last executing test programs: 8.505126328s ago: executing program 2 (id=530): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x6, 0x2, 0x0, 0x6, 0x808, 0x4003}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_usbip_server_init(0x1) write$usbip_server(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001540)={0x1c, r5, 0xd8e0afc25e019b91, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 6.393955365s ago: executing program 4 (id=540): syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) 5.248717932s ago: executing program 2 (id=542): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x40, 0x107, 0x70ad2b, 0x0, {0x2, 0x7c}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xa101, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r3, 0xa) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) r4 = accept4$inet(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000600)="00000081fe534d42400000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000410001000003000000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000008100000000000000000000000000000400000049fe534d4", 0x85) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.6845206s ago: executing program 1 (id=547): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$tun(r4, 0x0, 0x1043) syz_open_procfs(0x0, 0x0) r5 = msgget(0x3, 0x710) r6 = msgget(0x2, 0x229) msgget(0x1, 0x240) msgctl$IPC_RMID(r5, 0x0) msgget(0x3, 0x693) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) msgctl$IPC_RMID(r6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112f33445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x19, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 4.416088759s ago: executing program 2 (id=551): r0 = fanotify_init(0x200, 0x0) read(r0, &(0x7f0000000580)=""/190, 0xbe) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000380)="87", 0x1}], 0x1) 3.978814743s ago: executing program 4 (id=554): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x64}}, 0x4800) 3.848876177s ago: executing program 4 (id=555): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) getpid() r1 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000019080)=@req={0x7, 0x50d, 0x0, 0x6}, 0x10) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x200d410, &(0x7f0000000240)='$\x00') sendmsg$nl_generic(r3, 0x0, 0x4004000) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r4 = syz_io_uring_setup(0x264a, &(0x7f00000190c0)={0x0, 0x8847, 0x40, 0x2, 0x8c, 0x0, r1}, &(0x7f0000019140), &(0x7f0000000180), &(0x7f00000191c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="134cb3f600000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb99089a895f731da0d7187c23ab62488020e59c1a462fb8259da46c91131fcaee1271b11eaae93844f47fcbbdb75d9a1a521107752d01f5804a58"], 0x40}}, 0x20000840) 2.466920991s ago: executing program 2 (id=557): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x2c}}, 0x0) 2.408893333s ago: executing program 1 (id=558): faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) 1.971021437s ago: executing program 1 (id=560): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r1}) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0x40806685, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 1.725631425s ago: executing program 1 (id=567): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x10003, @loopback, 0x1}, 0x1c) 1.686778696s ago: executing program 3 (id=568): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa0042, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)="b0", 0x1) 1.56890958s ago: executing program 1 (id=569): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000faffffff0000000000003e7c8500000005000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550e, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0xe, 0x0, &(0x7f0000000000)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='namespace0.0', 0xc) r3 = socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000100)=0x2, 0x4) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="0596e8"], 0x8) 1.54916984s ago: executing program 3 (id=570): r0 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x5, 0xd7, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x9, 0x5, 0x842}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x96e, 0xb, 0x400}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x87ee}) close(0x3) 1.498727362s ago: executing program 3 (id=571): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000002c0)={'nat\x00', 0x0, 0x0, 0x0, [0x80, 0x523e, 0x5, 0x401, 0x1, 0x7fffffff]}, &(0x7f0000000340)=0x50) 1.388588105s ago: executing program 3 (id=572): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c61677300070211000000", 0x30) 1.362694006s ago: executing program 3 (id=574): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc018aa09, &(0x7f0000000040)={&(0x7f0000a52000/0x1000)=nil, &(0x7f0000eb1000/0x2000)=nil, 0x1000, 0x3}) 1.25283708s ago: executing program 3 (id=576): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r0, &(0x7f0000000040)='7', 0x1) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xff7e, 0x7}) r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0c00018008000100070002000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.205428721s ago: executing program 0 (id=577): gettid() openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0xfff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)=@getsa={0x28, 0x12, 0x1, 0x70bd27, 0x25dfdbfc, {@in=@empty, 0x4d5, 0x2, 0x33}}, 0x28}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r7 = openat$cgroup_int(r3, &(0x7f0000000400)='cpu.max\x00', 0x2, 0x0) sendfile(r7, r7, &(0x7f0000000240)=0x3, 0x85b5) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r8, 0x4) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 1.099763524s ago: executing program 0 (id=578): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc}}, 0x118) 970.639609ms ago: executing program 0 (id=579): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c"], 0x3c}}, 0x0) 952.983099ms ago: executing program 0 (id=580): readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4c0, 0x1b0, 0x0, 0x148, 0x1b0, 0x148, 0x42c, 0x240, 0x240, 0x42c, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xa}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x27c, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x51c) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x379, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000380)='syzkaller\x00', 0x4, 0xe1, &(0x7f00000003c0)=""/225, 0x41100, 0x1f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000540)=[0xffffffffffffffff, r4, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x1, 0xb, 0xd}, {0x3, 0x3, 0x8, 0xc}, {0x1, 0x5, 0x3}, {0x4, 0x2, 0xf, 0x2}, {0x3, 0x1, 0xe, 0x8}, {0x5, 0x4, 0xb, 0x6}, {0x4, 0x1, 0xe, 0xb}, {0x2, 0x4, 0x8, 0xb}, {0x1, 0x5, 0x1, 0x1}], 0x10, 0x2}, 0x94) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x6, {0xc0020006, 0xe7ffffff, 0x5, 0x54ef}}) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) close(r7) r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r8, 0x400, 0x1) r9 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000000)={0x40000000, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000010000000000"], 0x1e4}}, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1\x00', 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdc02, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4818}, 