last executing test programs: 1m13.637178946s ago: executing program 0 (id=448): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000400), &(0x7f00000004c0)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000001140)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xd4b, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@hopopts={0x1d, 0x1a1, '\x00', [@pad1, @ra={0x5, 0x2, 0xb7f}, @generic={0x6, 0xd00, "b933cbc2d42475d2bbae68fc88bfcc748bf7fceac363cb22a684526ce5d8094364bbbceff307831c7b1f6c09cda3fd31ebfecebcc3f2021e584e88095c917f9a5d73af6b3752eb738eb618ecf2bfc9a5e8a72848c5b0869c9d4a93f44de826bbd3df49293bbe4e4c3226519b4059db710d091b0d680c69681f12d0db7308e08d4b9b154f4a00b162b9f995f5161a69fc3a723ff1fde9786f514bc814e2ce962a55003e30655a0573e1e71cb25ba6d904e474910be0e3beaef424888f0f4ae3f130685dfe8d881c6e22828831def21ef064ca3b0527a0ffc1a9ad25648e2df294002deaff0f1d44b981832281addd0bdb276dcc6897180f752aa3a0489c71330f3f64465e284e13e083a8e75ca39ace92662cfb15d01bfdbbcc70879414f19f34dca320c40cceb5d120bbae6b8ab5b172c9deaa88c79c512423fa60ef89e94cf48aa717bf19057eb78cac7b0d677cee9b2feca0156ac6e141063a1682fcde3e53d4b9069bfb699dbca26a999f86b3c1a37806f2cfeb14020e123685f6a084d0d70f50c72a0ff45f1e22936929eab40c22eb53074fd9fdb6b63f13d1af3607b57804cedc1149bd81787288bd00900b24523e7f2160dbfa722de15434b23547acd19dc05bb550639332a5791451ba885efdd50f540e72f4337a05df9e1cec532a63532fbb1d317c313c38b176bae5638cf9c69623b8a4021314c2bd07bbe5d48f4a2923cedb9babfa1a47180a2f4d8e4ff14297d7fca2b99d2e1b7d957713cf8d7422c7388f30212cd282abd39a79008140fdf34996d8ddbae48cb3a76536a457eddbf27d1e90efd138f372bbb9ea9289dec22a3fb3f83f9d5374d2a975dffda9a8cefbae7439df989def6f379e42c853ca4bd1a4c9ffc78b4340f5d67e7790f7265e34f5e6d76e317d2e7e3f53999eb5bbd6de0d8a1c1112b76dab9cc6ba694f6a959abf3ea2c470456d5700c46f00ad9d1f2d17a2c2d05a1ec2067d0be9b6c6f73188a95c1f2a47a55333f0750c11b8badab8cec4c2baccb3457655885a9a16a999eb5e9f0e2457ec749bd4b537564f64d59321b906aaeb838801c558897c8ee1fa04c78812a975f5fbde706362bfd974bfba2faebe5959ef3fd0a71a7a308080599f956485be27c0b0a4af746931bff13e5ecd5f2f2fe2d67fa81061c86c94826ee7f258b31d973c68af35554241807f5ba75b15369f65fcdc94bb572b1da1c842088867020c1f20fc5b2f4d10ae9010d4c9107e90379b650d77044b90e1fd306d6c95b097b598acffef6060342903c00409bdbd82299255778e6dc83de6924063ee9d27909bc99f63e8b90442a8047f5735b029058405777f83dafda3ae54825626c9130b608cfc895ca603bfab5a3efd2458957121395adbd92991f9dce9c80aa1e3ddb821d8ef47ae9f3f3c67bc01fca03b389cc5db9600464a0abdeccf5433b1a56a7787225e0b46015563adcfcc611b65a38385d6574a3090a5aa0e9076341a707f12528bff68542162a2d82e5690aead0859b9382d9f4fc09bc794941321fa7cfedc606c1b87f562f5c555665b19919f965ac73159fa6f6a1a2ad28ca9a32982f6c131baac15e6c408e67b0ee4601a052a219f3a3b9e92d3421d9d22b2d80d5840a0bd091d10e1127d4b1222fa23b6026e8d529a255fa65597058b16deb382284dad546186c83248585bc6c4546aa2a295672dee3e710d5e9802ec50d37a05aaea089e22f5e6b7221cc6f6789f53faefc9da96a4cdf25fdb1d94b6d1b873f30b2f03a39e68d91b2cc22faf98bfa6182cffefcbd8469be37459a98cd1519cbcdfdefc0d0a48ed010bb90b6a89ef824b54673ad1a6e5658851eb0c2aa500550b7784cdcb2a2a8a3aa69db763c86b2f03df3239de05d075bedc7bfcb881c742ef4ebc2db0a6adc87305f8f217f969a742b482a9c7e3f51c4d4dec715337605fe01ab240cfbc2d376ad2ccda03464b63d2d840501a21fa7cbd013e3967fb6883f67e8ae8495febe04d063d74dd8f6110a56d8870829488c62043daeae09590e2150fb68b248e02d494fc97d8850b72850e985fed13503e1b838a7376fd8f065df20aa4a2864eeb9aa05a6e4692fd259c8b843b21a3032f6cea02b3fec326e50ce8ab877e7343a3bd52c00f469777d6c230b18e5896f816f746e46aa8c1f0fbae443fbd9bb86a3c2e54e8b702ae0b28874de5e46201848accc7ffae675fecdf154b5e5fc7c7ce2f420b8c11966669a325ada0e9a607250603b3cba079a02cd30d12e1975312ce4c7f14fe19e2b8ba7e687e27ea810947a7f3127ec2e4c16b2c1b4cad2b0acb26ef3b1ea3b1994020987bc5839d371727065dc8107ddb6b7a7b66d452ea93db198a4e9e1fa31767bd8c1731ffd8442176fe3aa1e9cdd109f0b05c8da449e9dd9d1b7e2916082f503bae2282ac6a7dbc7e88723eaf276a652eae9c07055990a8c06625df8c71ee85e1f020631d2b43dcc2ed7d6de3780c6944d532f5cc24f92ac114117e684ec620be499c0e5738d91898a24a12e9c59b5d752a58ea7e5ee2ba1dc1493f9e3f306c165a9e50daa6ea8af7dc4a8cedeaa45381862e3237ee8284f66a41efe4c5a4e0ff3fda051439f66b95c08f1d2920c8671fdd9630dca48c446ffe213075fa4f125fd2ec3a12d0632c586930f46ea7a5b40a573a475c23f88b5234a8fecc892c6db1ee7870b4e8fcb1b18b778c09afdc3f4175a4f34a51696141b1410465c7e1a3d6aa7e45068bc998ac8f482a1a1b5b982f007b65ee2d88eace3e724099dce5cb7398f3100f4d11ccd2ba69cc15885b66b09b8f3c34ed3a39e9b6f2450b892bb0b1928174485573b2a23c23261ec5d8eaed65e69fed0674a2c7a23a83aa57559bcb557aa07e3ca78db387355459522f5bb1a15facc4e35d681b6c3747aac24ba7d0fb39f1496b7133f83844d3b2153cc073744da8f47c2d3875917da5fb347ca2791e11b26d599186b4635543a2e389cbc60b28858c93ad390f52134f2d6fb83f3de10e48be353b855b6645059a1ebc3f0e0e172bf7ad89cd6987be19ac7055b1dd92a4202cbf247c161ffca8ad34e9194dc639d7cf7cafcbe0f397039e9f1646e2672245dcf0588e6845640ca4df670d77e3bc60dd5a9e97e52ca34644fdd41616977ea2506f36cf91c251f0027d9e51f88fe5a03b1a1937bb0dd80c7eafc97bff2c6113d96b046140477f03c2e7f4a52b1767d35edb318d3cf0db42c9352d96760596e6773127eba1024424517c61464c27e21fe9671945a931b14c5d88a36a09d3230c16419fdcf08dabe66e14287a566c023f4ada1331991d18d145a19a1eb094d76ad33858f025f2fe611d079dc177ac14ddd66783539bc5e1bd9268034815621a7fbe66ab45db5965fd14c9cd2e6a96cc8ca6a1f05846a4a6e445cb8bd39aac5ef2d2e13780aab313ab0351c4d6370bc4dc0eaf441be7570ee16d5114e95927cb4d10c6e8458b6f11c024660735237998feea6835c88d8976da06f4f2c7e0631ecf304086f700162111eee9b1df6d51dedac648fb89043ac01d7a2feb4f3f70ff998838cbcac3339ae2bc5aee0bf0a41fab6443cd4612814be5caa38acb50aa5d6d5f2774de1c851bf55e25ce5c96f26a8413001cf62a1342dd003647d4de3f38f26cfb34ebff12fdc6d4b9ef5406980f57f9507b8992e3d2b77099c4d90dd7e14b94be8cb56ebc4436971e8c87839634c57048da20936076a9b972a36816f24c921a7ef436dbd11a3a10c1c3b5e9750fde631ccec6b213a00fc060709d29a48716f818d5e9918b7858f9828bff48e755526e001aad1128580fdf80f43df449be3235a036f87e3c9bb1c4f71ddaf481ad58e0bdfff7989fbf3e30dca6441732c1573426ed902fd38f10f9c33300d5f78f157dba0eef7ebf2fce82439a8e7112720b9aeac511a801e26e52644838157847ce163803acbe5a373881d2a1d07313eafb9cbdd2358c778eefc432b102af0c0a3bc8febf590ac0cb5ff2323be5f31594bbf44ad0adb87b04445b9f873f63c4e0730c8632f0f8d81f7b759e34ef8068abe9c3feb1bcd111e6959e653ff0f174ab3f26c64cc9a64aff0d6cc4b4028c1a7dacf798347c22d785c8261ab8ef90f91236f933c39d678c1d77c3b42ccd880c81252003f8bf545df90e24e8dac60a2ce3d2f00c4a6e07a95cbdfa93a03b942052298bc7f040a0108976177d416ce909269599b9f4d1be60fa2d1ac83f323d0f016bbe8c03db50fd9dd307fd0a10dbe3bf68f9247e3434d5b7d5dc8596ceac34e961f6b43bb9a3926a331f461ad29a36ee80bade06ac68b7e250c0664da15fe1c65895fe7d8f1ccf1a5b9e8908c5490b12d463d1865fbf025294e3b6f99165cddc3b7c4ef5c0702cd1b948a411a936d2f05a04f0d3d5e879997f7346eec7b0625d68acd851f62392badcd663a92593a013102c9044c43e1df6b13929318f9a4ee20b679aa4694ec13f5d323a214bf5f79e90ad148f5e9064b586ff6eee972fc8ec7f312d1ec2af6553f231b308336597647b769c8d8aa327156aa8e8c2e89eeb7778907dc2b92b4bdff3db861b24d2c8e5c37165e784a017ba42e8bae6585f369b40138defcfa3d99a0aefdd7d29a74ced64878d53b5eef10d5d34789b34b463fab881ce0e0fbfac2eb1576784dfb60187586211624de1fca14ab313840f1b58682421f0d685e90468a747dd4142230c"}]}], "01a102"}}}}}}}, 0x0) 1m13.428218313s ago: executing program 0 (id=450): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3fffff) 1m10.20962771s ago: executing program 0 (id=463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x15, 0x2, 0x8be}, {0x10}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xa}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m7.097467168s ago: executing program 0 (id=467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000280)=""/161) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 1m6.015775652s ago: executing program 0 (id=473): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3fffff) 1m3.137628788s ago: executing program 0 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x400000000000) r2 = socket$pppoe(0x18, 0x1, 0x0) getpeername(r2, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) fallocate(0xffffffffffffffff, 0x100000000000003, 0x1ffa, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x2, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, 0x0, 0x0) 47.644186934s ago: executing program 32 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x400000000000) r2 = socket$pppoe(0x18, 0x1, 0x0) getpeername(r2, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) fallocate(0xffffffffffffffff, 0x100000000000003, 0x1ffa, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x2, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, 0x0, 0x0) 15.709620968s ago: executing program 4 (id=587): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000030c0)=""/4039, 0xfc7}, {&(0x7f0000000140)=""/91, 0x5b}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f00000000c0)=""/101, 0x65}, {&(0x7f0000000200)=""/191, 0xbf}, {&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000500)=""/23, 0x17}], 0x8}, 0x22) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99}, 0x0) 13.017582598s ago: executing program 1 (id=595): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000fcffffff000000000900000085000000360000001801000020646c2500000000003020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000017000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0xd48a, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000380)=0xfffffffe, 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000180)={{r6}, 0x3, 0x1000, 0x9}) 11.773578889s ago: executing program 1 (id=596): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000100000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014006a00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000200), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) write(r1, 0x0, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 10.543991986s ago: executing program 1 (id=598): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 10.331359734s ago: executing program 4 (id=599): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f0300000000ff00040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 9.990672424s ago: executing program 4 (id=600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x15, 0x2, 0x8be}, {0x10}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xa}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 9.686673528s ago: executing program 4 (id=602): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdir(0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff}) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r6 = memfd_create(&(0x7f0000000e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) io_getevents(r0, 0x2e5, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44050) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) 5.580952204s ago: executing program 4 (id=610): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002e00101408780250001000000000109022700010100c03209040000"], 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x2, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0xaa, 0xc9, 0xb2, 0x8, 0x1660, 0x932, 0x7332, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x7, 0x10, 0x81, "", [{{0x9, 0x4, 0xff, 0x0, 0x0, 0x1d, 0xd4, 0xf8, 0xfc}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 4.773369287s ago: executing program 2 (id=612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="08000000000200009ad67200040000000ca63fd51f0000d6e1d5323fd61cd9d8ef851469517a4cb8a6355c1d42ede45ee963f68c3590e991c2ebe5289857db70294281ebf37b016daffb3663fa0dab5c8021d96a0f7c", @ANYBLOB='\x00'/18, @ANYRES32], 0x50) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x1}, {r2, 0x1008}, {r1, 0x84}, {r3, 0x4000}, {r0, 0x4400}, {r2, 0x2192}, {r3, 0x120}], 0x7, &(0x7f00000004c0)={0x77359400}, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0xfffffff2, @name="82bf06255c32514ef266824307509e39f5e892343710c37e48a72f12e53542fb"}) 4.667341546s ago: executing program 3 (id=613): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x33581ccc, 0xb, 0x200000, 0x3, 0x5, 0xa}) 4.440374726s ago: executing program 3 (id=614): socket$kcm(0xa, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42340, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230006) close(r1) 4.267933016s ago: executing program 5 (id=615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40800, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x0, 0x3}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 4.179079242s ago: executing program 3 (id=616): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000fcffffff000000000900000085000000360000001801000020646c2500000000003020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000017000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1881c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0xd48a, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000380)=0xfffffffe, 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000180)={{r6}, 0x3, 0x1000, 0x9}) 3.973464438s ago: executing program 5 (id=617): setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000100), 0x12) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000805000001"], 0x88) 3.202647554s ago: executing program 2 (id=618): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) shutdown(r4, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 3.092377854s ago: executing program 3 (id=619): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdir(0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x22000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff}) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r6 = memfd_create(&(0x7f0000000e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x15, 0x2, 0x8be}, {0x10}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xa}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.506129934s ago: executing program 2 (id=623): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120) 1.30398968s ago: executing program 2 (id=624): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x33581ccc, 0xb, 0x200000, 0x3, 0x5, 0xa}) 1.239764471s ago: executing program 5 (id=625): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x10000839, r0, 0x0) readv(r1, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 1.106640005s ago: executing program 2 (id=626): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003"]}]}) 740.37208ms ago: executing program 1 (id=627): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) stat(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004900)={0x20, 0xd, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x8000) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./sys\x00', &(0x7f0000000280), 0xc000, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='- 0 -', 0x5) 291.543439ms ago: executing program 4 (id=628): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="08000000000200009ad67200040000000ca63fd51f0000d6e1d5323fd61cd9d8ef851469517a4cb8a6355c1d42ede45ee963f68c3590e991c2ebe5289857db70294281ebf37b016daffb3663fa0dab5c8021d96a0f7c", @ANYBLOB='\x00'/18, @ANYRES32], 0x50) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x1}, {r2, 0x1008}, {r1, 0x84}, {r3, 0x4000}, {r0, 0x4400}, {r2, 0x2192}, {r3, 0x120}], 0x7, &(0x7f00000004c0)={0x77359400}, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0xfffffff2, @name="82bf06255c32514ef266824307509e39f5e892343710c37e48a72f12e53542fb"}) 279.647881ms ago: executing program 3 (id=629): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090402000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000140)="607500c6") r1 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000000c0)={0x20, 0x18, 0x1, "9f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000140)={0x0, 0x9, 0x2, "b030"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x5, "b9fa0471f5"}, 0x0, 0x0}) 108.468602ms ago: executing program 5 (id=630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="002000000102"}) 0s ago: executing program 1 (id=631): write$hidraw(0xffffffffffffffff, &(0x7f0000000400)="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", 0x112) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003b8000000b803"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x60, 0x26, 0xf2, 0x20, 0x2040, 0x2011, 0x3a6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x10, 0x60, 0x5, "", [{{0x9, 0x4, 0x0, 0x24, 0x1, 0x8d, 0x24, 0x80, 0x3, [], [{{0x9, 0x5, 0x8, 0x3, 0x1a7, 0x7, 0x6, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000f00)={0x14, 0x0, 0x0}, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="401505000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x84100) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, &(0x7f0000001380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a400090582"], 0x0) r2 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c00712"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000000)='8', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110012b5132402404009d2753010203010902120001"], 0x0) kernel console output (not intermixed with test programs): on device bond0 [ 85.287291][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.297375][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.358983][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.371545][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.380991][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.388213][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.398463][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.408285][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.417353][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.426621][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.436464][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.456937][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.475341][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.482510][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.511758][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.524421][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.543459][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.572733][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.581879][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.592173][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.602416][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.613264][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.623111][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.661144][ T4274] device veth0_vlan entered promiscuous mode [ 85.669590][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.682487][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.691766][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.700960][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.710328][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.717516][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.726109][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.735464][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.743985][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.751147][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.759678][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.770085][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.779659][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.790564][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.799595][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.808334][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.818069][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.826515][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.834418][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.855799][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.928298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.937175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.945218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.954260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.963472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.976169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.986126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.998850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.012280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.028474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.040113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.056182][ T4274] device veth1_vlan entered promiscuous mode [ 86.069068][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.099000][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.150682][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.159975][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.177195][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.190734][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.210450][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.246476][ T4274] device veth0_macvtap entered promiscuous mode [ 86.277598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.295515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.329189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.354152][ T4274] device veth1_macvtap entered promiscuous mode [ 86.422354][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.445544][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.486283][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.525605][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.547085][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.580702][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.606892][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.622287][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.641278][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.656943][ T14] cfg80211: failed to load regulatory.db [ 86.691128][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.708588][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.739641][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.748731][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.757890][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.770509][ T4284] device veth0_vlan entered promiscuous mode [ 86.781829][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.796900][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.875321][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.906824][ T4284] device veth1_vlan entered promiscuous mode [ 86.914838][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.923134][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.946526][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.975296][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 86.981386][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 87.056275][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 87.064859][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 87.068140][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.070929][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 87.085551][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.094468][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.154117][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.177535][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.203888][ T4283] device veth0_vlan entered promiscuous mode [ 87.237745][ T4284] device veth0_macvtap entered promiscuous mode [ 87.257303][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.276348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.295071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.318437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.328999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.369608][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.388731][ T4284] device veth1_macvtap entered promiscuous mode [ 87.406266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.425325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.435999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.465355][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.473400][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.509754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.532831][ T4283] device veth1_vlan entered promiscuous mode [ 87.625596][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.645203][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.666374][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.685442][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.697141][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.726667][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.740376][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.759105][ T4273] device veth0_vlan entered promiscuous mode [ 87.768823][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.776093][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.776134][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.797631][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.805971][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.815506][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.824468][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.854196][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.869724][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.881091][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.897171][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.909613][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.919134][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.928505][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.937896][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.947227][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.967577][ T4284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.976752][ T4284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.986227][ T4284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.995279][ T4284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.008746][ T4283] device veth0_macvtap entered promiscuous mode [ 88.021928][ T4283] device veth1_macvtap entered promiscuous mode [ 88.051747][ T4282] device veth0_vlan entered promiscuous mode [ 88.061602][ T4273] device veth1_vlan entered promiscuous mode [ 88.076956][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.090074][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.099235][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.108741][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.118040][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.154437][ T4282] device veth1_vlan entered promiscuous mode [ 88.172221][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.191912][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.200426][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.216921][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.278447][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.293275][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.304350][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.316206][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.330418][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.359731][ T4363] ======================================================= [ 88.359731][ T4363] WARNING: The mand mount option has been deprecated and [ 88.359731][ T4363] and is ignored by this kernel. Remove the mand [ 88.359731][ T4363] option from the mount to silence this warning. [ 88.359731][ T4363] ======================================================= [ 88.406513][ T4363] jffs2: notice: (4363) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 88.436030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.459177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.502091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.534125][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.556914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.609120][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.629188][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.640019][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.651909][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.670723][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.688627][ T4273] device veth0_macvtap entered promiscuous mode [ 88.706340][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.721360][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.743689][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.818649][ T4273] device veth1_macvtap entered promiscuous mode [ 88.861969][ T4283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.879920][ T4283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.893898][ T4283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.904023][ T4283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.964010][ T4282] device veth0_macvtap entered promiscuous mode [ 88.982504][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.003409][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.022496][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.031786][ T4282] device veth1_macvtap entered promiscuous mode [ 89.045981][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.056566][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 89.064414][ T4293] Bluetooth: hci1: command 0x0419 tx timeout [ 89.085062][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.103359][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.115604][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.134745][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 89.137358][ T4293] Bluetooth: hci2: command 0x0419 tx timeout [ 89.140828][ T4294] Bluetooth: hci0: command 0x0419 tx timeout [ 89.205203][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.226671][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.242009][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.253498][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.269826][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.280478][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.304633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 89.314631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 89.324625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 89.334634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 89.354647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 89.364623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 89.374618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 89.384619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 89.394611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 89.404609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 91.117234][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.143961][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.169608][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.191815][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.208836][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.221907][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.241523][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.251715][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.264689][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.276480][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.287280][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.305631][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.336486][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.344411][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.354840][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.378304][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.400748][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.410003][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.424284][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.439728][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.459110][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.469636][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.483687][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.499169][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.510385][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.525853][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.542888][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.558521][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.587889][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.602924][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.639503][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.653871][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.670226][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.682503][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.694499][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.705911][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.715857][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.728248][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.740415][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.768235][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.796055][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.857675][ T4282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.857735][ T4282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.857761][ T4282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.857786][ T4282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.917297][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.917318][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.917586][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.116582][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.128218][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.136474][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.165252][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.204931][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.216490][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.269495][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.305090][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.331883][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.353446][ T4377] fuse: Bad value for 'fd' [ 92.369242][ T4377] process 'syz.1.8' launched './file0' with NULL argv: empty string added [ 92.396196][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.416427][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.509231][ T4379] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.640475][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.758589][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.881256][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.018057][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.928831][ T4388] loop7: detected capacity change from 0 to 16384 [ 94.837955][ T27] audit: type=1326 audit(1791002391.562:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.0.1" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f184ab9e159 code=0x0 [ 94.862531][ T4390] loop7: detected capacity change from 16384 to 0 [ 95.309182][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 95.327265][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 96.443228][ T4394] syz.3.4 (4394) used greatest stack depth: 20096 bytes left [ 97.663113][ T4421] Illegal XDP return value 4291555328 on prog (id 2) dev syz_tun, expect packet loss! [ 101.084777][ T26] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 101.303662][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 101.355323][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 101.427489][ T26] usb 1-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 101.470469][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.569541][ T26] pegasus: probe of 1-1:1.0 failed with error -121 [ 102.862603][ T26] usb 1-1: USB disconnect, device number 2 [ 103.574289][ T14] libceph: connect (1)[c::]:6789 error -101 [ 103.599235][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 103.618401][ T4472] ceph: No mds server is up or the cluster is laggy [ 103.625675][ T4475] overlayfs: missing 'lowerdir' [ 104.383246][ T4478] loop3: detected capacity change from 0 to 256 [ 104.694780][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.886070][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 104.899828][ T14] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 104.931228][ T14] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 104.977114][ T14] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 105.024350][ T14] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 105.051316][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.090904][ T14] usb 3-1: Product: syz [ 105.102000][ T14] usb 3-1: Manufacturer: syz [ 105.118545][ T14] usb 3-1: SerialNumber: syz [ 105.281463][ T14] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 105.300797][ T14] imon 3-1:155.0: unable to initialize intf0, err -19 [ 105.315949][ T14] imon:imon_probe: failed to initialize context! [ 105.326014][ T14] imon 3-1:155.0: unable to register, err -19 [ 106.530325][ T4518] loop1: detected capacity change from 0 to 256 [ 106.555736][ T4518] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.639118][ T27] audit: type=1800 audit(1791002403.362:3): pid=4518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.43" name="file1" dev="loop1" ino=1048596 res=0 errno=0 [ 107.413201][ T14] usb 3-1: USB disconnect, device number 2 [ 109.429270][ T4538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 109.496627][ T4538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 109.524876][ T4538] Zero length message leads to an empty skb [ 109.570444][ T4553] netlink: 68 bytes leftover after parsing attributes in process `syz.4.57'. [ 110.511579][ T4557] UBIFS error (pid: 4557): cannot open "ubi0:testvol", error -19 [ 110.733997][ T4561] loop1: detected capacity change from 0 to 256 [ 110.873096][ T4561] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.893762][ T27] audit: type=1800 audit(1791002408.612:4): pid=4561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.58" name="file1" dev="loop1" ino=1048597 res=0 errno=0 [ 117.091721][ T4612] overlayfs: missing 'lowerdir' [ 117.109546][ T4606] ceph: No mds server is up or the cluster is laggy [ 117.117852][ T14] libceph: connect (1)[c::]:6789 error -101 [ 117.123936][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 117.274670][ T4323] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.454733][ T4323] usb 4-1: device descriptor read/64, error -71 [ 118.514656][ T4323] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.044626][ T4323] usb 4-1: device descriptor read/64, error -71 [ 120.164824][ T4323] usb usb4-port1: attempt power cycle [ 120.334794][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.575998][ T4323] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 120.615363][ T4323] usb 4-1: device descriptor read/8, error -71 [ 120.881742][ T14] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.903198][ T14] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 120.937643][ T14] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.966004][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.189064][ T14] usb 5-1: invalid MIDI out EP 0 [ 121.499680][ T14] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 121.545972][ T14] usb 5-1: USB disconnect, device number 2 [ 121.629426][ T4644] loop2: detected capacity change from 0 to 256 [ 121.693269][ T4644] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.782645][ T4643] udevd[4643]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.829878][ T27] audit: type=1800 audit(1791002418.552:5): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.79" name="file1" dev="loop2" ino=1048598 res=0 errno=0 [ 124.218048][ T14] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 124.405838][ T4661] loop3: detected capacity change from 0 to 4096 [ 124.426083][ T4661] ntfs3: Unknown parameter 'windows_names' [ 124.447695][ T14] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 124.498466][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.514913][ T14] usb 5-1: Product: syz [ 124.520579][ T14] usb 5-1: Manufacturer: syz [ 124.530041][ T14] usb 5-1: SerialNumber: syz [ 125.929246][ T14] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 126.258500][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 127.097121][ T128] usb 5-1: USB disconnect, device number 3 [ 127.767157][ T128] usblp0: removed [ 128.264722][ T4328] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.474961][ T4328] usb 3-1: Using ep0 maxpacket: 16 [ 128.482528][ T4328] usb 3-1: config 0 interface 0 has no altsetting 0 [ 128.516898][ T4699] loop3: detected capacity change from 0 to 512 [ 128.628324][ T4699] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.072792][ T4699] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 129.089507][ T4699] Quota error (device loop3): write_blk: dquota write failed [ 129.097452][ T4699] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 129.106987][ T4699] Quota error (device loop3): write_blk: dquota write failed [ 129.115028][ T4699] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 129.125690][ T4699] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.95: Failed to acquire dquot type 1 [ 129.153029][ T4699] EXT4-fs (loop3): 1 truncate cleaned up [ 129.158951][ T4699] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 129.234848][ T4328] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 129.267483][ T4328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.305282][ T4328] usb 3-1: config 0 descriptor?? [ 129.430301][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 129.616040][ T4713] hub 8-0:1.0: USB hub found [ 129.623057][ T4713] hub 8-0:1.0: 1 port detected [ 130.409773][ T4328] usbhid 3-1:0.0: can't add hid device: -71 [ 130.434720][ T4328] usbhid: probe of 3-1:0.0 failed with error -71 [ 130.454899][ T4328] usb 3-1: USB disconnect, device number 3 [ 130.652322][ T3600] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 130.773573][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 131.121231][ T3600] usb 1-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0x0, skipping [ 131.199699][ T3600] usb 1-1: config 0 interface 0 has no altsetting 0 [ 131.309639][ T3600] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 131.335448][ T4718] sctp: failed to load transform for md5: -2 [ 131.412128][ T3600] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 131.449849][ T3600] usb 1-1: Product: syz [ 131.480404][ T3600] usb 1-1: Manufacturer: syz [ 131.490790][ T4733] loop1: detected capacity change from 0 to 512 [ 131.514654][ T3600] usb 1-1: SerialNumber: syz [ 131.530636][ T4733] EXT4-fs (loop1): Test dummy encryption mode enabled [ 131.563008][ T3600] usb 1-1: config 0 descriptor?? [ 131.746369][ T4733] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 131.807539][ T3600] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 131.829335][ T4733] jffs2: notice: (4733) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.868852][ T4445] udevd[4445]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.891400][ T3600] usb 1-1: USB disconnect, device number 3 [ 132.738919][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.745921][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.858473][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 134.754624][ T26] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 134.951760][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.986067][ T4323] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 135.006995][ T4772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 135.034972][ T26] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 135.044959][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.053128][ T26] usb 3-1: Product: syz [ 135.102555][ T26] usb 3-1: Manufacturer: syz [ 135.125633][ T26] usb 3-1: SerialNumber: syz [ 135.185195][ T4323] usb 5-1: Using ep0 maxpacket: 8 [ 135.218962][ T4323] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.329650][ T4323] usb 5-1: config 0 has no interface number 0 [ 135.342390][ T4323] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.355165][ T4323] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.375659][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.482981][ T4323] usb 5-1: config 0 descriptor?? [ 135.497253][ T26] snd-usb-caiaq 3-1:1.0: can't set alt interface. [ 135.544458][ T26] usb 3-1: unable to init card! (ret=-5) [ 135.628353][ T26] snd-usb-caiaq: probe of 3-1:1.0 failed with error -5 [ 135.667379][ T4323] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 135.677697][ T4771] 9pnet_fd: Insufficient options for proto=fd [ 135.704866][ T26] usb 3-1: USB disconnect, device number 4 [ 137.596979][ T4785] device syzkaller0 entered promiscuous mode [ 139.322021][ T14] usb 5-1: USB disconnect, device number 4 [ 141.811934][ T4810] fuse: Unknown parameter 'fd0x0000000000000004' [ 144.253671][ T4832] loop3: detected capacity change from 0 to 512 [ 144.444858][ T4832] EXT4-fs (loop3): Test dummy encryption mode enabled [ 144.993980][ T4832] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 145.256720][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 146.923345][ T4864] device syzkaller0 entered promiscuous mode [ 148.249000][ T4874] CIFS: Attempting to mount \\127.0.0.1\share [ 148.404076][ T4879] CIFS: VFS: Invalid response size 0 for command 0 [ 148.690712][ T4863] loop4: detected capacity change from 0 to 32768 [ 148.793761][ T4863] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 148.816918][ T4863] XFS (loop4): Mounting V5 Filesystem [ 148.918850][ T4863] XFS (loop4): Ending clean mount [ 148.926591][ T4874] CIFS: VFS: cifs_mount failed w/return code = -5 [ 148.971695][ T4863] XFS (loop4): Quotacheck needed: Please wait. [ 149.187800][ T4863] XFS (loop4): Quotacheck: Done. [ 150.161720][ T4906] loop3: detected capacity change from 0 to 512 [ 150.245006][ T4906] EXT4-fs (loop3): Test dummy encryption mode enabled [ 151.837053][ T4906] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 151.890701][ T4282] XFS (loop4): Unmounting Filesystem [ 152.145926][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 152.299027][ T4924] jffs2: notice: (4924) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 152.805521][ T4926] blktrace: Concurrent blktraces are not allowed on loop0 [ 154.834680][ T4320] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.922509][ T4293] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 155.061207][ T4320] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 155.196284][ T4320] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 155.326578][ T4320] usb 5-1: config 1 interface 0 has no altsetting 0 [ 155.349109][ T4320] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 155.393697][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.427745][ T4320] usb 5-1: Product: syz [ 155.431993][ T4320] usb 5-1: Manufacturer: syz [ 155.466814][ T4320] usb 5-1: SerialNumber: syz [ 157.959180][ T4960] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 157.972330][ T4960] qnx6: wrong signature (magic) in superblock #1. [ 157.978858][ T4960] qnx6: unable to read the first superblock [ 158.694833][ T4958] blktrace: Concurrent blktraces are not allowed on loop0 [ 159.114954][ T4320] usbhid 5-1:1.0: can't add hid device: -71 [ 159.121016][ T4320] usbhid: probe of 5-1:1.0 failed with error -71 [ 159.189848][ T4320] usb 5-1: USB disconnect, device number 5 [ 159.343779][ T4972] loop0: detected capacity change from 0 to 256 [ 159.566366][ T4975] FAULT_INJECTION: forcing a failure. [ 159.566366][ T4975] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 159.612619][ T4975] CPU: 0 PID: 4975 Comm: syz.3.172 Not tainted syzkaller #0 [ 159.620016][ T4975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 159.630166][ T4975] Call Trace: [ 159.633501][ T4975] [ 159.636485][ T4975] dump_stack_lvl+0x188/0x24e [ 159.641248][ T4975] ? show_regs_print_info+0x12/0x12 [ 159.646525][ T4975] ? load_image+0x410/0x410 [ 159.651098][ T4975] ? __might_fault+0xa6/0x120 [ 159.655878][ T4975] should_fail_ex+0x390/0x4c0 [ 159.660655][ T4975] copyin+0x1b/0x120 [ 159.664604][ T4975] _copy_from_iter+0x559/0x1130 [ 159.669530][ T4975] ? copyout_mc+0x110/0x110 [ 159.674101][ T4975] ? __virt_addr_valid+0x188/0x540 [ 159.679305][ T4975] ? __virt_addr_valid+0x188/0x540 [ 159.679347][ T4975] ? __virt_addr_valid+0x467/0x540 [ 159.679379][ T4975] ? __phys_addr_symbol+0x2b/0x70 [ 159.679408][ T4975] ? __check_object_size+0x4f6/0xa70 [ 159.679435][ T4975] netlink_sendmsg+0x755/0xbd0 [ 159.704861][ T4975] ? netlink_getsockopt+0x550/0x550 [ 159.710127][ T4975] ? apparmor_socket_sendmsg+0x8a/0x330 [ 159.715742][ T4975] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 159.721092][ T4975] ? security_socket_sendmsg+0x7c/0xa0 [ 159.726999][ T4975] ? netlink_getsockopt+0x550/0x550 [ 159.732237][ T4975] ____sys_sendmsg+0x5ed/0x9a0 [ 159.737050][ T4975] ? __sys_sendmsg_sock+0x30/0x30 [ 159.742113][ T4975] ? __import_iovec+0x306/0x510 [ 159.747070][ T4975] ? import_iovec+0x6f/0xa0 [ 159.751617][ T4975] ___sys_sendmsg+0x2a2/0x360 [ 159.756335][ T4975] ? __sys_sendmsg+0x2a0/0x2a0 [ 159.761162][ T4975] __se_sys_sendmsg+0x1c3/0x2b0 [ 159.766048][ T4975] ? __x64_sys_sendmsg+0x80/0x80 [ 159.771028][ T4975] ? lockdep_hardirqs_on+0x94/0x140 [ 159.776260][ T4975] do_syscall_64+0x4c/0xa0 [ 159.780702][ T4975] ? clear_bhb_loop+0x60/0xb0 [ 159.785405][ T4975] ? clear_bhb_loop+0x60/0xb0 [ 159.790113][ T4975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.796061][ T4975] RIP: 0033:0x7f85a659e159 [ 159.800508][ T4975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.820150][ T4975] RSP: 002b:00007f85a7504028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.828769][ T4975] RAX: ffffffffffffffda RBX: 00007f85a6825fa0 RCX: 00007f85a659e159 [ 159.836768][ T4975] RDX: 0000000000008000 RSI: 0000200000000580 RDI: 0000000000000004 [ 159.844773][ T4975] RBP: 00007f85a663506b R08: 0000000000000000 R09: 0000000000000000 [ 159.852799][ T4975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.860796][ T4975] R13: 00007f85a6826038 R14: 00007f85a6825fa0 R15: 00007ffc948f6ca8 [ 159.868839][ T4975] [ 163.844966][ T5000] blktrace: Concurrent blktraces are not allowed on loop0 [ 164.477487][ T5006] loop3: detected capacity change from 0 to 4096 [ 164.530813][ T5012] loop4: detected capacity change from 0 to 512 [ 164.605877][ T5012] EXT4-fs: Ignoring removed nobh option [ 164.641697][ T5012] EXT4-fs (loop4): Test dummy encryption mode enabled [ 164.662469][ T5006] ntfs3: loop3: failed to convert "0080" to cp864 [ 164.673721][ T5012] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 164.707873][ T5012] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.827524][ T5012] EXT4-fs (loop4): 1 truncate cleaned up [ 164.884949][ T5012] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 164.953612][ T5012] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 165.131122][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 165.279985][ T5010] loop1: detected capacity change from 0 to 32768 [ 165.348849][ T5010] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.168 (5010) [ 165.543977][ T5010] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.789908][ T5010] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 165.971627][ T5010] BTRFS info (device loop1): use zlib compression, level 3 [ 166.138027][ T5010] BTRFS info (device loop1): turning on sync discard [ 166.210273][ T5010] BTRFS info (device loop1): using free space tree [ 166.385774][ T5010] BTRFS info (device loop1): enabling ssd optimizations [ 166.557300][ T27] audit: type=1800 audit(1791002463.282:6): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.168" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 166.836258][ T4284] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.450870][ T26] libceph: connect (1)[c::]:6789 error -101 [ 170.458177][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 170.482252][ T5080] ceph: No mds server is up or the cluster is laggy [ 170.494185][ T5085] overlayfs: missing 'lowerdir' [ 171.199944][ T5090] loop2: detected capacity change from 0 to 1024 [ 171.243331][ T5090] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.206881][ T5090] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.198: lblock 2 mapped to illegal pblock 2 (length 1) [ 172.237503][ T5090] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 172.254908][ T5090] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.198: lblock 0 mapped to illegal pblock 48 (length 1) [ 172.321037][ T5090] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 172.375568][ T5090] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.198: Failed to acquire dquot type 0 [ 172.405240][ T5090] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 172.427188][ T5090] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.198: mark_inode_dirty error [ 172.462175][ T5090] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 172.485853][ T5090] EXT4-fs (loop2): 1 orphan inode