C1] sd 0:0:1:0: cmd ffff888022a11110 response 0 status 0x0 sense_len 0 [ 290.786317][ C1] No more buffers in queue [ 290.787967][ T8607] hdev 0000000000000000 len 8 [ 290.805144][ T6045] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::a8aa:aaff:feaa:aaaa in wq:ffff88802fdf4b58 [ 290.807441][ T8605] kernfs hci1:201: removing [ 290.818692][ T6045] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::aa in wq:ffff88802fdf4b58 [ 290.824253][ T6542] kobject: 'rfkill5' (ffff888147a7a110): kobject_uevent_env [ 290.834828][ T8605] kobject: 'hci1:201' (ffff8880302885f0): kobject_cleanup, parent 0000000000000000 [ 290.846374][ T6542] kobject: 'rfkill5' (ffff888147a7a110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill5' [ 290.849242][ T8605] kobject: 'hci1:201' (ffff8880302885f0): calling ktype release [ 290.862306][ T6542] kernfs rfkill5: removing [ 290.894520][ T8605] kobject: 'hci1:201': free name [ 290.894554][ T8605] hci1 orig refcnt 7 [ 290.894571][ T8605] hdev hci1 event 4 [ 290.896331][ T8605] hdev 0000000000000000 len 8 [ 290.905017][ T6542] kobject: 'rfkill5' (ffff888147a7a110): kobject_cleanup, parent 0000000000000000 [ 290.911022][ T6045] Deleting ac141400/24 dsfield=0x00 t=ffff88805d652db0 [ 290.916636][ T6542] kobject: 'rfkill5' (ffff888147a7a110): calling ktype release [ 290.916698][ T6542] kobject: 'rfkill5': free name [ 290.916773][ T6542] kernfs runtime_status: removing [ 290.922633][ T6045] Deleting ac1414ff/32 dsfield=0x00 t=ffff88805d652db0 [ 290.926064][ T8607] kernfs runtime_status: removing [ 290.933680][ T6045] Deleting ac1414aa/32 dsfield=0x00 t=ffff88805d652db0 [ 290.942612][ T6542] kernfs control: removing [ 290.950884][ T8605] hci1: Cleanup of MSFT extension [ 290.951163][ T8605] hdev hci1 event 8 [ 290.958642][ T6542] kernfs runtime_suspended_time: removing [ 290.965241][ T8605] hci1 orig refcnt 6 [ 290.972289][ T6045] In tnode_resize ffff888075683320 inflate_threshold=50 threshold=25 [ 290.982888][ T8605] channel 3 len 6 [ 290.988475][ T6045] In tnode_resize ffff8880303624a0 inflate_threshold=50 threshold=25 [ 291.005917][ T8605] channel 3 len 8 [ 291.011798][ T6542] kernfs runtime_active_time: removing [ 291.018421][ T8605] hdev hci1 event 2 [ 291.023467][ T8607] kernfs control: removing [ 291.032677][ T8605] hdev 0000000000000000 len 8 [ 291.039904][ T6045] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:172.20.20.170 in wq:ffff88802fdf4b58 [ 291.075209][ T8607] kernfs runtime_suspended_time: removing [ 291.093708][ T6542] kernfs autosuspend_delay_ms: removing [ 291.098271][ T6045] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 291.100153][ T8607] kernfs runtime_active_time: removing [ 291.112372][ T6045] net syz_tun: siw: event 6 [ 291.120970][ T6542] kernfs power: removing [ 291.121591][ T6045] syz_tun (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 291.125688][ T6542] kernfs subsystem: removing [ 291.136545][ T6045] net syz_tun: siw: event 18 [ 291.146822][ T8607] kernfs autosuspend_delay_ms: removing [ 291.146888][ T8607] kernfs power: removing [ 291.159189][ T6045] kobject: 'rx-0' (ffff88805edb8b50): kobject_cleanup, parent ffff88802bdd2350 [ 291.159195][ T8607] kernfs device: removing [ 291.159231][ T8607] kernfs subsystem: removing [ 291.176065][ T6045] kobject: 'rx-0' (ffff88805edb8b50): auto cleanup kobject_del [ 291.190230][ T8607] kernfs rfkill8: removing [ 291.195257][ T8607] kernfs uevent: removing [ 291.200114][ T6542] kernfs hci0: removing [ 291.205581][ T6542] kernfs uevent: removing [ 291.210704][ T6542] PM: Removing info for No Bus:hci0 [ 291.210709][ T8605] kernfs runtime_status: removing [ 291.210796][ T6542] kobject: 'hci0' (ffff88802d245490): kobject_uevent_env [ 291.222510][ T8605] kernfs control: removing [ 291.223185][ T6542] kobject: 'hci0' (ffff88802d245490): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0' [ 291.231331][ T6045] kernfs rps_cpus: removing [ 291.254176][ T6045] kernfs rps_flow_cnt: removing [ 291.260222][ T6045] kobject: 'rx-0' (ffff88805edb8b50): auto cleanup 'remove' event [ 291.260268][ T8607] kernfs name: removing [ 291.276513][ T6045] kobject: 'rx-0' (ffff88805edb8b50): kobject_uevent_env [ 291.284588][ T6542] kernfs hci0: removing [ 291.285487][ T6045] kobject: 'rx-0' (ffff88805edb8b50): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 291.290037][ T6542] hci0 orig refcnt 2 [ 291.290056][ T6542] kobject: 'hci0' (ffff88802d245490): kobject_cleanup, parent 0000000000000000 [ 291.290075][ T6542] kobject: 'hci0' (ffff88802d245490): calling ktype release [ 291.302719][ T8605] kernfs runtime_suspended_time: removing [ 291.314743][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802fdf4b58 is addr:fe80::a8aa:aaff:feaa:aaaa for cmd:2 at entry:ffff88802ee92d80 [ 291.316901][ T6542] All LE connection parameters were removed [ 291.325058][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802fdf4b58 is addr:fe80::aa for cmd:2 at entry:ffff88802ee92e00 [ 291.331160][ T6542] hci0: Unregister MSFT extension [ 291.348201][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802fdf4b58 is addr:172.20.20.170 for cmd:2 at entry:ffff888060119a00 [ 291.354902][ T8605] kernfs runtime_active_time: removing [ 291.374079][ T6542] kobject: 'hci0': free name [ 291.404354][ T8607] kernfs type: removing [ 291.409434][ T8607] kernfs index: removing [ 291.413864][ T6045] kernfs rx-0: removing [ 291.418458][ T6045] kobject: 'rx-0' (ffff88805edb8b50): calling ktype release [ 291.424891][ T8605] kernfs autosuspend_delay_ms: removing [ 291.426785][ T6045] kobject: 'rx-0': free name [ 291.432482][ T8605] kernfs power: removing [ 291.442098][ T8605] kernfs device: removing [ 291.448201][ T8607] kernfs persistent: removing [ 291.453129][ T8605] kernfs subsystem: removing [ 291.459800][ T6045] kernfs limit: removing [ 291.464506][ T6045] kernfs limit_max: removing [ 291.469858][ T6045] kernfs limit_min: removing [ 291.475562][ T8607] kernfs state: removing [ 291.480739][ T8607] kernfs soft: removing [ 291.486630][ T8605] kernfs rfkill6: removing [ 291.492872][ T8605] kernfs uevent: removing [ 291.499411][ T8607] kernfs hard: removing [ 291.503913][ T8605] kernfs name: removing [ 291.508794][ T8605] kernfs type: removing [ 291.515222][ T6045] kernfs hold_time: removing [ 291.519941][ T6045] kernfs inflight: removing [ 291.524905][ T8607] kernfs hard_block_reasons: removing [ 291.531674][ T6045] kernfs byte_queue_limits: removing [ 291.531920][ T8607] PM: Removing info for No Bus:rfkill8 [ 291.537234][ T6045] kobject: 'tx-0' (ffff88802bdd4420): kobject_cleanup, parent ffff88802bdd2350 [ 291.537262][ T6045] kobject: 'tx-0' (ffff88802bdd4420): auto cleanup kobject_del [ 291.537281][ T6045] kernfs tx_timeout: removing [ 291.537308][ T6045] kernfs traffic_class: removing [ 291.544737][ T8607] kobject: 'rfkill8' (ffff888030077110): kobject_uevent_env [ 291.555142][ T8605] kernfs index: removing [ 291.560203][ T8607] kobject: 