0x48010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 0s ago: executing program 0 (id=584): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) kernel console output (not intermixed with test programs): : veth0_to_bond: link becomes ready [ 69.077972][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.096594][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.110481][ T770] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.117644][ T770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.132735][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.148714][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.200786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.214891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.226888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.236548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.246394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.256656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.277325][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.286687][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.297056][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.319226][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.340019][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.363736][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.377095][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.384433][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.395940][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.404665][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 69.420106][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.431566][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.445427][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.460267][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.469293][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.485520][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 69.490060][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.502377][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.504353][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 69.511665][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.523537][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.532585][ T4229] Bluetooth: hci1: command 0x041b tx timeout [ 69.542539][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 69.563312][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.598807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.608177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.621261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.635279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.654538][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.661696][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.681850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.689562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.697361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.706518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.715107][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.722191][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.732033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.742383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.761351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.770554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.781220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.802123][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.825277][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.848618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.857775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.870919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.906604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.922780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.938978][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.948260][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.987624][ T4198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.001714][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.013811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.025504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.035886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.044829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.082862][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.100143][ T4187] device veth0_vlan entered promiscuous mode [ 70.109981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.120395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.130534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.140002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.149918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.158149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.166971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.177120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.185374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.219379][ T4187] device veth1_vlan entered promiscuous mode [ 70.234473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.242624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.252673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.262453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.277233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.330043][ T4189] device veth0_vlan entered promiscuous mode [ 70.343094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.360073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.369496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.385621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.399446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.412593][ T4193] device veth0_vlan entered promiscuous mode [ 70.433006][ T4193] device veth1_vlan entered promiscuous mode [ 70.447224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.456084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.464718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.483212][ T4187] device veth0_macvtap entered promiscuous mode [ 70.502356][ T4189] device veth1_vlan entered promiscuous mode [ 70.515780][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.531693][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.540255][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.555791][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.566420][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.577819][ T4187] device veth1_macvtap entered promiscuous mode [ 70.606319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.615260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.623427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.631915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.639610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.647378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.659557][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.672403][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.684624][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.709899][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.720918][ T4193] device veth0_macvtap entered promiscuous mode [ 70.731794][ T4193] device veth1_macvtap entered promiscuous mode [ 