deleted [ 172.491716][ T5090] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 172.528513][ T4796] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 172.579352][ T4796] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 172.729928][ T4796] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 0 [ 173.631438][ T5104] loop3: detected capacity change from 0 to 32768 [ 175.248337][ T5104] XFS (loop3): Mounting V5 Filesystem [ 175.623090][ T5104] XFS (loop3): log mount failed [ 175.666412][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 175.680738][ T4383] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 175.874684][ T4383] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 175.883267][ T4383] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:9: Failed to release dquot type 0 [ 175.977121][ T4274] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 176.025941][ T4274] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 176.063991][ T4274] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 177.299871][ T7] libceph: connect (1)[c::]:6789 error -101 [ 177.327221][ T5151] ceph: No mds server is up or the cluster is laggy [ 177.334287][ T5155] overlayfs: missing 'lowerdir' [ 177.350665][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 181.584808][ T5071] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 182.686080][ T5071] usb 5-1: no configurations [ 182.690886][ T5071] usb 5-1: can't read configurations, error -22 [ 183.027485][ T5191] loop3: detected capacity change from 0 to 512 [ 183.164649][ T5191] EXT4-fs (loop3): Test dummy encryption mode enabled [ 183.640932][ T5191] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 183.877122][ T5191] jffs2: notice: (5191) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 183.975593][ T5191] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 184.111920][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 184.269931][ T5207] loop3: detected capacity change from 0 to 512 [ 184.309366][ T5207] EXT4-fs (loop3): Test dummy encryption mode enabled [ 184.353849][ T5207] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 184.386617][ T5207] jffs2: notice: (5207) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 184.421039][ T5207] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 184.481789][ T5187] loop1: detected capacity change from 0 to 32768 [ 184.873323][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 185.384073][ T27] audit: type=1800 audit(1791002482.102:7): pid=5187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.224" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 185.664752][ T27] audit: type=1800 audit(1791002482.382:8): pid=5220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.224" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 187.092411][ T5229] blktrace: Concurrent blktraces are not allowed on loop0 [ 187.782435][ T5235] loop2: detected capacity change from 0 to 1024 [ 187.819763][ T5235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.895944][ T5235] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.239: lblock 2 mapped to illegal pblock 2 (length 1) [ 187.968915][ T5235] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 188.053761][ T5235] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.239: lblock 0 mapped to illegal pblock 48 (length 1) [ 188.113723][ T5235] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 188.164603][ T5235] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.239: Failed to acquire dquot type 0 [ 188.220475][ T5235] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 188.269237][ T5235] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.239: mark_inode_dirty error [ 188.303724][ T5241] loop1: detected capacity change from 0 to 512 [ 188.329152][ T5235] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 188.358607][ T5235] EXT4-fs (loop2): 1 orphan inode deleted [ 188.369225][ T5241] EXT4-fs (loop1): Test dummy encryption mode enabled [ 188.378375][ T4796] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 188.398186][ T5235] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 188.423016][ T4796] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 188.448377][ T4796] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 0 [ 188.471361][ T5241] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 188.535580][ T5241] jffs2: notice: (5241) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 188.573251][ T5245] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 188.742479][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 188.754877][ T4414] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 188.776229][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 188.811307][ T4414] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 188.848326][ T4414] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:13: Failed to release dquot type 0 [ 188.906325][ T4274] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 188.932611][ T4274] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 188.968764][ T4274] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 189.000988][ T5250] loop1: detected capacity change from 0 to 1024 [ 189.210823][ T5250] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.815466][ T5250] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.243: lblock 2 mapped to illegal pblock 2 (length 1) [ 190.040494][ T5250] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 190.192690][ T5250] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.243: lblock 0 mapped to illegal pblock 48 (length 1) [ 191.310517][ T5250] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 191.838826][ T5250] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.243: Failed to acquire dquot type 0 [ 191.888349][ T5266] loop2: detected capacity change from 0 to 4096 [ 192.017333][ T5250] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 192.430552][ T5250] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.243: mark_inode_dirty error [ 192.443166][ T5250] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 192.464405][ T5250] EXT4-fs (loop1): 1 orphan inode deleted [ 192.471050][ T5250] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 192.480638][ T57] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 192.530529][ T57] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 192.548413][ T5266] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 192.575651][ T57] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 0 [ 192.622025][ T5266] ntfs3: loop2: Failed to load $Extend. [ 192.655755][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 192.661685][ T4284] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 192.725377][ T4284] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 192.775820][ T4284] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 192.992816][ T5285] loop2: detected capacity change from 0 to 512 [ 193.033751][ T5285] EXT4-fs (loop2): Test dummy encryption mode enabled [ 193.074773][ T5071] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 193.103352][ T5285] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 193.275857][ T5071] usb 1-1: not running at top speed; connect to a high speed hub [ 193.285540][ T5071] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.297187][ T5071] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 193.307477][ T5071] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 193.316999][ T5071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.344767][ T5071] usb 1-1: Found UVC 1.00 device (046d:0825) [ 193.353316][ T5071] usb 1-1: Failed to create links for entity 1 [ 193.360046][ T5071] usb 1-1: Failed to register entities (-22). [ 194.664233][ T5071] usb 1-1: No streaming interface found for terminal 2. [ 194.684762][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.691123][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.834354][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 195.195466][ T5265] usb 1-1: USB disconnect, device number 4 [ 196.799806][ T5071] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 196.827220][ T5308] loop0: detected capacity change from 0 to 1024 [ 196.848729][ T5308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.922954][ T5308] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.261: lblock 2 mapped to illegal pblock 2 (length 1) [ 196.997362][ T5071] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.029736][ T5308] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 197.042776][ T5071] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.084709][ T5308] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 48: comm syz.0.261: lblock 0 mapped to illegal pblock 48 (length 1) [ 197.121809][ T5308] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 197.124375][ T5071] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.150051][ T5308] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.261: Failed to acquire dquot type 0 [ 197.171723][ T5308] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 197.192740][ T5071] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.212990][ T5071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.231657][ T5308] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.261: mark_inode_dirty error [ 197.262582][ T5071] usb 3-1: config 0 descriptor?? [ 197.268086][ T5308] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 197.284776][ T5308] EXT4-fs (loop0): 1 orphan inode deleted [ 197.290726][ T5308] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 197.333116][ T4796] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 197.369522][ T4796] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 197.399697][ T4796] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 0 [ 197.458763][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 198.896559][ T4283] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 198.975932][ T4283] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 198.994879][ T4283] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 199.045076][ T5071] usbhid 3-1:0.0: can't add hid device: -71 [ 199.051199][ T5071] usbhid: probe of 3-1:0.0 failed with error -71 [ 199.083043][ T5071] usb 3-1: USB disconnect, device number 5 [ 199.252434][ T5321] loop1: detected capacity change from 0 to 1024 [ 199.317542][ T5321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.430017][ T5321] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.256: lblock 2 mapped to illegal pblock 2 (length 1) [ 199.481133][ T5326] loop0: detected capacity change from 0 to 512 [ 199.528511][ T5321] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 199.537304][ T5321] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.256: lblock 0 mapped to illegal pblock 48 (length 1) [ 199.551967][ T5321] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 199.553759][ T5326] EXT4-fs (loop0): Test dummy encryption mode enabled [ 199.560886][ T5321] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.256: Failed to acquire dquot type 0 [ 199.592693][ T5321] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 199.615414][ T5321] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.256: mark_inode_dirty error [ 199.635236][ T5321] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 199.655430][ T5321] EXT4-fs (loop1): 1 orphan inode deleted [ 199.665297][ T5326] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 199.675799][ T5321] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 199.675811][ T4412] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 199.766330][ T4412] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 199.778964][ T4412] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:12: Failed to release dquot type 0 [ 199.866875][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 199.872897][ T57] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 199.902964][ T57] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 199.931818][ T57] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 0 [ 199.982522][ T4284] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 200.022730][ T4284] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 200.056531][ T4284] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 200.767218][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 200.952154][ T5349] loop2: detected capacity change from 0 to 512 [ 200.979728][ T5349] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 201.191842][ T5347] syz.3.271 uses obsolete (PF_INET,SOCK_PACKET) [ 201.970116][ T5349] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 201.986296][ T5349] Quota error (device loop2): write_blk: dquota write failed [ 201.994268][ T5349] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 202.003656][ T5349] Quota error (device loop2): write_blk: dquota write failed [ 202.011290][ T5349] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.270: Failed to acquire dquot type 1 [ 202.779245][ T5349] EXT4-fs (loop2): 1 truncate cleaned up [ 202.785185][ T5349] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 203.194226][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 203.284105][ T5366] loop4: detected capacity change from 0 to 1024 [ 203.350517][ T5366] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.471801][ T5366] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.264: lblock 2 mapped to illegal pblock 2 (length 1) [ 203.572526][ T5366] __quota_error: 1 callbacks suppressed [ 203.572545][ T5366] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 203.633253][ T5366] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.264: lblock 0 mapped to illegal pblock 48 (length 1) [ 203.712775][ T5366] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 203.714052][ T5375] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 203.764730][ T5366] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.264: Failed to acquire dquot type 0 [ 203.819054][ T5366] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 203.828779][ T5375] netlink: 224 bytes leftover after parsing attributes in process `syz.2.275'. [ 203.864690][ T5366] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.264: mark_inode_dirty error [ 203.894942][ T5366] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 203.943901][ T5366] EXT4-fs (loop4): 1 orphan inode deleted [ 203.970086][ T4459] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 203.976571][ T5366] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 204.104220][ T5383] overlayfs: failed to resolve './bus': -2 [ 204.237590][ T4459] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 205.481705][ T4459] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:14: Failed to release dquot type 0 [ 205.592026][ T5389] overlayfs: missing 'lowerdir' [ 205.617468][ T5386] ceph: No mds server is up or the cluster is laggy [ 205.631190][ T4326] libceph: connect (1)[c::]:6789 error -101 [ 205.647405][ T4326] libceph: mon0 (1)[c::]:6789 connect error [ 205.797139][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 205.803058][ T4282] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 205.844674][ T4282] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 205.862609][ T4282] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 206.494705][ T4294] Bluetooth: hci1: command 0x0406 tx timeout [ 206.501003][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 206.508064][ T4293] Bluetooth: hci2: command 0x0406 tx timeout [ 206.508422][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 206.514218][ T4293] Bluetooth: hci3: command 0x0406 tx timeout [ 207.192995][ T5410] loop3: detected capacity change from 0 to 512 [ 207.301035][ T5410] EXT4-fs (loop3): Test dummy encryption mode enabled [ 207.828814][ T5410] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 208.356601][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 208.377199][ T5431] loop1: detected capacity change from 0 to 256 [ 208.398415][ T5431] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.463484][ T27] audit: type=1800 audit(1791002505.182:9): pid=5431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.287" name="file1" dev="loop1" ino=1048607 res=0 errno=0 [ 208.907270][ T5447] loop3: detected capacity change from 0 to 256 [ 208.932219][ T5449] loop0: detected capacity change from 0 to 1024 [ 209.048489][ T5449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.919582][ T5449] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 2: comm syz.0.292: lblock 2 mapped to illegal pblock 2 (length 1) [ 209.940030][ T5449] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 209.961079][ T5449] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 48: comm syz.0.292: lblock 0 mapped to illegal pblock 48 (length 1) [ 210.045160][ T5449] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 210.054018][ T5449] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.292: Failed to acquire dquot type 0 [ 210.115707][ T128] libceph: connect (1)[c::]:6789 error -101 [ 210.132628][ T128] libceph: mon0 (1)[c::]:6789 connect error [ 210.146717][ T5457] ceph: No mds server is up or the cluster is laggy [ 210.160067][ T5462] overlayfs: missing 'lowerdir' [ 210.274807][ T5449] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 210.303733][ T5449] EXT4-fs error (device loop0): ext4_evict_inode:281: inode #11: comm syz.0.292: mark_inode_dirty error [ 210.415171][ T5449] EXT4-fs warning (device loop0): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 210.474907][ T5449] EXT4-fs (loop0): 1 orphan inode deleted [ 210.490929][ T5449] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 210.512404][ T60] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 210.574729][ T60] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 