'rfkill8' (ffff888030077110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/rfkill8' [ 291.571152][ T8605] kernfs persistent: removing [ 291.603594][ T6045] kernfs xps_cpus: removing [ 291.609874][ T6045] kernfs xps_rxqs: removing [ 291.614509][ T6045] kernfs tx_maxrate: removing [ 291.619490][ T6045] kobject: 'tx-0' (ffff88802bdd4420): auto cleanup 'remove' event [ 291.620262][ T8607] kernfs rfkill8: removing [ 291.627474][ C0] virtqueue callback for ffff88814127c400 (ffffffff84a02460) [ 291.627533][ C0] virtqueue interrupt with no work for ffff88814127c200 [ 291.633512][ T8607] kobject: 'rfkill8' (ffff888030077110): kobject_cleanup, parent 0000000000000000 [ 291.640174][ C0] virtqueue interrupt with no work for ffff88814127c000 [ 291.641203][ T8] Added buffer head 0 to ffff88814127c400 [ 291.647979][ T8605] kernfs state: removing [ 291.664058][ T6045] kobject: 'tx-0' (ffff88802bdd4420): kobject_uevent_env [ 291.672676][ T8607] kobject: 'rfkill8' (ffff888030077110): calling ktype release [ 291.681503][ T6045] kobject: 'tx-0' (ffff88802bdd4420): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 291.689686][ T8607] kobject: 'rfkill8': free name [ 291.704850][ T6045] kernfs tx-0: removing [ 291.711065][ T8605] kernfs soft: removing [ 291.711087][ T6045] kobject: 'tx-0' (ffff88802bdd4420): calling ktype release [ 291.720129][ T8605] kernfs hard: removing [ 291.724920][ T6045] kobject: 'tx-0': free name [ 291.729313][ T8605] kernfs hard_block_reasons: removing [ 291.739483][ T8605] PM: Removing info for No Bus:rfkill6 [ 291.739797][ T6045] kernfs queues: removing [ 291.746359][ T8605] kobject: 'rfkill6' (ffff888142bd5110): kobject_uevent_env [ 291.750748][ T6045] kobject: 'queues' (ffff88802bdd2350): kobject_cleanup, parent 0000000000000000 [ 291.758247][ T8607] kernfs runtime_status: removing [ 291.768407][ T6045] kobject: 'queues' (ffff88802bdd2350): calling ktype release [ 291.774217][ T8607] kernfs control: removing [ 291.781802][ T6045] kobject: 'queues' (ffff88802bdd2350): kset_release [ 291.781850][ T6045] kobject: 'queues': free name [ 291.786805][ T8605] kobject: 'rfkill6' (ffff888142bd5110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/rfkill6' [ 291.799536][ T6045] kernfs runtime_status: removing [ 291.818025][ T8607] kernfs runtime_suspended_time: removing [ 291.823800][ T6045] kernfs control: removing [ 291.828709][ T8605] kernfs rfkill6: removing [ 291.836000][ T8605] kobject: 'rfkill6' (ffff888142bd5110): kobject_cleanup, parent 0000000000000000 [ 291.836348][ T8607] kernfs runtime_active_time: removing [ 291.846108][ T8605] kobject: 'rfkill6' (ffff888142bd5110): calling ktype release [ 291.852212][ T8607] kernfs autosuspend_delay_ms: removing [ 291.866134][ T8605] kobject: 'rfkill6': free name [ 291.866790][ T6045] kernfs runtime_suspended_time: removing [ 291.878373][ T8605] kernfs runtime_status: removing [ 291.885272][ T6045] kernfs runtime_active_time: removing [ 291.891808][ T6045] kernfs autosuspend_delay_ms: removing [ 291.897764][ T6045] kernfs power: removing [ 291.903360][ T6045] kernfs subsystem: removing [ 291.908496][ T8605] kernfs control: removing [ 291.913108][ T6045] kernfs syz_tun: removing [ 291.919161][ T6045] kernfs uevent: removing [ 291.924191][ T6045] kernfs tun_flags: removing [ 291.929179][ T6045] kernfs owner: removing [ 291.934249][ T6045] kernfs group: removing [ 291.939988][ T8605] kernfs runtime_suspended_time: removing [ 291.946420][ T8607] kernfs power: removing [ 291.951254][ T6045] kernfs rx_packets: removing [ 291.956406][ T6045] kernfs tx_packets: removing [ 291.961419][ T6045] kernfs rx_bytes: removing [ 291.966362][ T6045] kernfs tx_bytes: removing [ 291.971148][ T8605] kernfs runtime_active_time: removing [ 291.977331][ T8605] kernfs autosuspend_delay_ms: removing [ 291.983157][ T8607] kernfs subsystem: removing [ 291.989942][ T8607] kernfs hci3: removing [ 291.994538][ T6045] kernfs rx_errors: removing [ 291.999886][ T8605] kernfs power: removing [ 292.005200][ T8605] kernfs subsystem: removing [ 292.009984][ T8605] kernfs hci1: removing [ 292.014535][ T8605] kernfs uevent: removing [ 292.020474][ T8605] PM: Removing info for No Bus:hci1 [ 292.020740][ T8607] kernfs uevent: removing [ 292.026367][ T8605] kobject: 'hci1' (ffff88802e339490): kobject_uevent_env [ 292.026416][ T8605] kobject: 'hci1' (ffff88802e339490): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1' [ 292.050309][ T8607] PM: Removing info for No Bus:hci3 [ 292.050335][ T6045] kernfs tx_errors: removing [ 292.056969][ T8607] kobject: 'hci3' (ffff888061dc1490): kobject_uevent_env [ 292.063239][ T6045] kernfs rx_dropped: removing [ 292.072457][ T8607] kobject: 'hci3' (ffff888061dc1490): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3' [ 292.077716][ T8605] kernfs hci1: removing [ 292.097606][ T8605] hci1 orig refcnt 2 [ 292.097667][ T8607] kernfs hci3: removing [ 292.102802][ T8605] kobject: 'hci1' (ffff88802e339490): kobject_cleanup, parent 0000000000000000 [ 292.107242][ T8607] kernfs bluetooth: removing [ 292.119116][ T8605] kobject: 'hci1' (ffff88802e339490): calling ktype release [ 292.122732][ T6045] kernfs tx_dropped: removing [ 292.131021][ T8605] All LE connection parameters were removed [ 292.143006][ T8605] hci1: Unregister MSFT extension [ 292.149934][ T8605] kobject: 'hci1': free name [ 292.150167][ T8607] kobject: 'bluetooth' (ffff888078cbeb80): kobject_cleanup, parent 0000000000000000 [ 292.155236][ T6045] kernfs multicast: removing [ 292.173797][ T6045] kernfs collisions: removing [ 292.177929][ T8607] kobject: 'bluetooth' (ffff888078cbeb80): calling ktype release [ 292.181054][ T6045] kernfs rx_length_errors: removing [ 292.189872][ T8607] kobject: 'bluetooth': free name [ 292.196207][ T6045] kernfs rx_over_errors: removing [ 292.200362][ T8607] hci3 orig refcnt 2 [ 292.205676][ T6045] kernfs rx_crc_errors: removing [ 292.209963][ T8607] kobject: 'hci3' (ffff888061dc1490): kobject_cleanup, parent 0000000000000000 [ 292.216236][ T6045] kernfs rx_frame_errors: removing [ 292.224061][ T8607] kobject: 'hci3' (ffff888061dc1490): calling ktype release [ 292.229552][ T6045] kernfs rx_fifo_errors: removing [ 292.243064][ T6045] kernfs rx_missed_errors: removing [ 292.248709][ T6045] kernfs tx_aborted_errors: removing [ 292.248811][ T8607] All LE connection parameters were removed [ 292.254142][ T6045] kernfs tx_carrier_errors: removing [ 292.271380][ T8607] hci3: Unregister MSFT extension [ 292.279307][ T8607] kobject: 'hci3': free name [ 292.284462][ T6045] kernfs tx_fifo_errors: removing [ 292.290652][ T6045] kernfs tx_heartbeat_errors: removing [ 292.297363][ T6045] kernfs tx_window_errors: removing [ 292.303756][ T6045] kernfs rx_compressed: removing [ 292.309430][ T6045] kernfs tx_compressed: removing [ 292.315233][ T6045] kernfs rx_nohandler: removing [ 292.320342][ T6045] kernfs statistics: removing [ 292.325443][ T6045] kernfs netdev_group: removing [ 292.330594][ T6045] kernfs type: removing [ 