70.739496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.748163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.757228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.766601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.779119][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.791589][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.802714][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.814587][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.821939][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.832201][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.849215][ T4189] device veth0_macvtap entered promiscuous mode [ 70.863405][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.874409][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.883155][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.892156][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.910296][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.922416][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.941914][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.950121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.958413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.968227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.985233][ T4189] device veth1_macvtap entered promiscuous mode [ 71.001994][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.015694][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.029922][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.044805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.053825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.063401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.072394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.099357][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.117166][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.131560][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.143806][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.156486][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.171039][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.180399][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.189504][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.198809][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.220703][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.229745][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.241301][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.252555][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.265088][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.275687][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.288018][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.303996][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.313656][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.322602][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.335531][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.335964][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.342436][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.365188][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.380345][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.422417][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.436649][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.447302][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.456986][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.483221][ T4188] device veth0_vlan entered promiscuous mode [ 71.489683][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 71.508908][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.518476][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.569094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.583154][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 71.589847][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 71.596728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.607148][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 71.613982][ T4188] device veth1_vlan entered promiscuous mode [ 71.620646][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 71.649275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.662891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.671681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.698061][ T4198] device veth0_vlan entered promiscuous mode [ 71.716495][ T770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.719561][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.733185][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.746142][ T770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.756218][ T4198] device veth1_vlan entered promiscuous mode [ 71.765261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.773948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.782529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.790551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.827652][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.837393][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.848035][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.872953][ T770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.879773][ T4188] device veth0_macvtap entered promiscuous mode [ 71.888035][ T770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.912609][ T4198] device veth0_macvtap entered promiscuous mode [ 71.922791][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.932030][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.941177][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.950240][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.962153][ T4188] device veth1_macvtap entered promiscuous mode [ 71.982062][ T4198] device veth1_macvtap entered promiscuous mode [ 71.992318][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.006553][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.015560][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.029267][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.037830][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.055419][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.080594][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.088946][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.107388][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.118612][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.130172][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.141563][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.151829][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.162623][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.174705][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.189707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.198919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.209248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.221988][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.233785][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.244704][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.257048][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.267140][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.277793][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.289355][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.300373][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