210.606168][ T60] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 210.662218][ T5466] loop4: detected capacity change from 0 to 4096 [ 210.740428][ T5466] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 210.822783][ T5466] ntfs3: loop4: Failed to load $Extend. [ 210.999949][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 211.027455][ T4283] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 212.124575][ T4283] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 212.164791][ T4283] EXT4-fs error (device loop0): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 213.744429][ T5511] loop2: detected capacity change from 0 to 1024 [ 213.833028][ T5511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.009821][ T5511] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.308: lblock 2 mapped to illegal pblock 2 (length 1) [ 214.077870][ T5511] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 214.158798][ T5511] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.308: lblock 0 mapped to illegal pblock 48 (length 1) [ 214.237939][ T5511] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 214.275090][ T5504] ftl_cs: FTL header not found. [ 214.339651][ T5511] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.308: Failed to acquire dquot type 0 [ 214.387267][ T5504] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [6] [ 214.455977][ T5511] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 214.497456][ T5511] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.308: mark_inode_dirty error [ 214.579299][ T5523] loop3: detected capacity change from 0 to 128 [ 214.615308][ T5511] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 214.673459][ T5523] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 214.686878][ T5511] EXT4-fs (loop2): 1 orphan inode deleted [ 214.734310][ T5118] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 214.761190][ T5523] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.770166][ T5118] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 214.779395][ T5511] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 214.808548][ T5118] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:17: Failed to release dquot type 0 [ 215.431117][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 216.155748][ T4459] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 216.484891][ T4459] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 216.531775][ T4459] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:14: Failed to release dquot type 0 [ 216.579227][ T4274] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 216.634919][ T4274] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 216.713713][ T4274] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 222.214527][ C1] sched: RT throttling activated [ 222.235464][ T5572] jffs2: notice: (5572) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 222.353552][ T5572] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 223.956256][ T5597] loop4: detected capacity change from 0 to 1024 [ 223.994805][ T5597] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.055689][ T5597] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.336: lblock 2 mapped to illegal pblock 2 (length 1) [ 224.076748][ T5597] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 224.085100][ T5597] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.336: lblock 0 mapped to illegal pblock 48 (length 1) [ 224.102192][ T5597] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 224.111716][ T5597] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.336: Failed to acquire dquot type 0 [ 224.124302][ T5597] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 224.139128][ T5597] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.336: mark_inode_dirty error [ 224.155745][ T5597] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 224.169000][ T5597] EXT4-fs (loop4): 1 orphan inode deleted [ 224.185694][ T5597] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 224.274864][ T5118] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 224.382560][ T5118] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 224.539415][ T5118] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:17: Failed to release dquot type 0 [ 225.453782][ T5623] loop2: detected capacity change from 0 to 512 [ 225.482332][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 225.566813][ T5623] EXT4-fs (loop2): Test dummy encryption mode enabled [ 226.351623][ T4414] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 226.407672][ T5623] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 226.692499][ T4414] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 227.273843][ T4414] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:13: Failed to release dquot type 0 [ 227.286001][ T4282] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 227.296486][ T5623] No source specified [ 227.371891][ T4282] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 227.427340][ T4282] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 227.593950][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 228.434859][ T5062] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 228.631571][ T5674] overlayfs: failed to resolve './bus': -2 [ 229.586075][ T5062] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 229.902047][ T5062] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.987655][ T5062] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 230.082972][ T5062] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 230.120098][ T5062] usb 1-1: Product: syz [ 230.124341][ T5062] usb 1-1: Manufacturer: syz [ 230.132991][ T5062] usb 1-1: SerialNumber: syz [ 230.175335][ T5062] usb 1-1: config 0 descriptor?? [ 230.196041][ T5062] usb 1-1: selecting invalid altsetting 0 [ 230.224379][ T5681] loop2: detected capacity change from 0 to 512 [ 230.260597][ T5681] EXT4-fs (loop2): Test dummy encryption mode enabled [ 230.945294][ T5681] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 231.172849][ T5681] No source specified [ 231.201678][ T5062] usb 1-1: USB disconnect, device number 5 [ 231.538162][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 232.250276][ T5720] capability: warning: `syz.3.366' uses deprecated v2 capabilities in a way that may be insecure [ 232.680133][ T4289] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 232.711401][ T4289] Bluetooth: hci3: Injecting HCI hardware error event [ 232.733814][ T4289] Bluetooth: hci3: hardware error 0x00 [ 234.239405][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.247826][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.365762][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.373770][ T5728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.383025][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.390242][ T5728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.621882][ T5728] team0: Port device bridge0 added [ 234.627931][ T5737] loop0: detected capacity change from 0 to 512 [ 234.671937][ T5737] EXT4-fs (loop0): Test dummy encryption mode enabled [ 234.733793][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.762198][ T5737] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 234.824846][ T4289] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 234.847894][ T5742] loop3: detected capacity change from 0 to 512 [ 234.855460][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.873583][ T5737] No source specified [ 234.918499][ T5742] EXT4-fs (loop3): Test dummy encryption mode enabled [ 235.073398][ T5742] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 235.284963][ T5742] No source specified [ 235.435518][ T5737] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 235.562755][ T5749] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 235.665959][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 235.703603][ T5067] libceph: connect (1)[c::]:6789 error -101 [ 235.710825][ T5767] ceph: No mds server is up or the cluster is laggy [ 235.719998][ T5770] overlayfs: missing 'lowerdir' [ 235.774880][ T5067] libceph: mon0 (1)[c::]:6789 connect error [ 236.077613][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 238.882664][ T5807] loop0: detected capacity change from 0 to 512 [ 238.922181][ T5807] EXT4-fs (loop0): Test dummy encryption mode enabled [ 239.003746][ T5807] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 239.137022][ T5811] nvmet: adding nsid 1 to subsystem testsubsys [ 239.168661][ T27] audit: type=1800 audit(1791002535.892:10): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.391" name="buffered_io" dev="configfs" ino=38526 res=0 errno=0 [ 239.257958][ T5807] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 239.437455][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 239.926540][ T4322] libceph: connect (1)[c::]:6789 error -101 [ 239.934331][ T5830] ceph: No mds server is up or the cluster is laggy [ 239.940595][ T5840] overlayfs: missing 'lowerdir' [ 239.944723][ T4322] libceph: mon0 (1)[c::]:6789 connect error [ 241.806023][ T5848] 9pnet: Could not find request transport: fd00000000000000000000003 [ 242.052873][ T5856] loop3: detected capacity change from 0 to 256 [ 242.100967][ T5858] loop0: detected capacity change from 0 to 512 [ 242.199474][ T5858] EXT4-fs (loop0): Test dummy encryption mode enabled [ 242.222911][ T5858] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 242.261014][ T5860] Bluetooth: MGMT ver 1.22 [ 242.336159][ T5860] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 242.351462][ T5866] loop2: detected capacity change from 0 to 64 [ 242.398093][ T5866] hfs: creator requires a 4 character value [ 242.423030][ T5866] hfs: unable to parse mount options [ 242.883679][ T5858] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 243.882779][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 245.763193][ T5896] loop1: detected capacity change from 0 to 512 [ 245.851169][ T5896] EXT4-fs (loop1): Test dummy encryption mode enabled [ 245.960641][ T5896] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 246.008532][ T5895] 9pnet: Could not find request transport: fd00000000000000000000003 [ 246.029570][ T5896] No source specified [ 246.337329][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 246.516654][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 246.525807][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 246.580183][ T5896] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 246.952727][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 247.071211][ T5926] loop2: detected capacity change from 0 to 512 [ 247.140831][ T5926] EXT4-fs (loop2): Test dummy encryption mode enabled [ 247.219451][ T5265] libceph: connect (1)[c::]:6789 error -101 [ 247.226449][ T5928] ceph: No mds server is up or the cluster is laggy [ 247.245434][ T5934] overlayfs: missing 'lowerdir' [ 247.248000][ T27] audit: type=1326 audit(1791002543.972:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5932 comm="syz.1.422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a0a19e159 code=0x0 [ 247.291234][ T5926] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.325040][ T5265] libceph: mon0 (1)[c::]:6789 connect error [ 247.865462][ T5926] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 247.995349][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 249.585393][ T5956] 9pnet: Could not find request transport: fd00000000000000000000003 [ 249.781171][ T5966] loop2: detected capacity change from 0 to 512 [ 249.835655][ T5966] EXT4-fs (loop2): Test dummy encryption mode enabled [ 249.999883][ T5966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 250.147936][ T4322] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 250.716837][ T5977] blktrace: Concurrent blktraces are not allowed on loop0 [ 252.272797][ T5966] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 252.536251][ T4322] usb 1-1: config 0 has no interfaces? [ 252.541855][ T4322] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 252.624285][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.691597][ T4322] usb 1-1: config 0 descriptor?? [ 252.729560][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 253.060494][ T4322] usb 1-1: can't set config #0, error -71 [ 253.082042][ T4322] usb 1-1: USB disconnect, device number 6 [ 253.503457][ T5995] loop0: detected capacity change from 0 to 256 [ 253.868283][ T6001] 9pnet_fd: Insufficient options for proto=fd [ 255.095052][ T5071] libceph: connect (1)[c::]:6789 error -101 [ 255.101133][ T5071] libceph: mon0 (1)[c::]:6789 connect error [ 255.129927][ T6009] ceph: No mds server is up or the cluster is laggy [ 255.145470][ T6014] overlayfs: missing 'lowerdir' [ 255.617190][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.630815][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.698593][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 257.213790][ T6037] loop1: detected capacity change from 0 to 256 [ 257.475048][ T6039] 9pnet_fd: Insufficient options for proto=fd [ 257.792727][ T6016] loop3: detected capacity change from 0 to 32768 [ 257.880747][ T6016] XFS (loop3): Mounting V5 Filesystem [ 258.113246][ T6016] XFS (loop3): Ending clean mount [ 258.165466][ T6056] loop1: detected capacity change from 0 to 1024 [ 258.192068][ T6056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.218699][ T6016] XFS (loop3): Quotacheck needed: Please wait. [ 258.289946][ T6056] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.457: lblock 2 mapped to illegal pblock 2 (length 1) [ 258.304956][ T6056] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 258.313184][ T6056] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.457: lblock 0 mapped to illegal pblock 48 (length 1) [ 258.373754][ T6016] XFS (loop3): Quotacheck: Done. [ 258.416101][ T6056] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 258.477598][ T6056] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.457: Failed to acquire dquot type 0 [ 258.531759][ T6056] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 258.596399][ T4273] XFS (loop3): Unmounting Filesystem [ 258.604241][ T6056] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.457: mark_inode_dirty error [ 258.704918][ T6056] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 258.749589][ T6056] EXT4-fs (loop1): 1 orphan inode deleted [ 258.762268][ T6056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 258.771287][ T4336] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 259.669338][ T4336] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 259.745103][ T4336] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 0 [ 262.040924][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 262.053536][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 262.065305][ T4336] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 262.121840][ T4336] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 262.194688][ T4336] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 0 [ 262.315192][ T4284] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 262.372230][ T6089] loop4: detected capacity change from 0 to 256 [ 262.388401][ T4284] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 262.468355][ T4284] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 262.875863][ T6101] 9pnet_fd: Insufficient options for proto=fd [ 263.911327][ T6099] loop4: detected capacity change from 0 to 4096 [ 264.124556][ T6099] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 264.194310][ T6099] ntfs3: loop4: Failed to load $Extend. [ 268.535553][ T6136] loop1: detected capacity change from 0 to 256 [ 274.441240][ T6181] loop3: detected capacity change from 0 to 512 [ 277.809546][ T6197] FAULT_INJECTION: forcing a failure. [ 277.809546][ T6197] name failslab, interval 1, probability 0, space 0, times 1 [ 277.944830][ T6197] CPU: 1 PID: 6197 Comm: syz.3.496 Not tainted syzkaller #0 [ 277.952209][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 277.962310][ T6197] Call Trace: [ 277.965604][ T6197] [ 277.968544][ T6197] dump_stack_lvl+0x188/0x24e [ 277.973250][ T6197] ? show_regs_print_info+0x12/0x12 [ 277.978479][ T6197] ? load_image+0x410/0x410 [ 277.983030][ T6197] ? __might_sleep+0xd0/0xd0 [ 277.987635][ T6197] ? __lock_acquire+0x7c40/0x7c40 [ 277.992694][ T6197] should_fail_ex+0x390/0x4c0 [ 277.997429][ T6197] should_failslab+0x5/0x20 [ 278.002008][ T6197] slab_pre_alloc_hook+0x59/0x300 [ 278.007113][ T6197] ? x509_cert_parse+0x158/0x7a0 [ 278.012112][ T6197] __kmem_cache_alloc_node+0x4f/0x270 [ 278.017570][ T6197] ? x509_cert_parse+0x158/0x7a0 [ 278.022558][ T6197] kmalloc_trace+0x26/0xe0 [ 278.027051][ T6197] x509_cert_parse+0x158/0x7a0 [ 278.031885][ T6197] x509_key_preparse+0x60/0x660 [ 278.036779][ T6197] ? down_read+0x1a8/0x2d0 [ 278.041223][ T6197] asymmetric_key_preparse+0xa5/0x140 [ 278.046641][ T6197] key_create_or_update+0x432/0xa40 [ 278.051887][ T6197] ? security_key_permission+0x7c/0xa0 [ 278.057383][ T6197] ? key_type_put+0x20/0x20 [ 278.061908][ T6197] ? lookup_user_key_possessed+0x40/0x40 [ 278.067676][ T6197] ? __might_fault+0xc2/0x120 [ 278.072374][ T6197] ? __might_fault+0xa6/0x120 [ 278.077090][ T6197] __se_sys_add_key+0x34b/0x410 [ 278.082000][ T6197] ? __x64_sys_add_key+0xc0/0xc0 [ 278.086979][ T6197] ? lockdep_hardirqs_on+0x94/0x140 [ 278.092197][ T6197] ? __x64_sys_add_key+0x1c/0xc0 [ 278.097184][ T6197] do_syscall_64+0x4c/0xa0 [ 278.101666][ T6197] ? clear_bhb_loop+0x60/0xb0 [ 278.106381][ T6197] ? clear_bhb_loop+0x60/0xb0 [ 278.111111][ T6197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.117074][ T6197] RIP: 0033:0x7f85a659e159 [ 278.121522][ T6197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.141175][ T6197] RSP: 