292.335630][ T6045] kernfs dev_id: removing [ 292.341182][ T6045] kernfs dev_port: removing [ 292.347745][ T6045] kernfs iflink: removing [ 292.352858][ T6045] kernfs ifindex: removing [ 292.358933][ T6045] kernfs name_assign_type: removing [ 292.367398][ T6045] kernfs addr_assign_type: removing [ 292.373264][ T6045] kernfs addr_len: removing [ 292.378269][ T6045] kernfs link_mode: removing [ 292.386536][ T6045] kernfs address: removing [ 292.394112][ T6045] kernfs broadcast: removing [ 292.399341][ T6045] kernfs speed: removing [ 292.404532][ T6045] kernfs duplex: removing [ 292.410049][ T6045] kernfs dormant: removing [ 292.418612][ T6045] kernfs testing: removing [ 292.425273][ T6045] kernfs operstate: removing [ 292.432821][ T6045] kernfs carrier_changes: removing [ 292.439635][ T6045] kernfs ifalias: removing [ 292.445943][ T6045] kernfs carrier: removing [ 292.451564][ T6045] kernfs mtu: removing [ 292.456674][ T6045] kernfs flags: removing [ 292.464392][ T6045] kernfs tx_queue_len: removing [ 292.472160][ T6045] kernfs gro_flush_timeout: removing [ 292.477936][ T6045] kernfs napi_defer_hard_irqs: removing [ 292.485617][ T6045] kernfs phys_port_id: removing [ 292.491942][ T6045] kernfs phys_port_name: removing [ 292.497334][ T6045] kernfs phys_switch_id: removing [ 292.502442][ T6045] kernfs proto_down: removing [ 292.507654][ T6045] kernfs carrier_up_count: removing [ 292.514272][ T6045] kernfs carrier_down_count: removing [ 292.520690][ T6045] kernfs threaded: removing [ 292.526751][ T6045] PM: Removing info for No Bus:syz_tun [ 292.533065][ T6045] kobject: 'syz_tun' (ffff88805f5ac6a8): kobject_uevent_env [ 292.542583][ T6045] kobject: 'syz_tun' (ffff88805f5ac6a8): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 292.557552][ T6045] kernfs syz_tun: removing [ 292.563274][ T6542] syz_tun: bond_netdev_event received NETDEV_GOING_DOWN [ 292.572555][ T6542] net syz_tun: siw: event 10 [ 292.579199][ T6542] In tnode_resize ffff8880790ac720 inflate_threshold=50 threshold=25 [ 292.592242][ T6542] In tnode_resize ffff88805f266420 inflate_threshold=50 threshold=25 [ 292.604317][ T6542] In tnode_resize ffff88805f49ec20 inflate_threshold=50 threshold=25 [ 292.614398][ T6542] In tnode_resize ffff88814d0d3020 inflate_threshold=50 threshold=25 [ 292.624758][ C0] virtqueue callback for ffff88814127c400 (ffffffff84a02460) [ 292.627904][ T6045] kobject: 'syz_tun' (ffff88805f5ac6a8): kobject_cleanup, parent 0000000000000000 [ 292.633944][ C0] virtqueue interrupt with no work for ffff88814127c200 [ 292.644240][ T6542] In tnode_resize ffff888030d4d5a0 inflate_threshold=50 threshold=25 [ 292.652502][ C0] virtqueue interrupt with no work for ffff88814127c000 [ 292.661669][ T8] Added buffer head 0 to ffff88814127c400 [ 292.670170][ T6542] In tnode_resize ffff8880229552a0 inflate_threshold=50 threshold=25 [ 292.678393][ T6045] kobject: 'syz_tun' (ffff88805f5ac6a8): calling ktype release [ 292.689281][ T6542] In tnode_resize ffff888022955220 inflate_threshold=50 threshold=25 [ 292.699031][ C0] virtqueue callback for ffff888021297600 (ffffffff85c745d0) [ 292.708532][ T6542] trie_flush found=1 [ 292.716995][ C0] No more buffers in queue [ 292.717059][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 292.726136][ T6045] kobject: 'syz_tun': free name [ 292.728757][ C0] No more buffers in queue [ 292.737957][ T6542] In tnode_resize ffff8880790ac720 inflate_threshold=50 threshold=25 [ 292.743415][ C0] No more buffers in queue [ 292.749438][ T6542] In tnode_resize ffff88805f266420 inflate_threshold=50 threshold=25 [ 292.760269][ C0] eth0: xmit ffff88802c6a1500 42:01:0a:80:00:01 [ 292.769149][ T6542] In tnode_resize ffff88805f49ec20 inflate_threshold=50 threshold=25 [ 292.775406][ C0] Added buffer head 5 to ffff888021297800 [ 292.775476][ C0] virtqueue callback for ffff888021297800 (ffffffff85c746c0) [ 292.775656][ C0] Sent skb ffff88802c6a1500 [ 292.782868][ T6542] In tnode_resize ffff88814d0d3020 inflate_threshold=50 threshold=25 [ 292.792800][ C0] No more buffers in queue [ 292.830684][ T6542] In tnode_resize ffff888030d4d5a0 inflate_threshold=50 threshold=25 [ 292.840999][ T6542] In tnode_resize ffff8880229552a0 inflate_threshold=50 threshold=25 [ 292.852067][ T6542] In tnode_resize ffff888022955220 inflate_threshold=50 threshold=25 [ 292.861428][ T6542] trie_flush found=1 [ 292.865760][ T6542] syz_tun: bond_netdev_event received NETDEV_DOWN [ 292.872983][ T6542] net syz_tun: siw: event 2 [ 292.884834][ T6542] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::a8aa:aaff:feaa:aaaa in wq:ffff88802fdf0fd8 [ 292.901273][ T6542] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::aa in wq:ffff88802fdf0fd8 [ 292.915845][ T6542] Deleting ac141400/24 dsfield=0x00 t=ffff888030737bb0 [ 292.923707][ T6542] Deleting ac1414ff/32 dsfield=0x00 t=ffff888030737bb0 [ 292.933514][ T6542] Deleting ac1414aa/32 dsfield=0x00 t=ffff888030737bb0 [ 292.942505][ T6542] In tnode_resize ffff88814d0d3020 inflate_threshold=50 threshold=25 [ 292.952714][ T6542] In tnode_resize ffff888022955220 inflate_threshold=50 threshold=25 [ 292.961915][ T6542] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:172.20.20.170 in wq:ffff88802fdf0fd8 [ 292.974715][ T6542] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 292.985256][ T6542] net syz_tun: siw: event 6 [ 292.991729][ T6542] syz_tun (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 293.003195][ T6542] net syz_tun: siw: event 18 [ 293.008695][ T6542] kobject: 'rx-0' (ffff88802e8ea050): kobject_cleanup, parent ffff8880192ca450 [ 293.020956][ T6542] kobject: 'rx-0' (ffff88802e8ea050): auto cleanup kobject_del [ 293.033956][ T6542] kernfs rps_cpus: removing [ 293.040104][ T6542] kernfs rps_flow_cnt: removing [ 293.048291][ T6542] kobject: 'rx-0' (ffff88802e8ea050): auto cleanup 'remove' event [ 293.061094][ T6542] kobject: 'rx-0' (ffff88802e8ea050): kobject_uevent_env [ 293.071190][ T6542] kobject: 'rx-0' (ffff88802e8ea050): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 293.092509][ T6542] kernfs rx-0: removing [ 293.097055][ T6542] kobject: 'rx-0' (ffff88802e8ea050): calling ktype release [ 293.107034][ T6542] kobject: 'rx-0': free name [ 293.112867][ T6542] kernfs limit: removing [ 293.118822][ T6542] kernfs limit_max: removing [ 293.124176][ T6542] kernfs limit_min: removing [ 293.132160][ T6542] kernfs hold_time: removing [ 293.137367][ T6542] kernfs inflight: removing [ 293.143849][ T6542] kernfs byte_queue_limits: removing [ 293.152638][ T6542] kobject: 'tx-0' (ffff888061dd6c20): kobject_cleanup, parent ffff8880192ca450 [ 293.166766][ T6542] kobject: 'tx-0' (ffff888061dd6c20): auto cleanup kobject_del [ 293.179248][ T6542] kernfs tx_timeout: removing [ 293.184993][ T6542] kernfs traffic_class: removing [ 293.191841][ T6542] kernfs xps_cpus: removing [ 293.198602][ T6542] kernfs xps_rxqs: removing [ 293.204993][ T6542] kernfs tx_maxrate: removing [ 293.212169][ T6542] kobject: 'tx-0' (ffff888061dd6c20): auto