.312088][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.328448][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.350389][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.361636][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.372917][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.383527][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.395558][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.410734][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.422109][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.431961][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.441114][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.454989][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.469215][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.480038][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.494071][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.503922][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.520880][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.531249][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.547386][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.565241][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.579559][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.593642][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.611633][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.631361][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.644309][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.653193][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.663506][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.678772][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.741049][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.848802][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.921561][ T4264] loop1: detected capacity change from 0 to 4096 [ 72.999065][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.030372][ T4264] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 73.201222][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.303067][ T4264] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 73.395433][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.537401][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.564503][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 73.644681][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 73.665230][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 73.802627][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 73.858363][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 74.249744][ T4187] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 74.330663][ T4187] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 74.363736][ T4277] loop3: detected capacity change from 0 to 4096 [ 74.406679][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.429029][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.450435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.525163][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.534197][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.542043][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.587158][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.618563][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.636216][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.726245][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.742726][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.771975][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.079023][ T4282] loop4: detected capacity change from 0 to 32768 [ 76.127296][ T4230] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.137453][ T4282] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.5 (4282) syzkaller syzkaller login: [ 76.230215][ T4291] loop0: detected capacity change from 0 to 32768 [ 76.285681][ T4284] loop1: detected capacity change from 0 to 32768 [ 76.301538][ T4282] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 76.331280][ T4291] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.1 (4291) [ 76.350725][ T4282] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 76.378417][ T4282] BTRFS info (device loop4): use zstd compression, level 3 [ 76.394303][ T4282] BTRFS info (device loop4): using free space tree [ 76.400889][ T4282] BTRFS info (device loop4): has skinny extents [ 76.424854][ T4284] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.6 (4284) [ 76.479583][ T4269] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4269) [ 76.514348][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.544810][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.574355][ T4230] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 76.594141][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.626356][ T4230] usb 4-1: config 0 descriptor?? [ 76.661966][ T4316] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.723009][ T4285] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4285) [ 76.801802][ T4316] device bridge0 entered promiscuous mode [ 76.865868][ T4282] BTRFS info (device loop4): enabling ssd optimizations [ 76.944382][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.955087][ T4316] loop1: detected capacity change from 0 to 64 [ 77.039065][ T4302] loop2: detected capacity change from 0 to 32768 [ 77.074414][ T4316] Trying to free block not in datazone [ 77.118668][ T4316] minix_free_block (loop1:11): bit already cleared [ 77.159137][ T4302] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.9 (4302) [ 77.350126][ T4269] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4269) [ 77.361522][ T4295] udc-core: couldn't find an available UDC or it's busy [ 77.404566][ T4295] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.464736][ T4295] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 77.626037][ T4295] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8'. [ 77.824606][ T4230] usbhid 4-1:0.0: can't add hid device: -71 [ 77.831188][ T4230] usbhid: probe of 4-1:0.0 failed with error -71 [ 77.909961][ T4230] usb 4-1: USB disconnect, device number 2 [ 77.995256][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.007079][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.017709][ T4231] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 78.026844][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.039680][ T4231] usb 1-1: config 0 descriptor?? [ 78.245744][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.614729][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.664454][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.757089][ T1108] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 78.808655][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.893453][ T1108] usb 2-1: config 0 descriptor?? [ 78.914071][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 78.976806][ T4307] udc-core: couldn't find an available UDC or it's busy [ 78.991505][ T4307] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.481361][ T4352] netlink: 'syz.0.10': attribute type 1 has an invalid length. [ 79.664986][ T4352] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10'. [ 79.917932][ T4332] udc-core: couldn't find an available UDC or it's busy [ 79.927947][ T4332] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.967825][ T4332] netlink: 'syz.1.12': attribute type 1 has