002b:00007f85a7504028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 278.149638][ T6197] RAX: ffffffffffffffda RBX: 00007f85a6825fa0 RCX: 00007f85a659e159 [ 278.157644][ T6197] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 278.165674][ T6197] RBP: 00007f85a663506b R08: ffffffffffffffff R09: 0000000000000000 [ 278.173696][ T6197] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 278.181691][ T6197] R13: 00007f85a6826038 R14: 00007f85a6825fa0 R15: 00007ffc948f6ca8 [ 278.189724][ T6197] [ 278.373724][ T6199] loop4: detected capacity change from 0 to 512 [ 278.454825][ T6199] EXT4-fs (loop4): Test dummy encryption mode enabled [ 278.566716][ T6199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 278.625714][ T6199] jffs2: notice: (6199) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 278.678446][ T6199] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 279.311813][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 281.316708][ T6227] loop1: detected capacity change from 0 to 512 [ 282.070440][ T6227] EXT4-fs (loop1): Test dummy encryption mode enabled [ 282.196109][ T6227] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 282.456414][ T6238] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 282.771129][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 284.045609][ T4276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.134786][ T4276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.170007][ T4276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.186782][ T4276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.195000][ T4276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 284.202441][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.287809][ T6265] loop1: detected capacity change from 0 to 1024 [ 284.295708][ T6265] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.312984][ T6265] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.518: lblock 2 mapped to illegal pblock 2 (length 1) [ 284.327502][ T6265] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 284.336364][ T6265] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.518: lblock 0 mapped to illegal pblock 48 (length 1) [ 284.388144][ T6265] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 284.429619][ T6265] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.518: Failed to acquire dquot type 0 [ 284.475527][ T6265] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 284.512559][ T6265] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.518: mark_inode_dirty error [ 284.564120][ T6265] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 284.622669][ T6265] EXT4-fs (loop1): 1 orphan inode deleted [ 284.637859][ T4410] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 284.673075][ T6265] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 284.702038][ T4410] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 284.736326][ T4410] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:10: Failed to release dquot type 0 [ 284.790019][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.984166][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 284.993281][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.004899][ T4411] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 285.053253][ T4411] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 285.104688][ T4411] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 0 [ 285.742440][ T4284] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 285.820871][ T4284] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 285.863089][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.924927][ T4284] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 286.224227][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.264666][ T4276] Bluetooth: hci5: command 0x0409 tx timeout [ 286.372645][ T6255] chnl_net:caif_netlink_parms(): no params data found [ 287.701815][ T6255] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.810716][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.848870][ T6255] device bridge_slave_0 entered promiscuous mode [ 287.891665][ T6255] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.936127][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.963707][ T956] libceph: connect (1)[c::]:6789 error -101 [ 287.976216][ T956] libceph: mon0 (1)[c::]:6789 connect error [ 287.982288][ T6310] ceph: No mds server is up or the cluster is laggy [ 288.031349][ T6255] device bridge_slave_1 entered promiscuous mode [ 288.057892][ T6314] loop4: detected capacity change from 0 to 512 [ 288.119657][ T6314] EXT4-fs (loop4): Test dummy encryption mode enabled [ 288.194390][ T6314] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 288.234837][ T6314] jffs2: notice: (6314) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 288.334666][ T4276] Bluetooth: hci5: command 0x041b tx timeout [ 289.913083][ T6329] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 290.086352][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 290.146536][ T6255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.262008][ T6255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.673329][ T4276] Bluetooth: hci5: command 0x040f tx timeout [ 290.709941][ T6255] team0: Port device team_slave_0 added [ 291.274718][ T6255] team0: Port device team_slave_1 added [ 291.508657][ T6255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.515828][ T6255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.553961][ T6255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.732473][ T6255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.770590][ T6255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.854223][ T6255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.017509][ T6366] loop2: detected capacity change from 0 to 512 [ 292.038177][ T6366] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 292.448075][ T6366] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 292.463795][ T6366] Quota error (device loop2): write_blk: dquota write failed [ 292.471929][ T6366] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 292.482526][ T6366] Quota error (device loop2): write_blk: dquota write failed [ 292.490700][ T6366] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 292.502682][ T6366] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.543: Failed to acquire dquot type 1 [ 292.526541][ T6366] EXT4-fs (loop2): 1 truncate cleaned up [ 292.532508][ T6366] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 292.754818][ T4276] Bluetooth: hci5: command 0x0419 tx timeout [ 292.809842][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 292.926893][ T6375] loop2: detected capacity change from 0 to 512 [ 292.934229][ T6255] device hsr_slave_0 entered promiscuous mode [ 292.968538][ T6375] EXT4-fs (loop2): Test dummy encryption mode enabled [ 292.977683][ T6255] device hsr_slave_1 entered promiscuous mode [ 293.008191][ T6375] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 293.024851][ T6255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.054277][ T6375] jffs2: notice: (6375) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 293.064831][ T6255] Cannot create hsr debugfs directory [ 293.107042][ T6375] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 293.310114][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 296.194671][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 296.785962][ T6428] blktrace: Concurrent blktraces are not allowed on loop0 [ 297.826679][ T14] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 297.964660][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.983299][ T14] usb 2-1: Product: syz [ 298.024068][ T14] usb 2-1: Manufacturer: syz [ 298.034233][ T14] usb 2-1: SerialNumber: syz [ 298.255304][ T31] device hsr_slave_0 left promiscuous mode [ 298.307240][ T31] device hsr_slave_1 left promiscuous mode [ 298.334963][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.342774][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.383479][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.410495][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.435375][ T31] device bridge_slave_1 left promiscuous mode [ 298.443843][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.500038][ T14] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 298.520066][ T31] device bridge_slave_0 left promiscuous mode [ 298.533252][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.738775][ T31] device veth1_macvtap left promiscuous mode [ 300.055031][ T31] device veth0_macvtap left promiscuous mode [ 300.081790][ T31] device veth1_vlan left promiscuous mode [ 300.112528][ T31] device veth0_vlan left promiscuous mode [ 301.025964][ T14] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 301.151418][ T14] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 301.213486][ T14] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 301.251172][ T14] lan78xx: probe of 2-1:1.0 failed with error -32 [ 301.446318][ T14] usb 2-1: USB disconnect, device number 2 [ 303.217286][ T6467] blktrace: Concurrent blktraces are not allowed on loop0 [ 305.334986][ T31] team0 (unregistering): Port device team_slave_1 removed [ 305.436075][ T31] team0 (unregistering): Port device team_slave_0 removed [ 305.506306][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.596767][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.239703][ T6504] FAULT_INJECTION: forcing a failure. [ 308.239703][ T6504] name failslab, interval 1, probability 0, space 0, times 0 [ 308.299367][ T6504] CPU: 1 PID: 6504 Comm: syz.4.577 Not tainted syzkaller #0 [ 308.306761][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 308.316878][ T6504] Call Trace: [ 308.320203][ T6504] [ 308.323179][ T6504] dump_stack_lvl+0x188/0x24e [ 308.327904][ T6504] ? show_regs_print_info+0x12/0x12 [ 308.333122][ T6504] ? load_image+0x410/0x410 [ 308.337651][ T6504] ? __might_sleep+0xd0/0xd0 [ 308.342258][ T6504] ? __lock_acquire+0x7c40/0x7c40 [ 308.347318][ T6504] should_fail_ex+0x390/0x4c0 [ 308.352034][ T6504] should_failslab+0x5/0x20 [ 308.356578][ T6504] slab_pre_alloc_hook+0x59/0x300 [ 308.361638][ T6504] ? asymmetric_key_generate_id+0x52/0xd0 [ 308.367397][ T6504] __kmem_cache_alloc_node+0x4f/0x270 [ 308.372791][ T6504] ? x509_note_OID+0x131/0x1e0 [ 308.377576][ T6504] ? asymmetric_key_generate_id+0x52/0xd0 [ 308.383312][ T6504] __kmalloc+0xa3/0x240 [ 308.387486][ T6504] ? memcpy+0x3c/0x60 [ 308.391481][ T6504] asymmetric_key_generate_id+0x52/0xd0 [ 308.397073][ T6504] x509_akid_note_kid+0xa3/0x1a0 [ 308.402050][ T6504] asn1_ber_decoder+0x9c2/0x21b0 [ 308.407038][ T6504] ? __se_sys_add_key+0x34b/0x410 [ 308.412136][ T6504] ? ref_tracker_free+0x830/0x830 [ 308.417220][ T6504] x509_cert_parse+0x215/0x7a0 [ 308.422023][ T6504] x509_key_preparse+0x60/0x660 [ 308.426914][ T6504] ? down_read+0x1a8/0x2d0 [ 308.431415][ T6504] asymmetric_key_preparse+0xa5/0x140 [ 308.437091][ T6504] key_create_or_update+0x432/0xa40 [ 308.442321][ T6504] ? security_key_permission+0x7c/0xa0 [ 308.447826][ T6504] ? key_type_put+0x20/0x20 [ 308.452385][ T6504] ? lookup_user_key_possessed+0x40/0x40 [ 308.458075][ T6504] ? __might_fault+0xc2/0x120 [ 308.462802][ T6504] ? __might_fault+0xa6/0x120 [ 308.467516][ T6504] __se_sys_add_key+0x34b/0x410 [ 308.472404][ T6504] ? __x64_sys_add_key+0xc0/0xc0 [ 308.477387][ T6504] ? lockdep_hardirqs_on+0x94/0x140 [ 308.482636][ T6504] ? __x64_sys_add_key+0x1c/0xc0 [ 308.487695][ T6504] do_syscall_64+0x4c/0xa0 [ 308.492142][ T6504] ? clear_bhb_loop+0x60/0xb0 [ 308.496869][ T6504] ? clear_bhb_loop+0x60/0xb0 [ 308.501578][ T6504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.507516][ T6504] RIP: 0033:0x7f81cbd9e159 [ 308.511963][ T6504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.531597][ T6504] RSP: 002b:00007f81ccc22028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 308.540049][ T6504] RAX: ffffffffffffffda RBX: 00007f81cc025fa0 RCX: 00007f81cbd9e159 [ 308.548048][ T6504] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 308.556068][ T6504] RBP: 00007f81cbe3506b R08: ffffffffffffffff R09: 0000000000000000 [ 308.564095][ T6504] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 308.572090][ T6504] R13: 00007f81cc026038 R14: 00007f81cc025fa0 R15: 00007ffdf8ec3478 [ 308.580103][ T6504] [ 308.735035][ T6504] X.509: Couldn't decode AuthKeyIdentifier [ 308.789853][ T31] bond0 (unregistering): Released all slaves [ 309.132664][ T6255] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 309.242353][ T6255] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 309.301467][ T6255] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 309.512911][ T6515] blktrace: Concurrent blktraces are not allowed on loop0 [ 310.354659][ T6255] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 310.747929][ T6255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.777861][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 310.815596][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.837627][ T6255] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.879255][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 310.915387][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.941739][ T4410] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.949020][ T4410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.992434][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.033480][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.043068][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.055229][ T4410] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.062411][ T4410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.072293][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.145685][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.168527][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.194970][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.216869][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.260944][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.301377][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.350384][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.366224][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.399884][ T6255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.435323][ T6255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.468125][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.492581][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.506439][ T6546] FAULT_INJECTION: forcing a failure. [ 313.506439][ T6546] name failslab, interval 1, probability 0, space 0, times 0 [ 313.604772][ T6546] CPU: 1 PID: 6546 Comm: syz.1.589 Not tainted syzkaller #0 [ 313.612158][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 313.622297][ T6546] Call Trace: [ 313.625616][ T6546] [ 313.628608][ T6546] dump_stack_lvl+0x188/0x24e [ 313.633361][ T6546] ? show_regs_print_info+0x12/0x12 [ 313.638614][ T6546] ? load_image+0x410/0x410 [ 313.643177][ T6546] ? __might_sleep+0xd0/0xd0 [ 313.647822][ T6546] ? __lock_acquire+0x7c40/0x7c40 [ 313.653104][ T6546] should_fail_ex+0x390/0x4c0 [ 313.659435][ T6546] should_failslab+0x5/0x20 [ 313.664355][ T6546] slab_pre_alloc_hook+0x59/0x300 [ 313.669453][ T6546] ? asymmetric_key_generate_id+0x52/0xd0 [ 313.675259][ T6546] __kmem_cache_alloc_node+0x4f/0x270 [ 313.680776][ T6546] ? x509_note_OID+0x131/0x1e0 [ 313.685608][ T6546] ? asymmetric_key_generate_id+0x52/0xd0 [ 313.691394][ T6546] __kmalloc+0xa3/0x240 [ 313.695801][ T6546] ? memcpy+0x3c/0x60 [ 313.699844][ T6546] asymmetric_key_generate_id+0x52/0xd0 [ 313.705467][ T6546] x509_akid_note_kid+0xa3/0x1a0 [ 313.710757][ T6546] asn1_ber_decoder+0x9c2/0x21b0 [ 313.715749][ T6546] ? __se_sys_add_key+0x34b/0x410 [ 313.720832][ T6546] ? ref_tracker_free+0x830/0x830 [ 313.725913][ T6546] x509_cert_parse+0x215/0x7a0 [ 313.730744][ T6546] x509_key_preparse+0x60/0x660 [ 313.735652][ T6546] ? down_read+0x1a8/0x2d0 [ 313.740117][ T6546] asymmetric_key_preparse+0xa5/0x140 [ 313.745536][ T6546] key_create_or_update+0x432/0xa40 [ 313.750781][ T6546] ? security_key_permission+0x7c/0xa0 [ 313.757440][ T6546] ? key_type_put+0x20/0x20 [ 313.762088][ T6546] ? lookup_user_key_possessed+0x40/0x40 [ 313.767773][ T6546] ? __might_fault+0xc2/0x120 [ 313.772572][ T6546] ? __might_fault+0xa6/0x120 [ 313.777741][ T6546] __se_sys_add_key+0x34b/0x410 [ 313.783659][ T6546] ? __x64_sys_add_key+0xc0/0xc0 [ 313.788706][ T6546] ? lockdep_hardirqs_on+0x94/0x140 [ 313.793975][ T6546] ? __x64_sys_add_key+0x1c/0xc0 [ 313.798969][ T6546] do_syscall_64+0x4c/0xa0 [ 313.803420][ T6546] ? clear_bhb_loop+0x60/0xb0 [ 313.808140][ T6546] ? clear_bhb_loop+0x60/0xb0 [ 313.812855][ T6546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.819118][ T6546] RIP: 0033:0x7f0a0a19e159 [ 313.823581][ T6546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.843237][ T6546] RSP: 002b:00007f0a0afec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 313.851707][ T6546] RAX: ffffffffffffffda RBX: 00007f0a0a425fa0 RCX: 00007f0a0a19e159 [ 313.859805][ T6546] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 313.867836][ T6546] RBP: 00007f0a0a23506b R08: ffffffffffffffff R09: 0000000000000000 [ 313.875983][ T6546] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 313.883987][ T6546] R13: 00007f0a0a426038 R14: 00007f0a0a425fa0 R15: 00007ffc82e06778 [ 313.892033][ T6546] [ 314.655354][ T6554] blktrace: Concurrent blktraces are not allowed on loop0 [ 315.300440][ T6546] X.509: Couldn't decode AuthKeyIdentifier [ 315.804744][ T6569] loop3: detected capacity change from 0 to 1024 [ 315.812267][ T6569] EXT4-fs: Ignoring removed nomblk_io_submit option [ 315.915576][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.953438][ T6569] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.594: lblock 2 mapped to illegal pblock 2 (length 1) [ 315.985319][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.084928][ T6569] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 316.093137][ T6569] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.594: lblock 0 mapped to illegal pblock 48 (length 1) [ 316.152481][ T6255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.169209][ T6569] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 316.194566][ T6569] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.594: Failed to acquire dquot type 0 [ 316.782998][ T6569] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 316.834284][ T6569] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.594: mark_inode_dirty error [ 316.899725][ T6569] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 316.994766][ T6569] EXT4-fs (loop3): 1 orphan inode deleted [ 317.000660][ T6569] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 317.014947][ T4410] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 317.052235][ T4410] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 317.066701][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.073217][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.084905][ T4410] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:10: Failed to release dquot type 0 [ 317.151425][ T6585] netlink: 'syz.4.587': attribute type 29 has an invalid length. [ 317.165974][ T6585] netlink: 'syz.4.587': attribute type 29 has an invalid length. [ 317.369515][ T6591] netlink: 'syz.4.587': attribute type 29 has an invalid length. [ 318.035639][ T6585] netlink: 'syz.4.587': attribute type 29 has an invalid length. [ 318.207931][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 318.221730][ T4459] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 318.329755][ T4459] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 318.379639][ T4459] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:14: Failed to release dquot type 0 [ 318.438960][ T4273] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 318.454902][ T4273] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 318.481468][ T4273] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 318.549884][ T6603] netlink: 'syz.4.599': attribute type 10 has an invalid length. [ 318.564578][ T6603] netlink: 40 bytes leftover after parsing attributes in process `syz.4.599'. [ 318.574009][ T6603] bridge0: port 3(team0) entered blocking state [ 318.605986][ T6603] bridge0: port 3(team0) entered disabled state [ 318.613936][ T6603] device team0 entered promiscuous mode [ 318.630528][ T6603] device team_slave_0 entered promiscuous mode [ 318.638645][ T6603] device team_slave_1 entered promiscuous mode [ 318.650622][ T6603] bridge0: port 3(team0) entered blocking state [ 318.657081][ T6603] bridge0: port 3(team0) entered forwarding state [ 318.779903][ T5067] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 318.970404][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.985747][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.996545][ T5067] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 319.011130][ T5067] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.183137][ T5067] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 319.333635][ T5067] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 319.453674][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 319.468446][ T5067] usb 2-1: Manufacturer: syz [ 319.539403][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 319.660544][ T5067] usb 2-1: config 0 descriptor?? [ 319.766937][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 319.905806][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 319.924835][ T6255] device veth0_vlan entered promiscuous mode [ 319.999782][ T6255] device veth1_vlan entered promiscuous mode [ 320.145038][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 320.161239][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.190837][ T6255] device veth0_macvtap entered promiscuous mode [ 320.223272][ T6255] device veth1_macvtap entered promiscuous mode [ 320.294712][ T5067] rc_core: IR keymap rc-hauppauge not found [ 320.430130][ T5067] Registered IR keymap rc-empty [ 320.461949][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.576963][ T5067] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 320.745288][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.115158][ T5067] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 321.128703][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.147340][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.157830][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.188196][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.201347][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.212389][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.216463][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 321.231319][ T6255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.242891][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.253899][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.271135][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.294633][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.314562][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.331463][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.341872][ T6255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.374338][ T6255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.411229][ T5067] usb 2-1: USB disconnect, device number 3 [ 321.463425][ T6255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.509070][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 321.530605][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 321.553133][ T6642] loop2: detected capacity change from 0 to 1024 [ 321.558670][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 321.599993][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.609989][ T6642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 321.636198][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 322.306155][ T6623] blktrace: Concurrent blktraces are not allowed on loop0 [ 322.485769][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 322.512665][ T6255] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.542305][ T6255] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.542300][ T6642] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.607: lblock 2 mapped to illegal pblock 2 (length 1) [ 322.593667][ T6255] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.609961][ T6255] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.623875][ T6642] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 322.634818][ T6642] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.607: lblock 0 mapped to illegal pblock 48 (length 1) [ 322.675097][ T6642] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 322.729438][ T6642] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.607: Failed to acquire dquot type 0 [ 322.795443][ T6642] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 322.855707][ T6642] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.607: mark_inode_dirty error [ 322.898129][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.932211][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.940547][ T6642] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 322.965708][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 322.983154][ T6642] EXT4-fs (loop2): 1 orphan inode deleted [ 323.003420][ T6642] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 323.030503][ T4336] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 323.049270][ T4412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.078681][ T4336] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 323.095169][ T4336] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 0 [ 323.107314][ T4412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.114941][ T956] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 323.202719][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 323.324732][ T956] usb 2-1: Using ep0 maxpacket: 8 [ 323.331882][ T956] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 323.343410][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 323.363283][ T4412] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 323.383772][ T956] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 323.421825][ T956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.437434][ T4412] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 323.460232][ T956] usb 2-1: Product: syz [ 323.466194][ T4412] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:12: Failed to release dquot type 0 [ 323.486168][ T956] usb 2-1: Manufacturer: syz [ 323.499934][ T956] usb 2-1: SerialNumber: syz [ 323.509538][ T4274] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 323.533784][ T956] usb 2-1: config 0 descriptor?? [ 323.562082][ T4274] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 323.579580][ T956] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 323.599620][ T4274] EXT4-fs error (device loop2): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 325.635848][ T5265] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 325.865381][ T5265] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 325.940407][ T5265] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 325.990294][ T5265] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 326.033081][ T5265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.061692][ T6708] loop5: detected capacity change from 0 to 1024 [ 326.116659][ T5265] usb 5-1: probing VID:PID(0424:012C) [ 326.167686][ T5265] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 326.174191][ T5265] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 326.195636][ T6708] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.208188][ T5265] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 326.235173][ T5265] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 326.262347][ T6708] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.620: lblock 2 mapped to illegal pblock 2 (length 1) [ 326.288945][ T6708] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 326.302370][ T5265] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 326.308187][ T6708] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 48: comm syz.5.620: lblock 0 mapped to illegal pblock 48 (length 1) [ 326.362443][ T6708] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 326.376386][ T6708] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.620: Failed to acquire dquot type 0 [ 326.389128][ T6708] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 326.409022][ T6708] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.620: mark_inode_dirty error [ 326.423500][ T6708] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 326.440108][ T6708] EXT4-fs (loop5): 1 orphan inode deleted [ 326.447553][ T6708] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 326.457616][ T4336] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 326.503145][ T4336] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 326.537714][ T5265] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 326.554748][ T4336] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 0 [ 326.742500][ T5265] usb 5-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 326.869672][ T6255] EXT4-fs (loop5): unmounting filesystem. [ 326.903097][ T57] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 326.955011][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.973080][ T57] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 326.993658][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.003305][ T57] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 0 [ 327.028434][ T6255] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 327.055069][ T6704] blktrace: Concurrent blktraces are not allowed on loop0 [ 327.074904][ T6255] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 327.088169][ T6255] EXT4-fs error (device loop5): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 327.830560][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.859541][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.905694][ T5265] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 327.925914][ T956] gspca_zc3xx: reg_r err -71 [ 327.931931][ T956] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 327.968048][ T5265] usb 5-1: USB disconnect, device number 8 [ 327.974599][ T5062] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 327.999190][ T956] usb 2-1: USB disconnect, device number 4 [ 328.040408][ T5265] USB vub300 remote SDIO host controller[0] now disconnected [ 328.194805][ T5062] usb 3-1: Using ep0 maxpacket: 32 [ 328.400081][ T5062] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 328.503492][ T5062] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 328.541251][ T5062] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 328.573648][ T5062] usb 3-1: Product: syz [ 328.590715][ T5062] usb 3-1: Manufacturer: syz [ 328.612120][ T5062] usb 3-1: SerialNumber: syz [ 328.641859][ T5062] usb 3-1: config 0 descriptor?? [ 328.679106][ T6729] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 328.698199][ T5062] hub 3-1:0.0: bad descriptor, ignoring hub [ 328.718944][ T5062] hub: probe of 3-1:0.0 failed with error -5 [ 328.802057][ T6747] device syzkaller0 entered promiscuous mode [ 328.974946][ C0] [ 328.977353][ C0] ================================ [ 328.979037][ T956] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 328.982491][ C0] WARNING: inconsistent lock state [ 328.982513][ C0] syzkaller #0 Not tainted [ 328.999636][ C0] -------------------------------- [ 329.004759][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 329.011642][ C0] swapper/0/0 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 329.017955][ C0] ffff888076b78648 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0x109/0xac0 [ 329.029431][ C0] {SOFTIRQ-ON-W} state was registered at: [ 329.035205][ C0] lock_acquire+0x1bb/0x4a0 [ 329.039859][ C0] __flush_work+0x122/0xac0 [ 329.044674][ C0] __cancel_work_timer+0x3f4/0x560 [ 329.049911][ C0] mmc_stop_host+0xd5/0x460 [ 329.054549][ C0] mmc_remove_host+0x11/0x60 [ 329.059271][ C0] vub300_disconnect+0x14b/0x2e0 [ 329.064324][ C0] usb_unbind_interface+0x200/0x870 [ 329.069638][ C0] device_release_driver_internal+0x4cf/0x7c0 [ 329.075833][ C0] bus_remove_device+0x2dd/0x400 [ 329.080966][ C0] device_del+0x63f/0xa80 [ 329.085674][ C0] usb_disable_device+0x3e7/0x8a0 [ 329.090806][ C0] usb_disconnect+0x33c/0x8a0 [ 329.095597][ C0] hub_event+0x1d27/0x5200 [ 329.100139][ C0] process_one_work+0x8ab/0x1160 [ 329.105182][ C0] worker_thread+0xd6e/0x12a0 [ 329.109979][ C0] kthread+0x29d/0x330 [ 329.114265][ C0] ret_from_fork+0x1f/0x30 [ 329.119518][ C0] irq event stamp: 6628580 [ 329.123961][ C0] hardirqs last enabled at (6628580): [] __cancel_work_timer+0x36a/0x560 [ 329.134138][ C0] hardirqs last disabled at (6628579): [] try_to_grab_pending+0xfa/0x890 [ 329.145028][ C0] softirqs last enabled at (6628290): [] __irq_exit_rcu+0x13b/0x230 [ 329.154880][ C0] softirqs last disabled at (6628489): [] __irq_exit_rcu+0x13b/0x230 [ 329.164909][ C0] [ 329.164909][ C0] other info that might help us debug this: [ 329.173364][ C0] Possible unsafe locking scenario: [ 329.173364][ C0] [ 329.180943][ C0] CPU0 [ 329.184251][ C0] ---- [ 329.188868][ C0] lock((work_completion)(&(&host->detect)->work)); [ 329.195677][ C0] [ 329.199156][ C0] lock((work_completion)(&(&host->detect)->work)); [ 329.206048][ C0] [ 329.206048][ C0] *** DEADLOCK *** [ 329.206048][ C0] [ 329.214839][ C0] 1 lock held by swapper/0/0: [ 329.219580][ C0] #0: ffffc90000007bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xcf/0x670 [ 329.230072][ C0] [ 329.230072][ C0] stack backtrace: [ 329.236000][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 329.243334][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 329.253696][ C0] Call Trace: [ 329.257005][ C0] [ 329.260248][ C0] dump_stack_lvl+0x188/0x24e [ 329.267237][ C0] ? show_regs_print_info+0x12/0x12 [ 329.273901][ C0] valid_state+0x13b/0x1d0 [ 329.278834][ C0] mark_lock_irq+0xa9/0x900 [ 329.283737][ C0] ? stack_trace_save+0xa6/0xf0 [ 329.288658][ C0] ? save_trace+0xbb0/0xbb0 [ 329.293211][ C0] ? save_trace+0x5a/0xbb0 [ 329.297753][ C0] mark_lock+0x208/0x320 [ 329.302025][ C0] __lock_acquire+0xce0/0x7c40 [ 329.306838][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 329.311909][ C0] ? verify_lock_unused+0x140/0x140 [ 329.317146][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 329.322206][ C0] ? debug_object_assert_init+0x1ed/0x300 [ 329.328192][ C0] lock_acquire+0x1bb/0x4a0 [ 329.333113][ C0] ? __flush_work+0x109/0xac0 [ 329.337853][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 329.344302][ C0] ? read_lock_is_recursive+0x10/0x10 [ 329.349713][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 329.356078][ C0] ? _raw_spin_unlock+0x40/0x40 [ 329.360998][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 329.366658][ C0] ? kobject_put+0x25c/0x450 [ 329.371280][ C0] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 329.377662][ C0] ? call_timer_fn+0x1ac/0x670 [ 329.382601][ C0] ? __flush_work+0x109/0xac0 [ 329.387602][ C0] __flush_work+0x122/0xac0 [ 329.392415][ C0] ? __flush_work+0x109/0xac0 [ 329.397309][ C0] ? flush_work+0x20/0x20 [ 329.401676][ C0] ? __timer_delete+0x6c/0x220 [ 329.406565][ C0] ? mark_lock+0x94/0x320 [ 329.411657][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 329.417717][ C0] ? mod_delayed_work_on+0x1b0/0x1b0 [ 329.423224][ C0] ? lock_chain_count+0x20/0x20 [ 329.428466][ C0] ? kasan_quarantine_put+0xd4/0x210 [ 329.434161][ C0] ? __cancel_work_timer+0x36a/0x560 [ 329.439486][ C0] __cancel_work_timer+0x3f4/0x560 [ 329.444816][ C0] ? cancel_work_sync+0x20/0x20 [ 329.450329][ C0] ? kobject_put+0x25c/0x450 [ 329.454986][ C0] ? __kmem_cache_free+0xb6/0x200 [ 329.460051][ C0] ? kobject_put+0x41d/0x450 [ 329.464781][ C0] mmc_free_host+0x15/0x30 [ 329.469236][ C0] call_timer_fn+0x1ac/0x670 [ 329.473972][ C0] ? kref_get+0x70/0x70 [ 329.478520][ C0] ? call_timer_fn+0xcf/0x670 [ 329.483234][ C0] ? __run_timers+0x810/0x810 [ 329.487941][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 329.493176][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 329.498492][ C0] ? kref_get+0x70/0x70 [ 329.502704][ C0] __run_timers+0x56c/0x810 [ 329.507372][ C0] ? detach_timer+0x350/0x350 [ 329.512884][ C0] ? lock_chain_count+0x20/0x20 [ 329.517799][ C0] run_timer_softirq+0x63/0xf0 [ 329.522810][ C0] handle_softirqs+0x291/0x910 [ 329.528239][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 329.533138][ C0] ? do_softirq+0x210/0x210 [ 329.538132][ C0] ? hrtimer_interrupt+0x775/0x980 [ 329.543303][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 329.548923][ C0] __irq_exit_rcu+0x13b/0x230 [ 329.556462][ C0] ? irq_exit_rcu+0x20/0x20 [ 329.561205][ C0] irq_exit_rcu+0x5/0x20 [ 329.566384][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 329.573951][ C0] [ 329.577199][ C0] [ 329.580165][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 329.586938][ C0] RIP: 0010:default_idle+0xb/0x10 [ 329.592007][ C0] Code: 48 89 df e8 37 f3 96 f7 e9 44 ff ff ff e8 7d 03 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 77 23 4a 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 329.611837][ C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6 [ 329.618107][ C0] RAX: dee49ad8ae8bfa00 RBX: ffffffff8a3c8957 RCX: dee49ad8ae8bfa00 [ 329.626100][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 329.634113][ C0] RBP: ffffffff8c807ec0 R08: ffff8880b8e357cb R09: 1ffff110171c6af9 [ 329.642474][ C0] R10: dffffc0000000000 R11: ffffed10171c6afa R12: 0000000000000000 [ 329.650712][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc740 R15: 1ffffffff1900fbc [ 329.658713][ C0] ? default_idle_call+0x77/0xc0 [ 329.663690][ C0] default_idle_call+0x84/0xc0 [ 329.668479][ C0] do_idle+0x3a2/0x680 [ 329.672600][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 329.677830][ C0] ? schedule_idle+0x57/0x90 [ 329.682451][ C0] ? do_idle+0x669/0x680 [ 329.686723][ C0] cpu_startup_entry+0x3f/0x60 [ 329.691536][ C0] rest_init+0x2dc/0x300 [ 329.695808][ C0] ? time_init+0x33/0x33 [ 329.700076][ C0] arch_call_rest_init+0xa/0xa [ 329.704884][ C0] start_kernel+0x493/0x53c [ 329.709490][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 329.715426][ C0] [ 329.718543][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:3013 [ 329.727644][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/0 [ 329.736500][ C0] preempt_count: 101, expected: 0 [ 329.741574][ C0] RCU nest depth: 0, expected: 0 [ 329.746605][ C0] INFO: lockdep is turned off. [ 329.751401][ C0] Preemption disabled at: [ 329.751414][ C0] [] schedule_preempt_disabled+0x19/0x20 [ 329.763053][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 329.770516][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 329.781835][ C0] Call Trace: [ 329.785158][ C0] [ 329.788078][ C0] dump_stack_lvl+0x188/0x24e [ 329.792804][ C0] ? show_regs_print_info+0x12/0x12 [ 329.798083][ C0] ? load_image+0x410/0x410 [ 329.802649][ C0] ? schedule_preempt_disabled+0x19/0x20 [ 329.805866][ T5265] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 329.808321][ C0] __might_resched+0x489/0x5f0 [ 329.820628][ C0] ? schedule_preempt_disabled+0x19/0x20 [ 329.826352][ C0] ? __might_sleep+0xd0/0xd0 [ 329.830996][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 329.836082][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 329.842065][ C0] ? _raw_spin_unlock+0x40/0x40 [ 329.845686][ T956] usb 4-1: Using ep0 maxpacket: 16 [ 329.846948][ C0] ? slab_free_freelist_hook+0x133/0x1b0 [ 329.857749][ C0] ? kobject_put+0x25c/0x450 [ 329.862386][ C0] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 329.868773][ C0] ? call_timer_fn+0x1ac/0x670 [ 329.873596][ C0] ? __flush_work+0x109/0xac0 [ 329.878328][ C0] __flush_work+0x142/0xac0 [ 329.882522][ T956] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 329.882887][ C0] ? flush_work+0x20/0x20 [ 329.895275][ C0] ? __timer_delete+0x6c/0x220 [ 329.900090][ C0] ? mark_lock+0x94/0x320 [ 329.904482][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 329.908875][ T956] usb 4-1: config 0 has no interface number 0 [ 329.910500][ C0] ? mod_delayed_work_on+0x1b0/0x1b0 [ 329.922046][ C0] ? lock_chain_count+0x20/0x20 [ 329.927001][ C0] ? kasan_quarantine_put+0xd4/0x210 [ 329.932357][ C0] ? __cancel_work_timer+0x36a/0x560 [ 329.933842][ T956] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.937767][ C0] __cancel_work_timer+0x3f4/0x560 [ 329.937797][ C0] ? cancel_work_sync+0x20/0x20 [ 329.937816][ C0] ? kobject_put+0x25c/0x450 [ 329.937841][ C0] ? __kmem_cache_free+0xb6/0x200 [ 329.937880][ C0] ? kobject_put+0x41d/0x450 [ 329.937908][ C0] mmc_free_host+0x15/0x30 [ 329.937935][ C0] call_timer_fn+0x1ac/0x670 [ 329.937955][ C0] ? kref_get+0x70/0x70 [ 329.937981][ C0] ? call_timer_fn+0xcf/0x670 [ 329.988022][ T956] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 329.991287][ C0] ? __run_timers+0x810/0x810 [ 329.991320][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 330.004652][ T5265] usb 2-1: Using ep0 maxpacket: 16 [ 330.005054][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 330.016583][ T5265] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.020605][ C0] ? kref_get+0x70/0x70 [ 330.035017][ C0] __run_timers+0x56c/0x810 [ 330.039571][ C0] ? detach_timer+0x350/0x350 [ 330.044306][ C0] ? lock_chain_count+0x20/0x20 [ 330.049229][ C0] run_timer_softirq+0x63/0xf0 [ 330.052388][ T956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.054050][ C0] handle_softirqs+0x291/0x910 [ 330.054080][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 330.070810][ T5265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 330.071713][ C0] ? do_softirq+0x210/0x210 [ 330.087146][ C0] ? hrtimer_interrupt+0x775/0x980 [ 330.092419][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 330.097681][ C0] __irq_exit_rcu+0x13b/0x230 [ 330.102415][ C0] ? irq_exit_rcu+0x20/0x20 [ 330.106969][ C0] irq_exit_rcu+0x5/0x20 [ 330.111265][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 330.116963][ C0] [ 330.119975][ C0] [ 330.122828][ T956] usb 4-1: config 0 descriptor?? [ 330.123081][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 330.134502][ C0] RIP: 0010:default_idle+0xb/0x10 [ 330.136936][ T5265] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 330.139572][ C0] Code: 48 89 df e8 37 f3 96 f7 e9 44 ff ff ff e8 7d 03 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 77 23 4a 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 330.139592][ C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6 [ 330.139613][ C0] RAX: dee49ad8ae8bfa00 RBX: ffffffff8a3c8957 RCX: dee49ad8ae8bfa00 [ 330.182998][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 330.191019][ C0] RBP: ffffffff8c807ec0 R08: ffff8880b8e357cb R09: 1ffff110171c6af9 [ 330.199040][ C0] R10: dffffc0000000000 R11: ffffed10171c6afa R12: 0000000000000000 [ 330.207107][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc740 R15: 1ffffffff1900fbc [ 330.215137][ C0] ? default_idle_call+0x77/0xc0 [ 330.220142][ C0] default_idle_call+0x84/0xc0 [ 330.224967][ C0] do_idle+0x3a2/0x680 [ 330.229104][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 330.234375][ C0] ? schedule_idle+0x57/0x90 [ 330.239034][ C0] ? do_idle+0x669/0x680 [ 330.243341][ C0] cpu_startup_entry+0x3f/0x60 [ 330.248176][ C0] rest_init+0x2dc/0x300 [ 330.252480][ C0] ? time_init+0x33/0x33 [ 330.256790][ C0] arch_call_rest_init+0xa/0xa [ 330.261611][ C0] start_kernel+0x493/0x53c [ 330.263522][ T5265] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 330.276027][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 330.276075][ C0] [ 330.276210][ C0] ODEBUG: object ffffc900000079a0 is NOT on stack ffffffff8c800000, but annotated. [ 330.277442][ C0] ------------[ cut here ]------------ [ 330.300080][ C0] WARNING: CPU: 0 PID: 0 at lib/debugobjects.c:558 __debug_object_init+0x18e/0x440 [ 330.309433][ C0] Modules linked in: [ 330.313374][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 [ 330.321963][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 330.327788][ T5265] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.332046][ C0] RIP: 0010:__debug_object_init+0x18e/0x440 [ 330.332083][ C0] Code: 24 04 74 2f 41 ff c6 44 89 35 7e 6a dd 12 48 c7 c1 40 71 df 8a 48 c7 c7 a0 71 df 8a 84 c0 48 0f 45 f9 48 89 de e8 f2 b9 0c 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 330.332102][ C0] RSP: 0018:ffffc90000007908 EFLAGS: 00010046 [ 330.332124][ C0] RAX: 0000000000000050 RBX: ffffc900000079a0 RCX: dee49ad8ae8bfa00 [ 330.385435][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 330.393458][ C0] RBP: dffffc0000000000 R08: ffffffff8cb21963 R09: 1ffffffff196432c [ 330.401504][ C0] R10: dffffc0000000000 R11: fffffbfff196432d R12: ffffffff8c8bc760 [ 330.409532][ C0] R13: ffff888058f627a8 R14: 0000000000000001 R15: ffffffff8a8d3120 [ 330.417554][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 330.427228][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.433950][ C0] CR2: 0000563e4f997950 CR3: 0000000056d90000 CR4: 00000000003506f0 [ 330.441977][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.449045][ T5265] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 330.449976][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 330.449994][ C0] Call Trace: [ 330.450002][ C0] [ 330.450013][ C0] __synchronize_srcu+0x227/0x350 [ 330.478863][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 330.486189][ C0] ? _raw_spin_unlock+0x40/0x40 [ 330.491714][ C0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 330.497455][ C0] ? synchronize_srcu+0x18f/0x1b0 [ 330.502559][ C0] wakeup_source_unregister+0x112/0x190 [ 330.507588][ T5265] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 330.508851][ C0] mmc_host_classdev_release+0x43/0xf0 [ 330.508889][ C0] ? mmc_free_host+0x30/0x30 [ 330.529425][ C0] device_release+0x92/0x1c0 [ 330.534509][ C0] kobject_put+0x217/0x450 [ 330.539157][ C0] call_timer_fn+0x1ac/0x670 [ 330.546758][ C0] ? kref_get+0x70/0x70 [ 330.552749][ C0] ? call_timer_fn+0xcf/0x670 [ 330.559166][ C0] ? __run_timers+0x810/0x810 [ 330.564690][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 330.569962][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 330.574261][ T5265] usb 2-1: Manufacturer: syz [ 330.575463][ C0] ? kref_get+0x70/0x70 [ 330.575499][ C0] __run_timers+0x56c/0x810 [ 330.575527][ C0] ? detach_timer+0x350/0x350 [ 330.575549][ C0] ? lock_chain_count+0x20/0x20 [ 330.575579][ C0] run_timer_softirq+0x63/0xf0 [ 330.575600][ C0] handle_softirqs+0x291/0x910 [ 330.608597][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 330.613512][ C0] ? do_softirq+0x210/0x210 [ 330.618244][ C0] ? hrtimer_interrupt+0x775/0x980 [ 330.623587][ T5265] usb 2-1: config 0 descriptor?? [ 330.623590][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 330.634089][ C0] __irq_exit_rcu+0x13b/0x230 [ 330.639450][ C0] ? irq_exit_rcu+0x20/0x20 [ 330.644623][ C0] irq_exit_rcu+0x5/0x20 [ 330.648962][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 330.654657][ C0] [ 330.657633][ C0] [ 330.660611][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 330.666652][ C0] RIP: 0010:default_idle+0xb/0x10 [ 330.671741][ C0] Code: 48 89 df e8 37 f3 96 f7 e9 44 ff ff ff e8 7d 03 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 77 23 4a 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 330.694578][ C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6 [ 330.700677][ C0] RAX: dee49ad8ae8bfa00 RBX: ffffffff8a3c8957 RCX: dee49ad8ae8bfa00 [ 330.708763][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 330.716784][ C0] RBP: ffffffff8c807ec0 R08: ffff8880b8e357cb R09: 1ffff110171c6af9 [ 330.724972][ C0] R10: dffffc0000000000 R11: ffffed10171c6afa R12: 0000000000000000 [ 330.732972][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc740 R15: 1ffffffff1900fbc [ 330.740983][ C0] ? default_idle_call+0x77/0xc0 [ 330.746064][ C0] default_idle_call+0x84/0xc0 [ 330.750870][ C0] do_idle+0x3a2/0x680 [ 330.754970][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 330.760209][ C0] ? schedule_idle+0x57/0x90 [ 330.764825][ C0] ? do_idle+0x669/0x680 [ 330.769102][ C0] cpu_startup_entry+0x3f/0x60 [ 330.773895][ C0] rest_init+0x2dc/0x300 [ 330.778169][ C0] ? time_init+0x33/0x33 [ 330.782438][ C0] arch_call_rest_init+0xa/0xa [ 330.787230][ C0] start_kernel+0x493/0x53c [ 330.791754][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 330.797683][ C0] [ 330.800743][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 330.808144][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 [ 330.816697][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 330.826772][ C0] Call Trace: [ 330.830071][ C0] [ 330.832933][ C0] dump_stack_lvl+0x188/0x24e [ 330.837646][ C0] ? memcpy+0x3c/0x60 [ 330.841646][ C0] ? show_regs_print_info+0x12/0x12 [ 330.846868][ C0] ? load_image+0x410/0x410 [ 330.851407][ C0] panic+0x2d3/0x710 [ 330.855361][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 330.859893][ C0] ? secondary_startup_64_no_verify+0xcf/0xdb [ 330.866074][ C0] __warn+0x2f8/0x4f0 [ 330.870116][ C0] ? __debug_object_init+0x18e/0x440 [ 330.875446][ C0] ? __debug_object_init+0x18e/0x440 [ 330.880771][ C0] report_bug+0x2ba/0x4f0 [ 330.885123][ C0] ? __debug_object_init+0x18e/0x440 [ 330.890429][ C0] handle_bug+0x3a/0x70 [ 330.894619][ C0] exc_invalid_op+0x16/0x40 [ 330.899146][ C0] asm_exc_invalid_op+0x16/0x20 [ 330.904016][ C0] RIP: 0010:__debug_object_init+0x18e/0x440 [ 330.909936][ C0] Code: 24 04 74 2f 41 ff c6 44 89 35 7e 6a dd 12 48 c7 c1 40 71 df 8a 48 c7 c7 a0 71 df 8a 84 c0 48 0f 45 f9 48 89 de e8 f2 b9 0c 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 330.929562][ C0] RSP: 0018:ffffc90000007908 EFLAGS: 00010046 [ 330.935737][ C0] RAX: 0000000000000050 RBX: ffffc900000079a0 RCX: dee49ad8ae8bfa00 [ 330.943729][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 330.951748][ C0] RBP: dffffc0000000000 R08: ffffffff8cb21963 R09: 1ffffffff196432c [ 330.959739][ C0] R10: dffffc0000000000 R11: fffffbfff196432d R12: ffffffff8c8bc760 [ 330.967906][ C0] R13: ffff888058f627a8 R14: 0000000000000001 R15: ffffffff8a8d3120 [ 330.975907][ C0] ? __debug_object_init+0x18e/0x440 [ 330.981218][ C0] __synchronize_srcu+0x227/0x350 [ 330.986271][ C0] ? synchronize_srcu_expedited+0x20/0x20 [ 330.992030][ C0] ? _raw_spin_unlock+0x40/0x40 [ 330.996902][ C0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 331.002478][ C0] ? synchronize_srcu+0x18f/0x1b0 [ 331.007528][ C0] wakeup_source_unregister+0x112/0x190 [ 331.013100][ C0] mmc_host_classdev_release+0x43/0xf0 [ 331.018648][ C0] ? mmc_free_host+0x30/0x30 [ 331.023726][ C0] device_release+0x92/0x1c0 [ 331.028521][ C0] kobject_put+0x217/0x450 [ 331.032996][ C0] call_timer_fn+0x1ac/0x670 [ 331.037616][ C0] ? kref_get+0x70/0x70 [ 331.041799][ C0] ? call_timer_fn+0xcf/0x670 [ 331.046522][ C0] ? __run_timers+0x810/0x810 [ 331.051230][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 331.056459][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 331.061690][ C0] ? kref_get+0x70/0x70 [ 331.065875][ C0] __run_timers+0x56c/0x810 [ 331.070404][ C0] ? detach_timer+0x350/0x350 [ 331.075124][ C0] ? lock_chain_count+0x20/0x20 [ 331.080005][ C0] run_timer_softirq+0x63/0xf0 [ 331.084800][ C0] handle_softirqs+0x291/0x910 [ 331.089589][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 331.094460][ C0] ? do_softirq+0x210/0x210 [ 331.098993][ C0] ? hrtimer_interrupt+0x775/0x980 [ 331.104264][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 331.109501][ C0] __irq_exit_rcu+0x13b/0x230 [ 331.114381][ C0] ? irq_exit_rcu+0x20/0x20 [ 331.118915][ C0] irq_exit_rcu+0x5/0x20 [ 331.123211][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 331.128869][ C0] [ 331.131820][ C0] [ 331.134773][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 331.140782][ C0] RIP: 0010:default_idle+0xb/0x10 [ 331.145839][ C0] Code: 48 89 df e8 37 f3 96 f7 e9 44 ff ff ff e8 7d 03 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 77 23 4a 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 331.165658][ C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6 [ 331.171764][ C0] RAX: dee49ad8ae8bfa00 RBX: ffffffff8a3c8957 RCX: dee49ad8ae8bfa00 [ 331.180036][ C0] RDX: 0000000000000001 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 331.188046][ C0] RBP: ffffffff8c807ec0 R08: ffff8880b8e357cb R09: 1ffff110171c6af9 [ 331.196049][ C0] R10: dffffc0000000000 R11: ffffed10171c6afa R12: 0000000000000000 [ 331.204058][ C0] R13: dffffc0000000000 R14: ffffffff8c8bc740 R15: 1ffffffff1900fbc [ 331.212072][ C0] ? default_idle_call+0x77/0xc0 [ 331.217054][ C0] default_idle_call+0x84/0xc0 [ 331.221873][ C0] do_idle+0x3a2/0x680 [ 331.226791][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 331.232031][ C0] ? schedule_idle+0x57/0x90 [ 331.236722][ C0] ? do_idle+0x669/0x680 [ 331.241013][ C0] cpu_startup_entry+0x3f/0x60 [ 331.245805][ C0] rest_init+0x2dc/0x300 [ 331.250078][ C0] ? time_init+0x33/0x33 [ 331.254348][ C0] arch_call_rest_init+0xa/0xa [ 331.259140][ C0] start_kernel+0x493/0x53c [ 331.263662][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 331.269584][ C0] [ 331.272781][ C0] Kernel Offset: disabled [ 331.277150][ C0] Rebooting in 86400 seconds..