cleanup 'remove' event [ 293.223495][ T6542] kobject: 'tx-0' (ffff888061dd6c20): kobject_uevent_env [ 293.232683][ T6542] kobject: 'tx-0' (ffff888061dd6c20): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 293.244798][ T6542] kernfs tx-0: removing [ 293.249143][ T6542] kobject: 'tx-0' (ffff888061dd6c20): calling ktype release [ 293.258268][ T6542] kobject: 'tx-0': free name [ 293.264440][ T6542] kernfs queues: removing [ 293.271885][ T6542] kobject: 'queues' (ffff8880192ca450): kobject_cleanup, parent 0000000000000000 [ 293.285935][ T6542] kobject: 'queues' (ffff8880192ca450): calling ktype release [ 293.297822][ T6542] kobject: 'queues' (ffff8880192ca450): kset_release [ 293.307013][ T6542] kobject: 'queues': free name [ 293.314085][ T6542] kernfs runtime_status: removing [ 293.320153][ T6542] kernfs control: removing [ 293.325808][ T6542] kernfs runtime_suspended_time: removing [ 293.333571][ T6542] kernfs runtime_active_time: removing [ 293.342322][ T6542] kernfs autosuspend_delay_ms: removing [ 293.350205][ T6542] kernfs power: removing [ 293.355331][ T6542] kernfs subsystem: removing [ 293.361899][ T6542] kernfs syz_tun: removing [ 293.367420][ T6542] kernfs uevent: removing [ 293.373476][ T6542] kernfs tun_flags: removing [ 293.378911][ T6542] kernfs owner: removing [ 293.384892][ T6542] kernfs group: removing [ 293.392000][ T6542] kernfs rx_packets: removing [ 293.398654][ T6542] kernfs tx_packets: removing [ 293.404060][ T6542] kernfs rx_bytes: removing [ 293.409700][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802fdf0fd8 is addr:fe80::a8aa:aaff:feaa:aaaa for cmd:2 at entry:ffff8880311c7c80 [ 293.409777][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802fdf0fd8 is addr:fe80::aa for cmd:2 at entry:ffff8880311c7800 [ 293.409835][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802fdf0fd8 is addr:172.20.20.170 for cmd:2 at entry:ffff8880311c7900 [ 293.457272][ T6542] kernfs tx_bytes: removing [ 293.462035][ T6542] kernfs rx_errors: removing [ 293.466925][ T6542] kernfs tx_errors: removing [ 293.472006][ T6542] kernfs rx_dropped: removing [ 293.478560][ T6542] kernfs tx_dropped: removing [ 293.484102][ T6542] kernfs multicast: removing [ 293.489566][ T6542] kernfs collisions: removing [ 293.495023][ T6542] kernfs rx_length_errors: removing [ 293.501144][ T6542] kernfs rx_over_errors: removing [ 293.508671][ T6542] kernfs rx_crc_errors: removing [ 293.514980][ T6542] kernfs rx_frame_errors: removing [ 293.521279][ T6542] kernfs rx_fifo_errors: removing [ 293.527119][ T6542] kernfs rx_missed_errors: removing [ 293.533205][ T6542] kernfs tx_aborted_errors: removing [ 293.539937][ T6542] kernfs tx_carrier_errors: removing [ 293.545808][ T6542] kernfs tx_fifo_errors: removing [ 293.552393][ T6542] kernfs tx_heartbeat_errors: removing [ 293.558601][ T6542] kernfs tx_window_errors: removing [ 293.564168][ T6542] kernfs rx_compressed: removing [ 293.570236][ T6542] kernfs tx_compressed: removing [ 293.576260][ T6542] kernfs rx_nohandler: removing [ 293.582184][ T6542] kernfs statistics: removing [ 293.591168][ T6542] kernfs netdev_group: removing [ 293.597130][ T6542] kernfs type: removing [ 293.601437][ T6542] kernfs dev_id: removing [ 293.606079][ T6542] kernfs dev_port: removing [ 293.610919][ T6542] kernfs iflink: removing [ 293.615539][ T6542] kernfs ifindex: removing [ 293.620218][ T6542] kernfs name_assign_type: removing [ 293.624920][ C0] virtqueue callback for ffff88814127c400 (ffffffff84a02460) [ 293.626740][ T6542] kernfs addr_assign_type: removing [ 293.635039][ C0] virtqueue interrupt with no work for ffff88814127c200 [ 293.635059][ C0] virtqueue interrupt with no work for ffff88814127c000 [ 293.635677][ T8] Added buffer head 0 to ffff88814127c400 [ 293.640642][ T6542] kernfs addr_len: removing [ 293.669991][ T6542] kernfs link_mode: removing [ 293.677230][ T6542] kernfs address: removing [ 293.683097][ T6542] kernfs broadcast: removing [ 293.689543][ T6542] kernfs speed: removing [ 293.695362][ T6542] kernfs duplex: removing [ 293.700770][ T6542] kernfs dormant: removing [ 293.705596][ T6542] kernfs testing: removing [ 293.711180][ T6542] kernfs operstate: removing [ 293.716873][ T6542] kernfs carrier_changes: removing [ 293.722992][ T6542] kernfs ifalias: removing [ 293.728546][ T6542] kernfs carrier: removing [ 293.733467][ T6542] kernfs mtu: removing [ 293.738702][ T6542] kernfs flags: removing [ 293.744337][ T6542] kernfs tx_queue_len: removing [ 293.753090][ T6542] kernfs gro_flush_timeout: removing [ 293.760226][ T6542] kernfs napi_defer_hard_irqs: removing [ 293.768657][ T6542] kernfs phys_port_id: removing [ 293.774821][ T6542] kernfs phys_port_name: removing [ 293.784483][ T6542] kernfs phys_switch_id: removing [ 293.791505][ T6542] kernfs proto_down: removing [ 293.797544][ T6542] kernfs carrier_up_count: removing [ 293.803204][ T6542] kernfs carrier_down_count: removing [ 293.811487][ T6542] kernfs threaded: removing [ 293.816271][ T6542] PM: Removing info for No Bus:syz_tun [ 293.822471][ T6542] kobject: 'syz_tun' (ffff888061de06a8): kobject_uevent_env [ 293.830648][ T6542] kobject: 'syz_tun' (ffff888061de06a8): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 293.842894][ T6542] kernfs syz_tun: removing [ 293.848736][ T8605] syz_tun: bond_netdev_event received NETDEV_GOING_DOWN [ 293.856680][ T8605] net syz_tun: siw: event 10 [ 293.862034][ T8605] In tnode_resize ffff88805ed3f220 inflate_threshold=50 threshold=25 [ 293.872266][ T8605] In tnode_resize ffff88805f025420 inflate_threshold=50 threshold=25 [ 293.877243][ T6542] kobject: 'syz_tun' (ffff888061de06a8): kobject_cleanup, parent 0000000000000000 [ 293.884232][ T8605] In tnode_resize ffff88805fa83820 inflate_threshold=50 threshold=25 [ 293.897192][ T6542] kobject: 'syz_tun' (ffff888061de06a8): calling ktype release [ 293.904813][ T8605] In tnode_resize ffff88814bf83a20 inflate_threshold=50 threshold=25 [ 293.904839][ T8605] In tnode_resize ffff8880311b8420 inflate_threshold=50 threshold=25 [ 293.904855][ T8605] In tnode_resize ffff88802c3004a0 inflate_threshold=50 threshold=25 [ 293.904869][ T8605] In tnode_resize ffff88802c3005a0 inflate_threshold=50 threshold=25 [ 293.915437][ T6542] kobject: 'syz_tun': free name [ 293.924404][ T8605] trie_flush found=1 [ 293.968742][ T8605] In tnode_resize ffff88805ed3f220 inflate_threshold=50 threshold=25 [ 293.981754][ T8605] In tnode_resize ffff88805f025420 inflate_threshold=50 threshold=25 [ 293.992371][ T8605] In tnode_resize ffff88805fa83820 inflate_threshold=50 threshold=25 [ 294.001422][ T8605] In tnode_resize ffff88814bf83a20 inflate_threshold=50 threshold=25 [ 294.010422][ T8605] In tnode_resize ffff8880311b8420 inflate_threshold=50 threshold=25 [ 294.020641][ T8605] In tnode_resize ffff88802c3004a0 inflate_threshold=50 threshold=25 [ 294.029425][ T8605] In tnode_resize ffff88802c3005a0 inflate_threshold=50 threshold=25 [ 294.038334][ T8605] trie_flush found=1 [ 294.042504][ T8605] syz_tun: bond_netdev_event received NETDEV_DOWN [ 294.049731][ T8605] net syz_tun: siw: event 2 [ 294.064123][ T8605] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::a8aa:aaff:feaa:aaaa in wq:ffff888042308fd8 [ 294.079977][ T8605] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::aa in wq:ffff888042308fd8 [ 294.093701][ T8605] Deleting ac141400/24 dsfield=0x00 t=ffff888030737eb0 [ 294.102339][ T8605] Deleting ac1414ff/32 dsfield=0x00 t=ffff888030737eb0 [ 294.110152][ T8605] Deleting ac1414aa/32 dsfield=0x00 t=ffff888030737eb0 [ 294.120858][ T8605] In tnode_resize ffff88814bf83a20 inflate_threshold=50 threshold=25 [ 294.129837][ T8605] In tnode_resize ffff88802c3005a0 inflate_threshold=50 threshold=25 [ 294.139360][ T8605] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:172.20.20.170 in wq:ffff888042308fd8 [ 294.152790][ T8605] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 294.162745][ T8605] net syz_tun: siw: event 6 [ 294.169380][ T8605] syz_tun (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 294.178550][ T8605] net syz_tun: siw: event 18 [ 294.184434][ T8605] kobject: 'rx-0' (ffff888061f0d350): kobject_cleanup, parent ffff88801fff3e50 [ 294.195014][ T8605] kobject: 'rx-0' (ffff888061f0d350): auto cleanup kobject_del [ 294.203890][ T8605] kernfs rps_cpus: removing [ 294.208921][ T8605] kernfs rps_flow_cnt: removing [ 294.214827][ T8605] kobject: 'rx-0' (ffff888061f0d350): auto cleanup 'remove' event [ 294.224981][ T8605] kobject: 'rx-0' (ffff888061f0d350): kobject_uevent_env [ 294.233817][ T8605] kobject: 'rx-0' (ffff888061f0d350): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 294.247607][ T8605] kernfs rx-0: removing [ 294.252544][ T8605] kobject: 'rx-0' (ffff888061f0d350): calling ktype release [ 294.265497][ T8605] kobject: 'rx-0': free name [ 294.271969][ T8605] kernfs limit: removing [ 294.277081][ T8605] kernfs limit_max: removing [ 294.282209][ T8605] kernfs limit_min: removing [ 294.288571][ T8605] kernfs hold_time: removing [ 294.295033][ T8605] kernfs inflight: removing [ 294.300313][ T8605] kernfs byte_queue_limits: removing [ 294.310142][ T8605] kobject: 'tx-0' (ffff888061deec20): kobject_cleanup, parent ffff88801fff3e50 [ 294.320818][ T8605] kobject: 'tx-0' (ffff888061deec20): auto cleanup kobject_del [ 294.329844][ T8605] kernfs tx_timeout: removing [ 294.336104][ T8605] kernfs traffic_class: removing [ 294.343478][ T8605] kernfs xps_cpus: removing [ 294.349501][ T8605] kernfs xps_rxqs: removing [ 294.357918][ T8605] kernfs tx_maxrate: removing [ 294.365535][ T8605] kobject: 'tx-0' (ffff888061deec20): auto cleanup 'remove' event [ 294.375803][ T8605] kobject: 'tx-0' (ffff888061deec20): kobject_uevent_env [ 294.387500][ T8605] kobject: 'tx-0' (ffff888061deec20): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 294.404975][ T8605] kernfs tx-0: removing [ 294.415716][ T8605] kobject: 'tx-0' (ffff888061deec20): calling ktype release [ 294.425457][ T8605] kobject: 'tx-0': free name [ 294.431922][ T8605] kernfs queues: removing [ 294.437538][ T8605] kobject: 'queues' (ffff88801fff3e50): kobject_cleanup, parent 0000000000000000 [ 294.449087][ T8605] kobject: 'queues' (ffff88801fff3e50): calling ktype release [ 294.456993][ T8605] kobject: 'queues' (ffff88801fff3e50): kset_release [ 294.467044][ T8605] kobject: 'queues': free name [ 294.473699][ T8605] kernfs runtime_status: removing [ 294.481124][ T8605] kernfs control: removing [ 294.487355][ T8605] kernfs runtime_suspended_time: removing [ 294.495422][ T8605] kernfs runtime_active_time: removing [ 294.504848][ T8605] kernfs autosuspend_delay_ms: removing [ 294.512133][ T8605] kernfs power: removing [ 294.519832][ T8605] kernfs subsystem: removing [ 294.526010][ T8605] kernfs syz_tun: removing [ 294.530677][ T8605] kernfs uevent: removing [ 294.541707][ T8605] kernfs tun_flags: removing [ 294.546870][ T8605] kernfs owner: removing [ 294.552303][ T8605] kernfs group: removing [ 294.557665][ T8605] kernfs rx_packets: removing [ 294.563723][ T8605] kernfs tx_packets: removing [ 294.568935][ T8605] kernfs rx_bytes: removing [ 294.573862][ T8605] kernfs tx_bytes: removing [ 294.580182][ T8605] kernfs rx_errors: removing [ 294.587512][ T8605] kernfs tx_errors: removing [ 294.592972][ T8605] kernfs rx_dropped: removing [ 294.594909][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888042308fd8 is addr:fe80::a8aa:aaff:feaa:aaaa for cmd:2 at entry:ffff888078d2f600 [ 294.598348][ T8605] kernfs tx_dropped: removing [ 294.618415][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888042308fd8 is addr:fe80::aa for cmd:2 at entry:ffff888078d2fd80 [ 294.624900][ C0] virtqueue callback for ffff88814127c400 (ffffffff84a02460) [ 294.624933][ T8605] kernfs multicast: removing [ 294.624962][ T8605] kernfs collisions: removing [ 294.624966][ C0] virtqueue interrupt with no work for ffff88814127c200 [ 294.624979][ C0] virtqueue interrupt with no work for ffff88814127c000 [ 294.624990][ T8605] kernfs rx_length_errors: removing [ 294.625014][ T8605] kernfs rx_over_errors: removing [ 294.625040][ T8605] kernfs rx_crc_errors: removing [ 294.640890][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888042308fd8 is addr:172.20.20.170 for cmd:2 at entry:ffff8880607a3100 [ 294.650346][ T8605] kernfs rx_frame_errors: removing [ 294.656452][ T5826] Added buffer head 0 to ffff88814127c400 [ 294.661595][ T8605] kernfs rx_fifo_errors: removing [ 294.727643][ T8605] kernfs rx_missed_errors: removing [ 294.732929][ T8605] kernfs tx_aborted_errors: removing [ 294.738677][ T8605] kernfs tx_carrier_errors: removing [ 294.744382][ T8605] kernfs tx_fifo_errors: removing [ 294.750130][ T8605] kernfs tx_heartbeat_errors: removing [ 294.756069][ T8605] kernfs tx_window_errors: removing [ 294.761761][ T8605] kernfs rx_compressed: removing [ 294.767317][ T8605] kernfs tx_compressed: removing [ 294.773538][ T8605] kernfs rx_nohandler: removing [ 294.778690][ T8605] kernfs statistics: removing [ 294.785434][ C1] net_ratelimit: 40 callbacks suppressed [ 294.785454][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 294.795059][ C0] wireguard: wg0: Sending keepalive packet to peer 14 ([::1]:20003/0%0) [ 294.800842][ T8605] kernfs netdev_group: removing [ 294.809622][ C0] wireguard: wg0: Sending keepalive packet to peer 8 ([::1]:20003/0%0) [ 294.815325][ T8605] kernfs type: removing [ 294.825239][ C0] wireguard: wg1: Receiving keepalive packet from peer 27 ([::1]:20001/0%0) [ 294.829288][ T8605] kernfs dev_id: removing [ 294.838841][ C0] wireguard: wg2: Receiving keepalive packet from peer 17 ([::1]:20001/0%0) [ 294.843082][ C1] wireguard: wg2: Receiving keepalive packet from peer 11 ([::1]:20001/0%0) [ 294.860904][ T8605] kernfs dev_port: removing [ 294.865915][ T8605] kernfs iflink: removing [ 294.870800][ T8605] kernfs ifindex: removing [ 294.875816][ T8605] kernfs name_assign_type: removing [ 294.881152][ T8605] kernfs addr_assign_type: removing [ 