an invalid length. [ 79.981935][ T4332] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12'. [ 80.034509][ T4231] usbhid 1-1:0.0: can't add hid device: -71 [ 80.040561][ T4231] usbhid: probe of 1-1:0.0 failed with error -71 syzkaller syzkaller login: [ 80.078642][ T1108] usbhid 2-1:0.0: can't add hid device: -71 [ 80.091497][ T1108] usbhid: probe of 2-1:0.0 failed with error -71 [ 80.102961][ T4360] loop2: detected capacity change from 0 to 4096 [ 80.110590][ T4231] usb 1-1: USB disconnect, device number 2 [ 80.122512][ T1108] usb 2-1: USB disconnect, device number 2 [ 80.186231][ T4366] loop4: detected capacity change from 0 to 4096 [ 80.251388][ T4366] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 80.302678][ T4366] ntfs3: loop4: Failed to load $Extend. [ 80.467323][ T1108] FS-Cache: Duplicate cookie detected [ 80.473084][ T1108] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 80.480961][ T1108] FS-Cache: O-cookie d=ffffffff8c747b80{AFS.cell} n=ffff8880741b6000 [ 80.489217][ T1108] FS-Cache: O-key=[4] '73797a30' [ 80.494270][ T1108] FS-Cache: N-cookie c=00000008 [p=00000006 fl=2 nc=0 na=1] [ 80.501587][ T1108] FS-Cache: N-cookie d=ffffffff8c747b80{AFS.cell} n=ffff88807b49a800 [ 80.509798][ T1108] FS-Cache: N-key=[4] '73797a30' [ 80.544366][ T4373] kAFS: No cell specified [ 81.411778][ T4382] device bridge0 entered promiscuous mode [ 81.692557][ T4378] loop0: detected capacity change from 0 to 64 [ 81.757697][ T4378] Trying to free block not in datazone [ 81.866372][ T4378] minix_free_block (loop0:11): bit already cleared [ 82.662578][ T4375] loop3: detected capacity change from 0 to 32768 [ 82.701610][ T4375] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.21 (4375) syzkaller syzkaller login: [ 82.734315][ T4375] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 82.773033][ T4372] loop4: detected capacity change from 0 to 32768 [ 82.784207][ T4375] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 82.830671][ T4375] BTRFS info (device loop3): use zstd compression, level 3 [ 82.860219][ T4375] BTRFS info (device loop3): using free space tree [ 82.874320][ T4375] BTRFS info (device loop3): has skinny extents [ 82.913038][ T4372] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.20 (4372) [ 82.948755][ T4393] loop2: detected capacity change from 0 to 4096 [ 83.057636][ T4389] loop1: detected capacity change from 0 to 32768 [ 83.105391][ T4393] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 83.149089][ T4389] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.24 (4389) [ 83.188073][ T4393] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 83.203285][ T4393] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 83.217803][ T4393] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 83.231660][ T4393] ntfs: volume version 3.1. [ 83.704100][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 83.724088][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.734083][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.744078][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.754070][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.764077][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.774095][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.784075][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.794090][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! syzkaller syzkaller login: [ 84.413715][ T4269] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4269) [ 84.457978][ T4375] BTRFS error (device loop3): open_ctree failed: -22 [ 84.542932][ T4198] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 84.608502][ T4322] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by udevd (4322) [ 84.732809][ T4435] loop0: detected capacity change from 0 to 1024 [ 84.869767][ T4435] EXT4-fs (loop0): #clusters per group too big: 24576 [ 84.913789][ T4430] FS-Cache: Duplicate cookie detected [ 84.919357][ T4430] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 84.927028][ T4430] FS-Cache: O-cookie d=ffffffff8c747b80{AFS.cell} n=ffff8880741b6000 [ 84.935155][ T4430] FS-Cache: O-key=[4] '73797a30' [ 84.940171][ T4430] FS-Cache: N-cookie c=00000009 [p=00000006 fl=2 nc=0 na=1] [ 84.947877][ T4430] FS-Cache: N-cookie d=ffffffff8c747b80{AFS.cell} n=ffff8880261b7800 [ 84.956373][ T4430] FS-Cache: N-key=[4] '73797a30' [ 84.968988][ T4437] loop2: detected capacity change from 0 to 4096 [ 84.993519][ T4443] kAFS: No cell specified [ 85.099145][ T4437] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 85.895460][ T4437] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 85.968575][ T4437] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 85.983112][ T4437] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 86.041674][ T4437] ntfs: volume version 3.1. [ 86.474549][ T4198] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 86.804466][ T4232] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.007083][ T1346] cfg80211: failed to load regulatory.db [ 87.192714][ T4455] loop3: detected capacity change from 0 to 4096 [ 87.212608][ T4455] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 87.404537][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.115830][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.287382][ T4455] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 88.325438][ T4232] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 88.505746][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.785022][ T4232] usb 1-1: config 0 descriptor?? syzkaller syzkaller login: [ 89.229664][ T4193] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 89.245853][ T4193] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 89.664842][ T4454] udc-core: couldn't find an available UDC or it's busy [ 89.678692][ T4460] loop4: detected capacity change from 0 to 32768 [ 89.685290][ T4454] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 89.706165][ T4454] netlink: 'syz.0.48': attribute type 1 has an invalid length. [ 89.713823][ T4454] netlink: 224 bytes leftover after parsing attributes in process `syz.0.48'. [ 89.771171][ T4486] loop3: detected capacity change from 0 to 2048 [ 89.815524][ T4232] usbhid 1-1:0.0: can't add hid device: -71 [ 89.821622][ T4232] usbhid: probe of 1-1:0.0 failed with error -71 [ 89.833228][ T4460] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 89.848702][ T4460] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 89.867318][ T4460] BTRFS info (device loop4): use zstd compression, level 3 [ 89.893772][ T4232] usb 1-1: USB disconnect, device number 3 [ 89.913748][ T4460] BTRFS info (device loop4): using free space tree [ 89.968622][ T4460] BTRFS info (device loop4): has skinny extents [ 90.037181][ T4486] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 90.140238][ T4458] loop2: detected capacity change from 0 to 32768 [ 90.168879][ T4486] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.239815][ T4458] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.38 (4458) [ 90.343355][ T4460] BTRFS info (device loop4): enabling ssd optimizations [ 90.402382][ T4480] loop1: detected capacity change from 0 to 40427 [ 90.461580][ T26] audit: type=1800 audit(1787343167.253:2): pid=4460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.39" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 90.509081][ T4480] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 90.535573][ T4285] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4285) [ 90.545694][ T4480] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 90.592508][ T26] audit: type=1800 audit(1787343167.383:3): pid=4460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.39" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 90.623557][ T4516] syz.2.46 uses obsolete (PF_INET,SOCK_PACKET) [ 90.639851][ T4480] F2FS-fs (loop1): invalid crc value [ 91.197595][ T4480] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 91.653426][ T4524] loop3: detected capacity change from 0 to 2048 [ 91.773763][ T4524] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 91.813284][ T4524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.856437][ T4480] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 91.863778][ T4480] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 91.887781][ T4527] loop2: detected capacity change from 0 to 256 [ 91.932560][ T4513] loop0: detected capacity change from 0 to 32768 [ 91.941270][ T4480] F2FS-fs (loop1): Unrecognized mount option "TIPCv2" or missing value [ 91.992091][ T4527] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 92.024570][ T4527] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 9) [ 92.036961][ T4513] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.45 (4513) [ 92.098912][ T4527] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805ee714e0 iblock : 0, err : -5) [ 92.138044][ T4527] exFAT-fs (loop2): Filesystem has been set read-only [ 92.214200][ T4513] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 92.277073][ T4513] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 92.301311][ T4533] loop3: detected capacity change from 0 to 64 [ 92.308652][ T4513] BTRFS info (device loop0): use zstd compression, level 3 [ 92.328912][ T4513] BTRFS info (device loop0): using free space tree [ 92.342620][ T4513] BTRFS info (device loop0): has skinny extents [ 92.604784][ T4533] netlink: 'syz.3.50': attribute type 1 has an invalid length. [ 93.140051][ T4533] attempt to access beyond end of device [ 93.140051][ T4533] loop3: rw=0, want=3586, limit=64 [ 93.245785][ T4533] Buffer I/O error on dev loop3, logical block 1792, async page read [ 93.254580][ T4533] attempt to access beyond end of device [ 93.254580][ T4533] loop3: rw=0, want=113154, limit=64 [ 93.265660][ T4533] Buffer I/O error on dev loop3, logical block 56576, async page read [ 93.269598][ T4513] BTRFS info (device loop0): enabling ssd optimizations [ 93.279252][ T4533] attempt to access beyond end of device [ 93.279252][ T4533] loop3: rw=0, want=3586, limit=64 [ 93.292334][ T4533] Buffer I/O error on dev loop3, logical block 1792, async page read [ 93.385557][ T4232] usb 4-1: new high-speed USB device number 3 using dummy_hcd syzkaller syzkaller log[ 93.654288][ T4232] usb 4-1: Using ep0 maxpacket: 8 in: [ 93.789707][ T4232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.802568][ T4232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.984449][ T4232] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 94.014323][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.022414][ T4232] usb 4-1: Product: syz [ 94.037285][ T4232] usb 4-1: Manufacturer: syz [ 94.041973][ T4232] usb 4-1: SerialNumber: syz [ 94.058538][ T4577] netlink: 'syz.0.57': attribute type 1 has an invalid length. [ 94.101120][ T4577] netlink: 64399 bytes leftover after parsing attributes in process `syz.0.57'. [ 94.110921][ T4579] device batadv_slave_0 entered promiscuous mode [ 94.122256][ T4578] device batadv_slave_0 left promiscuous mode [ 94.307499][ T4584] device syzkaller1 entered promiscuous mode [ 94.342791][ T4586] loop2: detected capacity change from 0 to 2048 [ 94.449844][ T4232] usb 4-1: unit 0 not found! [ 94.457886][ T4586] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 94.472582][ T4232] usb 4-1: unit 4 not found! [ 94.522135][ T4586] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.556434][ T4232] usb 4-1: USB disconnect, device number 3 [ 94.700478][ T4601] loop4: detected capacity change from 0 to 4096 [ 94.857913][ T4601] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 94.874060][ T4608] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.913480][ T4269] udevd[4269]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.938550][ T4601] NILFS (loop4): mounting fs with errors [ 94.947509][ T4605] loop2: detected capacity change from 0 to 4096 [ 95.025063][ T4605] ======================================================= [ 95.025063][ T4605] WARNING: The mand mount option has been deprecated and [ 95.025063][ T4605] and is ignored by this kernel. Remove the mand [ 95.025063][ T4605] option from the mount to silence this warning. [ 95.025063][ T4605] ======================================================= [ 95.055637][ T4601] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 159744 [ 95.114645][ T4601] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 95.168632][ T4612] FAULT_INJECTION: forcing a failure. [ 95.168632][ T4612] name failslab, interval 1, probability 0, space 0, times 1 [ 95.217878][ T4605] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 95.227474][ T4601] NILFS (loop4): error -5 truncating bmap (ino=15) [ 95.320990][ T4612] CPU: 1 PID: 4612 Comm: syz.1.66 Not tainted syzkaller #0 [ 95.328268][ T4612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.338371][ T4612] Call Trace: [ 95.341684][ T4612] [ 95.344659][ T4612] dump_stack_lvl+0x188/0x250 [ 95.349401][ T4612] ? show_regs_print_info+0x20/0x20 [ 95.354641][ T4612] ? load_image+0x410/0x410 [ 95.359182][ T4612] ? __might_sleep+0xf0/0xf0 [ 95.363805][ T4612] ? __lock_acquire+0x7b50/0x7b50 [ 95.368909][ T4612] should_fail+0x383/0x4b0 [ 95.373366][ T4612] should_failslab+0x5/0x20 [ 95.377908][ T4612] slab_pre_alloc_hook+0x51/0xc0 [ 95.382880][ T4612] __kmalloc_node+0x6d/0x3a0 [ 95.387763][ T4612] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 95.393874][ T4612] ? __lock_acquire+0x7b50/0x7b50 [ 95.398937][ T4612] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 95.404808][ T4612] new_slab+0x100/0x4b0 [ 95.408999][ T4612] ___slab_alloc+0x807/0xdd0 [ 95.413624][ T4612] ? fcntl_setlease+0x134/0x310 [ 95.418545][ T4612] ? fcntl_setlease+0x134/0x310 [ 95.423430][ T4612] kmem_cache_alloc+0xf0/0x280 [ 95.428229][ T4612] fcntl_setlease+0x134/0x310 [ 95.432947][ T4612] ? vfs_setlease+0x100/0x100 [ 95.437684][ T4612] ? vfs_write+0xaa6/0xd70 [ 95.442258][ T4612] do_fcntl+0x11a/0x1360 [ 95.446534][ T4612] ? __context_tracking_exit+0x4c/0x80 [ 95.452027][ T4612] ? rcu_lock_release+0x20/0x20 [ 95.456921][ T4612] ? __lock_acquire+0x7b50/0x7b50 [ 95.462032][ T4612] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 95.468138][ T4612] ? tomoyo_file_fcntl+0x77/0x210 [ 95.473200][ T4612] ? lock_chain_count+0x20/0x20 [ 95.478181][ T4612] ? bpf_lsm_file_fcntl+0x5/0x10 [ 95.483253][ T4612] ? security_file_fcntl+0x7c/0xa0 [ 95.488404][ T4612] __se_sys_fcntl+0xcc/0x190 [ 95.493041][ T4612] do_syscall_64+0x4c/0xa0 [ 95.497519][ T4612] ? clear_bhb_loop+0x30/0x80 [ 95.502266][ T4612] ? clear_bhb_loop+0x30/0x80 [ 95.506992][ T4612] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.512932][ T4612] RIP: 0033:0x7fc2573e40d9 [ 95.517734][ T4612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.531416][ T4593] loop0: detected capacity change from 0 to 32768 [ 95.537826][ T4612] RSP: 002b:00007fc25563c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 95.537855][ T4612] RAX: ffffffffffffffda RBX: 00007fc25766bfa0 RCX: 00007fc2573e40d9 [ 95.537872][ T4612] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000003 [ 95.569636][ T4612] RBP: 00007fc25563c090 R08: 0000000000000000 R09: 0000000000000000 [ 95.577642][ T4612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.585644][ T4612] R13: 00007fc25766c038 R14: 00007fc25766bfa0 R15: 00007ffc20e946a8 [ 95.593664][ T4612] [ 95.637372][ T4593] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.59 (4593) [ 95.654181][ T4198] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 95.726132][ T4623] FAULT_INJECTION: forcing a failure. [ 95.726132][ T4623] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.733820][ T4593] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 95.766010][ T4623] CPU: 1 PID: 4623 Comm: syz.2.68 Not tainted syzkaller #0 [ 95.773326][ T4623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.783400][ T4623] Call Trace: [ 95.786697][ T4623] [ 95.789638][ T4623] dump_stack_lvl+0x188/0x250 [ 95.794343][ T4623] ? show_regs_print_info+0x20/0x20 [ 95.799597][ T4623] ? load_image+0x410/0x410 [ 95.804137][ T4623] ? __lock_acquire+0x7b50/0x7b50 [ 95.809190][ T4623] should_fail+0x383/0x4b0 [ 95.813628][ T4623] _copy_from_iter+0x234/0x1160 [ 95.818504][ T4623] ? __lock_acquire+0x7b50/0x7b50 [ 95.823566][ T4623] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 95.828961][ T4623] ? __virt_addr_valid+0x3c6/0x470 [ 95.834871][ T4623] ? __phys_addr_symbol+0x2b/0x70 [ 95.839908][ T4623] ? __check_object_size+0x30c/0x410 [ 95.845212][ T4623] netlink_sendmsg+0x758/0xbe0 [ 95.849998][ T4623] ? netlink_getsockopt+0x570/0x570 [ 95.855241][ T4623] ? aa_sock_msg_perm+0x94/0x150 [ 95.860219][ T4623] ? apparmor_socket_sendmsg+0x88/0x230 [ 95.865782][ T4623] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 95.871086][ T4623] ? security_socket_sendmsg+0x7c/0xa0 [ 95.876573][ T4623] ? netlink_getsockopt+0x570/0x570 [ 95.881807][ T4623] ____sys_sendmsg+0x5be/0x8f0 [ 95.886594][ T4623] ? __sys_sendmsg_sock+0x30/0x30 [ 95.891641][ T4623] ? import_iovec+0x6f/0xa0 [ 95.896165][ T4623] ___sys_sendmsg+0x236/0x2e0 [ 95.900866][ T4623] ? __sys_sendmsg+0x290/0x290 [ 95.905671][ T4623] __se_sys_sendmsg+0x1b7/0x2a0 [ 95.910576][ T4623] ? __x64_sys_sendmsg+0x80/0x80 [ 95.915534][ T4623] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 95.921733][ T4623] ? lockdep_hardirqs_on+0x94/0x140 [ 95.926954][ T4623] do_syscall_64+0x4c/0xa0 [ 95.931386][ T4623] ? clear_bhb_loop+0x30/0x80 [ 95.936081][ T4623] ? clear_bhb_loop+0x30/0x80 [ 95.940772][ T4623] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.946682][ T4623] RIP: 0033:0x7fb54f7450d9 [ 95.951118][ T4623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.970735][ T4623] RSP: 002b:00007fb54d99d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.979163][ T4623] RAX: ffffffffffffffda RBX: 00007fb54f9ccfa0 RCX: 00007fb54f7450d9 [ 95.987145][ T4623] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 95.995127][ T4623] RBP: 00007fb54d99d090 R08: 0000000000000000 R09: 0000000000000000 [ 96.003236][ T4623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.011231][ T4623] R13: 00007fb54f9cd038 R14: 00007fb54f9ccfa0 R15: 00007ffff2bee978 [ 96.019238][ T4623] [ 96.023426][ T4593] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 96.067965][ T4593] BTRFS info (device loop0): use zstd compression, level 3 [ 96.092735][ T4593] BTRFS info (device loop0): using free space tree [ 96.099826][ T4593] BTRFS info (device loop0): has skinny extents [ 96.207024][ T4629] FAULT_INJECTION: forcing a failure. [ 96.207024][ T4629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.296543][ T4629] CPU: 0 PID: 4629 Comm: syz.2.70 Not tainted syzkaller #0 [ 96.303837][ T4629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.313937][ T4629] Call Trace: [ 96.317254][ T4629] [ 96.320229][ T4629] dump_stack_lvl+0x188/0x250 [ 96.324962][ T4629] ? show_regs_print_info+0x20/0x20 [ 96.330220][ T4629] ? load_image+0x410/0x410 [ 96.334777][ T4629] ? __lock_acquire+0x7b50/0x7b50 [ 96.339866][ T4629] should_fail+0x383/0x4b0 [ 96.344438][ T4629] _copy_from_iter+0x234/0x1160 [ 96.349368][ T4629] ? __lock_acquire+0x7b50/0x7b50 [ 96.354454][ T4629] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 96.359885][ T4629] ? __virt_addr_valid+0x3c6/0x470 [ 96.365057][ T4629] ? __phys_addr_symbol+0x2b/0x70 [ 96.370137][ T4629] ? __check_object_size+0x30c/0x410 [ 96.375569][ T4629] netlink_sendmsg+0x758/0xbe0 [ 96.380548][ T4629] ? netlink_getsockopt+0x570/0x570 [ 96.385799][ T4629] ? aa_sock_msg_perm+0x94/0x150 [ 96.390904][ T4629] ? apparmor_socket_sendmsg+0x88/0x230 [ 96.396497][ T4629] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 96.401851][ T4629] ? security_socket_sendmsg+0x7c/0xa0 [ 96.407357][ T4629] ? netlink_getsockopt+0x570/0x570 [ 96.412614][ T4629] ____sys_sendmsg+0x5be/0x8f0 [ 96.417449][ T4629] ? __sys_sendmsg_sock+0x30/0x30 [ 96.422542][ T4629] ? import_iovec+0x6f/0xa0 [ 96.427103][ T4629] ___sys_sendmsg+0x236/0x2e0 [ 96.431839][ T4629] ? __sys_sendmsg+0x290/0x290 [ 96.436699][ T4629] __se_sys_sendmsg+0x1b7/0x2a0 [ 96.441602][ T4629] ? __x64_sys_sendmsg+0x80/0x80 [ 96.446589][ T4629] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.452628][ T4629] ? lockdep_hardirqs_on+0x94/0x140 [ 96.457872][ T4629] do_syscall_64+0x4c/0xa0 [ 96.462332][ T4629] ? clear_bhb_loop+0x30/0x80 [ 96.467054][ T4629] ? clear_bhb_loop+0x30/0x80 [ 96.471783][ T4629] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.477828][ T4629] RIP: 0033:0x7fb54f7450d9 [ 96.482294][ T4629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.502038][ T4629] RSP: 002b:00007fb54d99d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.510671][ T4629] RAX: ffffffffffffffda RBX: 00007fb54f9ccfa0 RCX: 00007fb54f7450d9 [ 96.518693][ T4629] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 96.526714][ T4629] RBP: 00007fb54d99d090 R08: 0000000000000000 R09: 0000000000000000 [ 96.535165][ T4629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.543695][ T4629] R13: 00007fb54f9cd038 R14: 00007fb54f9ccfa0 R15: 00007ffff2bee978 [ 96.551724][ T4629] [ 96.566562][ T4615] loop3: detected capacity change from 0 to 32768 [ 96.996099][ T4615] XFS (loop3): Mounting V5 Filesystem [ 97.112224][ T4593] BTRFS info (device loop0): enabling ssd optimizations [ 97.207945][ T26] audit: type=1800 audit(1787343173.007:4): pid=4593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.59" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 97.208865][ T4615] XFS (loop3): Ending clean mount [ 97.324834][ T26] audit: type=1800 audit(1787343173.037:5): pid=4593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.59" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 97.516525][ T4615] netlink: 'syz.3.67': attribute type 21 has an invalid length. [ 97.525294][ T4678] loop4: detected capacity change from 0 to 2048 [ 97.542373][ T4615] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.952186][ T4678] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 97.980965][ T4683] binder: 4682:4683 ioctl 50009401 2000000004c0 returned -22 [ 98.082933][ T4615] IPv6: Can't replace route, no match found [ 98.093737][ T4678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.107483][ T4683] binder: 4682:4683 ioctl ae01 28 returned -22 [ 98.153092][ T4683] binder: 4682:4683 ioctl c0306201 200000000480 