294.887096][ T8605] kernfs addr_len: removing [ 294.892544][ T8605] kernfs link_mode: removing [ 294.897423][ T8605] kernfs address: removing [ 294.902241][ T8605] kernfs broadcast: removing [ 294.907053][ T8605] kernfs speed: removing [ 294.911383][ T8605] kernfs duplex: removing [ 294.916048][ T8605] kernfs dormant: removing [ 294.920668][ T8605] kernfs testing: removing [ 294.925606][ T8605] kernfs operstate: removing [ 294.930828][ T8605] kernfs carrier_changes: removing [ 294.936908][ T8605] kernfs ifalias: removing [ 294.943045][ T8605] kernfs carrier: removing [ 294.948526][ C1] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 294.948702][ C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 294.948786][ C1] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0) [ 294.978994][ T8605] kernfs mtu: removing [ 294.980076][ C1] wireguard: wg1: Receiving keepalive packet from peer 15 ([::1]:20001/0%0) [ 294.984030][ T8605] kernfs flags: removing [ 294.999129][ T8605] kernfs tx_queue_len: removing [ 295.004383][ T8605] kernfs gro_flush_timeout: removing [ 295.010905][ T8605] kernfs napi_defer_hard_irqs: removing [ 295.018569][ T8605] kernfs phys_port_id: removing [ 295.023915][ T8605] kernfs phys_port_name: removing [ 295.030898][ T8605] kernfs phys_switch_id: removing [ 295.037015][ T8605] kernfs proto_down: removing [ 295.042195][ T8605] kernfs carrier_up_count: removing [ 295.048385][ T8605] kernfs carrier_down_count: removing [ 295.054485][ T8605] kernfs threaded: removing [ 295.059755][ T8605] PM: Removing info for No Bus:syz_tun [ 295.065998][ T8605] kobject: 'syz_tun' (ffff888061f8c6a8): kobject_uevent_env [ 295.075602][ T8605] kobject: 'syz_tun' (ffff888061f8c6a8): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 295.089954][ T8605] kernfs syz_tun: removing [ 295.096040][ T8607] syz_tun: bond_netdev_event received NETDEV_GOING_DOWN [ 295.113380][ T8607] bond0: (slave syz_tun): bond_slave_netdev_event called [ 295.128365][ T8607] net syz_tun: siw: event 10 [ 295.142884][ T8607] In tnode_resize ffff888031323420 inflate_threshold=50 threshold=25 [ 295.145899][ T8605] kobject: 'syz_tun' (ffff888061f8c6a8): kobject_cleanup, parent 0000000000000000 [ 295.155672][ T8607] In tnode_resize ffff88805f667820 inflate_threshold=50 threshold=25 [ 295.165061][ T8605] kobject: 'syz_tun' (ffff888061f8c6a8): calling ktype release [ 295.182344][ T8607] In tnode_resize ffff8880253e5820 inflate_threshold=50 threshold=25 [ 295.185321][ T8605] kobject: 'syz_tun': free name [ 295.199101][ T8607] In tnode_resize ffff8880618fb820 inflate_threshold=50 threshold=25 [ 295.214460][ T8607] In tnode_resize ffff88806030bb20 inflate_threshold=50 threshold=25 [ 295.226516][ T8607] In tnode_resize ffff888078ccbc20 inflate_threshold=50 threshold=25 [ 295.240460][ T8607] In tnode_resize ffff888078ccbda0 inflate_threshold=50 threshold=25 [ 295.250577][ T8607] trie_flush found=1 [ 295.255258][ T8607] In tnode_resize ffff888031323420 inflate_threshold=50 threshold=25 [ 295.267338][ T8607] In tnode_resize ffff88805f667820 inflate_threshold=50 threshold=25 [ 295.278163][ T8607] In tnode_resize ffff8880253e5820 inflate_threshold=50 threshold=25 [ 295.289179][ T8607] In tnode_resize ffff8880618fb820 inflate_threshold=50 threshold=25 [ 295.300267][ T8607] In tnode_resize ffff88806030bb20 inflate_threshold=50 threshold=25 [ 295.310196][ T8607] In tnode_resize ffff888078ccbc20 inflate_threshold=50 threshold=25 [ 295.319781][ T8607] In tnode_resize ffff888078ccbda0 inflate_threshold=50 threshold=25 [ 295.329665][ T8607] trie_flush found=1 [ 295.335236][ T8607] syz_tun: bond_netdev_event received NETDEV_DOWN [ 295.342114][ T8607] bond0: (slave syz_tun): bond_slave_netdev_event called [ 295.351099][ T8607] net syz_tun: siw: event 2 [ 295.371454][ T8607] Deleting ac141400/24 dsfield=0x00 t=ffff888030737230 [ 295.379242][ T8607] Deleting ac1414ff/32 dsfield=0x00 t=ffff888030737230 [ 295.389732][ T8607] Deleting ac1414aa/32 dsfield=0x00 t=ffff888030737230 [ 295.399337][ T8607] In tnode_resize ffff8880618fb820 inflate_threshold=50 threshold=25 [ 295.408157][ T8607] In tnode_resize ffff888078ccbda0 inflate_threshold=50 threshold=25 [ 295.416983][ T8607] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:172.20.20.170 in wq:ffff88802fdf2d98 [ 295.429906][ T8607] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 295.438721][ T8607] bond0: (slave syz_tun): bond_slave_netdev_event called [ 295.446212][ T8607] kernfs state: removing [ 295.450618][ T8607] kernfs mii_status: removing [ 295.456061][ T8607] kernfs link_failure_count: removing [ 295.462211][ T8607] kernfs perm_hwaddr: removing [ 295.468002][ T8607] kernfs queue_id: removing [ 295.472580][ T8607] kernfs ad_aggregator_id: removing [ 295.478266][ T8607] kernfs ad_actor_oper_port_state: removing [ 295.484836][ T8607] kernfs ad_partner_oper_port_state: removing [ 295.491362][ T8607] syz_tun (unregistering): bond_netdev_event received NETDEV_PRECHANGEUPPER [ 295.500300][ T8607] syz_tun (unregistering): bond_slave_netdev_event called on NULL slave [ 295.508876][ T8607] net syz_tun: siw: event 27 [ 295.513520][ T8607] Remove adjacency: dev syz_tun adj_dev bond0 ref_nr 1 [ 295.522347][ T8607] kernfs master: removing [ 295.526857][ T8607] kernfs upper_bond0: removing [ 295.531867][ T8607] adjacency: dev_put for bond0, because link removed from syz_tun to bond0 [ 295.540677][ T8607] Remove adjacency: dev bond0 adj_dev syz_tun ref_nr 1 [ 295.547974][ T8607] kernfs lower_syz_tun: removing [ 295.553060][ T8607] adjacency: dev_put for syz_tun, because link removed from bond0 to syz_tun [ 295.563050][ T8607] syz_tun (unregistering): bond_netdev_event received NETDEV_CHANGEUPPER [ 295.571791][ T8607] syz_tun (unregistering): bond_slave_netdev_event called on NULL slave [ 295.580600][ T8607] net syz_tun: siw: event 22 [ 295.586671][ T8607] bond0: (slave syz_tun): Releasing backup interface [ 295.594459][ T8607] bond0: bond_netdev_event received NETDEV_FEAT_CHANGE [ 295.601452][ T8607] bond0: bond_master_netdev_event called [ 295.607236][ T8607] net bond0: siw: event 12 [ 295.611971][ T8607] syz_tun (unregistering): bond_netdev_event received NETDEV_PRE_CHANGEADDR [ 295.620917][ T8607] net syz_tun: siw: event 9 [ 295.625609][ C0] virtqueue callback for ffff88814127c400 (ffffffff84a02460) [ 295.625680][ C0] virtqueue interrupt with no work for ffff88814127c200 [ 295.625692][ C0] virtqueue interrupt with no work for ffff88814127c000 [ 295.647536][ T5826] Added buffer head 0 to ffff88814127c400 [ 295.653932][ T8607] syz_tun (unregistering): bond_netdev_event received NETDEV_CHANGEADDR [ 295.662849][ T8607] net syz_tun: siw: event 8 [ 295.667795][ T8607] bond0: bond_netdev_event received NETDEV_XDP_FEAT_CHANGE [ 295.676200][ T8607] bond0: bond_master_netdev_event called [ 295.682432][ T8607] net bond0: siw: event 40 [ 295.688798][ T8607] kobject: 'bonding_slave' (ffff88801dbbd9a8): kobject_cleanup, parent ffff88806195c6a8 [ 295.700204][ T8607] kobject: 'bonding_slave' (ffff88801dbbd9a8): auto cleanup kobject_del [ 295.708759][ T8607] kernfs bonding_slave: removing [ 295.713759][ T8607] kobject: 'bonding_slave' (ffff88801dbbd9a8): calling ktype release [ 295.722855][ T8607] kobject: 'bonding_slave': free name [ 295.728685][ T8607] net syz_tun: siw: event 6 [ 295.734265][ T8607] syz_tun (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 295.742725][ T8607] net syz_tun: siw: event 18 [ 295.747566][ T8607] kobject: 'rx-0' (ffff888061ec3650): kobject_cleanup, parent ffff888021b96650 [ 295.757482][ T8607] kobject: 'rx-0' (ffff888061ec3650): auto cleanup kobject_del [ 295.766642][ T8607] kernfs rps_cpus: removing [ 295.771212][ T8607] kernfs rps_flow_cnt: removing [ 295.776347][ T8607] kobject: 'rx-0' (ffff888061ec3650): auto cleanup 'remove' event [ 295.784278][ T8607] kobject: 'rx-0' (ffff888061ec3650): kobject_uevent_env [ 295.791901][ T8607] kobject: 'rx-0' (ffff888061ec3650): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 295.804542][ T8607] kernfs rx-0: removing [ 295.808937][ T8607] kobject: 'rx-0' (ffff888061ec3650): calling ktype release [ 295.816644][ T8607] kobject: 'rx-0': free name [ 295.821292][ T8607] kernfs limit: removing [ 295.825676][ T8607] kernfs limit_max: removing [ 295.830978][ T8607] kernfs limit_min: removing [ 295.835931][ T8607] kernfs hold_time: removing [ 295.840794][ T8607] kernfs inflight: removing [ 295.845445][ T8607] kernfs byte_queue_limits: removing [ 295.851624][ T8607] kobject: 'tx-0' (ffff888061f59820): kobject_cleanup, parent ffff888021b96650 [ 295.860978][ T8607] kobject: 'tx-0' (ffff888061f59820): auto cleanup kobject_del [ 295.871224][ T8607] kernfs tx_timeout: removing [ 295.877768][ T8607] kernfs traffic_class: removing [ 295.886490][ T8607] kernfs xps_cpus: removing [ 295.892729][ T8607] kernfs xps_rxqs: removing [ 295.899185][ T8607] kernfs tx_maxrate: removing [ 295.906445][ T8607] kobject: 'tx-0' (ffff888061f59820): auto cleanup 'remove' event [ 295.915152][ T8607] kobject: 'tx-0' (ffff888061f59820): kobject_uevent_env [ 295.922514][ T8607] kobject: 'tx-0' (ffff888061f59820): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 295.934839][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802fdf2d98 is addr:172.20.20.170 for cmd:2 at entry:ffff888030e2e180 [ 295.949148][ T8607] kernfs tx-0: removing [ 295.953358][ T8607] kobject: 'tx-0' (ffff888061f59820): calling ktype release [ 295.961245][ T8607] kobject: 'tx-0': free name [ 295.967019][ T8607] kernfs queues: removing [ 295.973497][ T8607] kobject: 'queues' (ffff888021b96650): kobject_cleanup, parent 0000000000000000 [ 295.983630][ T8607] kobject: 'queues' (ffff888021b96650): calling ktype release [ 295.992645][ T8607] kobject: 'queues' (ffff888021b96650): kset_release [ 296.000710][ T8607] kobject: 'queues': free name [ 296.005909][ T8607] kernfs runtime_status: removing [ 296.011004][ T8607] kernfs control: removing [ 296.015695][ T8607] kernfs runtime_suspended_time: removing [ 296.021474][ T8607] kernfs runtime_active_time: removing [ 296.027361][ T8607] kernfs autosuspend_delay_ms: removing [ 296.033158][ T8607] kernfs power: removing [ 296.037594][ T8607] kernfs subsystem: removing [ 296.042329][ T8607] kernfs syz_tun: removing [ 296.046954][ T8607] kernfs uevent: removing [ 296.051417][ T8607] kernfs tun_flags: removing [ 296.056211][ T8607] kernfs owner: removing [ 296.060531][ T8607] kernfs group: removing [ 296.064973][ T8607] kernfs rx_packets: removing [ 296.069713][ T8607] kernfs tx_packets: removing [ 296.075851][ T8607] kernfs rx_bytes: removing [ 296.080422][ T8607] kernfs tx_bytes: removing [ 296.085113][ T8607] kernfs rx_errors: removing [ 296.089931][ T8607] kernfs tx_errors: removing [ 296.094812][ T8607] kernfs rx_dropped: removing [ 296.099738][ T8607] kernfs tx_dropped: removing [ 296.104853][ T8607] kernfs multicast: removing [ 296.109487][ T8607] kernfs collisions: removing [ 296.114217][ T8607] kernfs rx_length_errors: removing [ 296.119550][ T8607] kernfs rx_over_errors: removing [ 296.125016][ T8607] kernfs rx_crc_errors: removing [ 296.130043][ T8607] kernfs rx_frame_errors: removing [ 296.135687][ T8607] kernfs rx_fifo_errors: removing [ 296.141214][ T8607] kernfs rx_missed_errors: removing [ 296.146519][ T8607] kernfs tx_aborted_errors: removing [ 296.151908][ T8607] kernfs tx_carrier_errors: removing [ 296.157365][ T8607] kernfs tx_fifo_errors: removing [ 296.162493][ T8607] kernfs tx_heartbeat_errors: removing [ 296.168017][ T8607] kernfs tx_window_errors: removing [ 296.173343][ T8607] kernfs rx_compressed: removing [ 296.178461][ T8607] kernfs tx_compressed: removing [ 296.183476][ T8607] kernfs rx_nohandler: removing [ 296.188407][ T8607] kernfs statistics: removing [ 296.193254][ T8607] kernfs netdev_group: removing [ 296.198255][ T8607] kernfs type: removing [ 296.203133][ T8607] kernfs dev_id: removing [ 296.207771][ T8607] kernfs dev_port: removing [ 296.212443][ T8607] kernfs iflink: removing [ 296.217042][ T8607] kernfs ifindex: removing [ 296.221526][ T8607] kernfs name_assign_type: removing [ 296.227095][ T8607] kernfs addr_assign_type: removing [ 296.233321][ T8607] kernfs addr_len: removing [ 296.238124][ T8607] kernfs link_mode: removing [ 296.242914][ T8607] kernfs address: removing [ 296.247533][ T8607] kernfs broadcast: removing [ 296.252236][ T8607] kernfs speed: removing [ 296.257004][ T8607] kernfs duplex: removing [ 296.261466][ T8607] kernfs dormant: removing [ 296.266008][ T8607] kernfs testing: removing [ 296.270467][ T8607] kernfs operstate: removing [ 296.275314][ T8607] kernfs carrier_changes: removing [ 296.280527][ T8607] kernfs ifalias: removing [ 296.285070][ T8607] kernfs carrier: removing [ 296.289625][ T8607] kernfs mtu: removing [ 296.294160][ T8607] kernfs flags: removing [ 296.298752][ T8607] kernfs tx_queue_len: removing [ 296.303885][ T8607] kernfs gro_flush_timeout: removing [ 296.309489][ T8607] kernfs napi_defer_hard_irqs: removing [ 296.315257][ T8607] kernfs phys_port_id: removing [ 296.320159][ T8607] kernfs phys_port_name: removing [ 296.325497][ T8607] kernfs phys_switch_id: removing [ 296.330629][ T8607] kernfs proto_down: removing [ 296.335387][ T8607] kernfs carrier_up_count: removing [ 296.340624][ T8607] kernfs carrier_down_count: removing [ 296.346264][ T8607] kernfs threaded: removing [ 296.350841][ T8607] PM: Removing info for No Bus:syz_tun [ 296.356370][ T8607] kobject: 'syz_tun' (ffff88806195c6a8): kobject_uevent_env [ 296.363913][ T8607] kobject: 'syz_tun' (ffff88806195c6a8): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 296.374779][ T8607] kernfs syz_tun: removing [ 296.380247][ T59] wireguard: wg2: Creating namespace exiting [ 296.389774][ T59] wireguard: wg1: Creating namespace exiting [ 296.396612][ T59] wireguard: wg0: Creating namespace exiting [ 296.403545][ T4512] wg2: bond_netdev_event received NETDEV_CHANGE [ 296.410776][ T4512] net wg2: siw: event 4 [ 296.416385][ T8607] kobject: 'syz_tun' (ffff88806195c6a8): kobject_cleanup, parent 0000000000000000 [ 296.426867][ T8607] kobject: 'syz_tun' (ffff88806195c6a8): calling ktype release [ 296.426930][ T4512] wg1: bond_netdev_event received NETDEV_CHANGE [ 296.437702][ T8607] kobject: 'syz_tun': free name [ 296.443879][ T4512] net wg1: siw: event 4 [ 296.453639][ T4512] wg0: bond_netdev_event received NETDEV_CHANGE [ 296.461081][ T4512] net wg0: siw: event 4 [ 296.467608][ T59] netdevsim netdevsim4 netdevsim3: bond_netdev_event received NETDEV_GOING_DOWN [ 296.482783][ T59] net netdevsim3: siw: event 10 [ 296.489608][ T59] netdevsim netdevsim4 netdevsim3: bond_netdev_event received NETDEV_DOWN [ 296.499551][ T59] net netdevsim3: siw: event 2 [ 296.506257][ T59] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::10b0:3fff:fe79:664d in wq:ffff88802fdf4b58 [ 296.519018][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 296.531149][ T59] net netdevsim3: siw: event 6 [ 296.536875][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.547989][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 296.558760][ T59] net netdevsim3: siw: event 18 [ 296.564108][ T59] kobject: 'rx-0' (ffff88805edb8150): kobject_cleanup, parent ffff88802cfa5850 [ 296.574297][ T59] kobject: 'rx-0' (ffff88805edb8150): auto cleanup kobject_del [ 296.583949][ T59] kernfs rps_cpus: removing [ 296.588938][ T59] kernfs rps_flow_cnt: removing [ 296.594337][ T59] kobject: 'rx-0' (ffff88805edb8150): auto cleanup 'remove' event [ 296.602702][ T59] kobject: 'rx-0' (ffff88805edb8150): kobject_uevent_env [ 296.610392][ T59] kobject: 'rx-0' (ffff88805edb8150): kobject_uevent_env: uevent_suppress caused the event to drop! [ 296.622351][ T59] kernfs rx-0: removing [ 296.624853][ C0] virtqueue callback for ffff88814127c400 (ffffffff84a02460) [ 296.627268][ T59] kobject: 'rx-0' (ffff88805edb8150): calling ktype release [ 296.634244][ C0] virtqueue interrupt with no work for ffff88814127c200 [ 296.642320][ T59] kobject: 'rx-0': free name [ 296.650743][ C0] virtqueue interrupt with no work for ffff88814127c000 [ 296.650969][ T5760] Added buffer head 0 to ffff88814127c400 [ 296.655585][ T59] kernfs limit: removing [ 296.673339][ T59] kernfs limit_max: removing [ 296.679492][ T59] kernfs limit_min: removing [ 296.686635][ T59] kernfs hold_time: removing [ 296.692330][ T59] kernfs inflight: removing [ 296.698292][ T59] kernfs byte_queue_limits: removing [ 296.705369][ T59] kobject: 'tx-0' (ffff88801bfce420): kobject_cleanup, parent ffff88802cfa5850 [ 296.715493][ T59] kobject: 'tx-0' (ffff88801bfce420): auto cleanup kobject_del [ 296.725739][ T59] kernfs tx_timeout: removing [ 296.730642][ T59] kernfs traffic_class: removing [ 296.736197][ T59] kernfs xps_cpus: removing [ 296.740960][ T59] kernfs xps_rxqs: removing [ 296.747267][ T59] kernfs tx_maxrate: removing [ 296.752325][ T59] kobject: 'tx-0' (ffff88801bfce420): auto cleanup 'remove' event [ 296.760599][ T59] kobject: 'tx-0' (ffff88801bfce420): kobject_uevent_env [ 296.767845][ T59] kobject: 'tx-0' (ffff88801bfce420): kobject_uevent_env: uevent_suppress caused the event to drop! [ 296.780182][ T59] kernfs tx-0: removing [ 296.785645][ T59] kobject: 'tx-0' (ffff88801bfce420): calling ktype release [ 296.795077][ T59] kobject: 'tx-0': free name [ 296.801584][ T59] kernfs queues: removing [ 296.806282][ T59] kobject: 'queues' (ffff88802cfa5850): kobject_cleanup, parent 0000000000000000 [ 296.818416][ T59] kobject: 'queues' (ffff88802cfa5850): calling ktype release [ 296.828746][ T59] kobject: 'queues' (ffff88802cfa5850): kset_release [ 296.838922][ T59] kobject: 'queues': free name [ 296.845690][ T59] kernfs runtime_status: removing [ 296.852281][ T59] kernfs control: removing [ 296.859309][ T59] kernfs runtime_suspended_time: removing [ 296.870360][ T59] kernfs runtime_active_time: removing [ 296.877391][ T59] kernfs autosuspend_delay_ms: removing [ 296.886176][ T59] kernfs power: removing [ 296.891084][ T59] kernfs device: removing [ 296.895603][ T59] kernfs subsystem: removing [ 296.901581][ T59] kernfs netdevsim3: removing [ 296.909523][ T59] kernfs uevent: removing [ 296.919580][ T59] kernfs rx_packets: removing [ 296.927218][ T59] kernfs tx_packets: removing [ 296.933121][ T59] kernfs rx_bytes: removing [ 296.938658][ T59] kernfs tx_bytes: removing [ 296.943345][ T59] kernfs rx_errors: removing [ 296.949725][ T59] kernfs tx_errors: removing [ 296.954778][ T59] kernfs rx_dropped: removing [ 296.961905][ T59] kernfs tx_dropped: removing [ 296.968863][ T59] kernfs multicast: removing [ 296.974301][ T59] kernfs collisions: removing [ 296.980057][ T59] kernfs rx_length_errors: removing [ 296.992232][ T59] kernfs rx_over_errors: removing [ 297.000549][ T59] kernfs rx_crc_errors: removing [ 297.011457][ T59] kernfs rx_frame_errors: removing [ 297.018453][ T59] kernfs rx_fifo_errors: removing [ 297.024408][ T59] kernfs rx_missed_errors: removing [ 297.030653][ T59] kernfs tx_aborted_errors: removing [ 297.034921][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff88802fdf4b58 is addr:fe80::10b0:3fff:fe79:664d for cmd:2 at entry:ffff888031508d00 [ 297.037994][ T59] kernfs tx_carrier_errors: removing [ 297.066774][ T59] kernfs tx_fifo_errors: removing [ 297.074511][ T59] kernfs tx_heartbeat_errors: removing [ 297.081123][ T59] kernfs tx_window_errors: removing [ 297.087174][ T59] kernfs rx_compressed: removing [ 297.093068][ T59] kernfs tx_compressed: removing [ 297.100509][ T59] kernfs rx_nohandler: removing [ 297.108127][ T59] kernfs statistics: removing [ 297.114132][ T59] kernfs netdev_group: removing [ 297.119616][ T59] kernfs type: removing [ 297.126269][ T59] kernfs dev_id: removing [ 297.131779][ T59] kernfs dev_port: removing [ 297.137501][ T59] kernfs iflink: removing [ 297.142031][ T59] kernfs ifindex: removing [ 297.146987][ T59] kernfs name_assign_type: removing [ 297.152590][ T59] kernfs addr_assign_type: removing [ 297.158780][ T59] kernfs addr_len: removing [ 297.165380][ T59] kernfs link_mode: removing [ 297.171511][ T59] kernfs address: removing [ 297.177041][ T59] kernfs broadcast: removing [ 297.182754][ T59] kernfs speed: removing [ 297.188305][ T59] kernfs duplex: removing [ 297.193096][ T59] kernfs dormant: removing [ 297.198555][ T59] kernfs testing: removing [ 297.203225][ T59] kernfs operstate: removing [ 297.209760][ T59] kernfs carrier_changes: removing [ 297.215538][ T59] kernfs ifalias: removing [ 297.221082][ T59] kernfs carrier: removing [ 297.227649][ T59] kernfs mtu: removing [ 297.232216][ T59] kernfs flags: removing [ 297.239474][ T59] kernfs tx_queue_len: removing [ 297.244742][ T59] kernfs gro_flush_timeout: removing [ 297.251305][ T59] kernfs napi_defer_hard_irqs: removing [ 297.258357][ T59] kernfs phys_port_id: removing [ 297.267316][ T59] kernfs phys_port_name: removing [ 297.274294][ T59] kernfs phys_switch_id: removing [ 297.282004][ T59] kernfs proto_down: removing