returned -14 [ 98.231029][ T26] audit: type=1800 audit(1787343174.027:6): pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.67" name="bus" dev="loop3" ino=9289 res=0 errno=0 [ 98.338825][ T26] audit: type=1800 audit(1787343174.067:7): pid=4615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.67" name="bus" dev="loop3" ino=9289 res=0 errno=0 [ 98.408137][ T4684] Zero length message leads to an empty skb [ 98.610401][ T4634] loop1: detected capacity change from 0 to 40427 [ 98.662243][ T4699] device syzkaller1 entered promiscuous mode [ 98.765368][ T4634] F2FS-fs (loop1): invalid crc value [ 98.776393][ T4193] XFS (loop3): Unmounting Filesystem [ 98.816442][ T4634] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 99.071776][ T4713] loop4: detected capacity change from 0 to 2048 [ 99.173936][ T4634] F2FS-fs (loop1): Start checkpoint disabled! [ 99.211179][ T4634] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e7 [ 99.342902][ T4721] sctp: [Deprecated]: syz.2.84 (pid 4721) Use of int in maxseg socket option. [ 99.342902][ T4721] Use struct sctp_assoc_value instead [ 99.385927][ T4634] device syz_tun entered promiscuous mode [ 99.397662][ T4713] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.414365][ T4634] device macvtap1 entered promiscuous mode [ 99.446960][ T26] audit: type=1800 audit(1787343175.247:8): pid=4713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.83" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 99.487891][ T4634] device syz_tun left promiscuous mode [ 99.643709][ T1438] attempt to access beyond end of device [ 99.643709][ T1438] loop1: rw=2049, want=45104, limit=40427 [ 99.685667][ T4727] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 100.703264][ T4742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.90'. [ 100.804265][ T4740] loop2: detected capacity change from 0 to 2048 [ 100.892582][ T4740] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 101.143660][ T4740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) syzkaller syzkaller login: [ 102.526915][ T4768] device syzkaller1 entered promiscuous mode [ 103.444558][ T4781] netlink: 'syz.2.98': attribute type 21 has an invalid length. [ 103.499106][ T4781] loop2: detected capacity change from 0 to 64 [ 103.608782][ T4788] loop1: detected capacity change from 0 to 64 [ 103.633550][ T4781] xt_hashlimit: size too large, truncated to 1048576 [ 103.697630][ T4788] netlink: 'syz.1.101': attribute type 1 has an invalid length. [ 103.744401][ T4341] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.937658][ T4788] attempt to access beyond end of device [ 103.937658][ T4788] loop1: rw=0, want=3586, limit=64 [ 104.183617][ T4788] Buffer I/O error on dev loop1, logical block 1792, async page read [ 104.452948][ T4788] attempt to access beyond end of device [ 104.452948][ T4788] loop1: rw=0, want=113154, limit=64 [ 104.465180][ T4232] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.516465][ T4788] Buffer I/O error on dev loop1, logical block 56576, async page read [ 104.525992][ T4788] attempt to access beyond end of device [ 104.525992][ T4788] loop1: rw=0, want=3586, limit=64 [ 104.536739][ T4788] Buffer I/O error on dev loop1, logical block 1792, async page read [ 104.636815][ T4198] hfs: node 4:3 still has 1 user(s)! [ 104.691555][ T4800] loop0: detected capacity change from 0 to 512 syzkaller syzkaller login: [ 104.794318][ T4800] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 104.826015][ T4800] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.834941][ T4341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.857495][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 104.873711][ T4341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.901833][ T4811] loop3: detected capacity change from 0 to 2048 [ 104.927018][ T4810] loop2: detected capacity change from 0 to 2048 [ 104.943817][ T4341] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 104.965474][ T4811] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 104.976865][ T4341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.014345][ T4232] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.026856][ T4810] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.034175][ T4232] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.055316][ T4811] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.070153][ T4810] EXT4-fs (loop2): shut down requested (0) [ 105.073079][ T4341] usb 5-1: config 0 descriptor?? [ 105.228471][ T4232] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 105.289217][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.358455][ T4232] usb 2-1: Product: syz [ 105.362693][ T4232] usb 2-1: Manufacturer: syz [ 105.390245][ T4232] usb 2-1: SerialNumber: syz [ 105.674143][ T2304] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.925483][ T4232] usb 2-1: unit 0 not found! [ 105.930507][ T4232] usb 2-1: unit 4 not found! [ 105.956233][ T4783] netlink: 'syz.4.99': attribute type 1 has an invalid length. [ 106.032272][ T4783] netlink: 224 bytes leftover after parsing attributes in process `syz.4.99'. [ 106.307575][ T4232] usb 2-1: USB disconnect, device number 3 [ 106.409971][ T4341] usbhid 5-1:0.0: can't add hid device: -71 [ 106.422116][ T4341] usbhid: probe of 5-1:0.0 failed with error -71 [ 106.493333][ T4341] usb 5-1: USB disconnect, device number 2 [ 106.514795][ T4838] device syzkaller1 entered promiscuous mode [ 106.694312][ T2304] usb 4-1: config 7 has an invalid interface number: 169 but max is 0 [ 106.702725][ T2304] usb 4-1: config 7 has no interface number 0 [ 107.430054][ T2304] usb 4-1: config 7 interface 169 altsetting 81 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 107.441230][ T2304] usb 4-1: config 7 interface 169 has no altsetting 0 [ 107.552591][ T4846] 9pnet: Insufficient options for proto=fd [ 107.561788][ T4847] capability: warning: `syz.1.119' uses deprecated v2 capabilities in a way that may be insecure [ 107.659926][ T2304] usb 4-1: New USB device found, idVendor=05ef, idProduct=8888, bcdDevice=17.4d [ 107.676515][ T4852] loop0: detected capacity change from 0 to 256 [ 107.694171][ T2304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.712759][ T2304] usb 4-1: Product: syz [ 107.720081][ T2304] usb 4-1: Manufacturer: syz [ 107.738526][ T2304] usb 4-1: SerialNumber: syz [ 107.753829][ T4851] loop4: detected capacity change from 0 to 2048 [ 107.775440][ T4852] exfat: Deprecated parameter 'namecase' [ 107.791386][ T4852] exfat: Deprecated parameter 'namecase' [ 107.808679][ T4851] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 107.855917][ T4851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) syzkaller syzkaller login: [ 107.879507][ T4852] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 107.922342][ T4836] loop2: detected capacity change from 0 to 32768 [ 107.980396][ T4846] exFAT-fs (loop0): invalid start cluster (4278190088) [ 108.082812][ T2304] usb 4-1: USB disconnect, device number 4 [ 108.248098][ T4859] loop4: detected capacity change from 0 to 4096 [ 108.272624][ T4859] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 108.329771][ T4572] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 108.392016][ T4859] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 108.423560][ T4859] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 108.445227][ T4859] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 108.458434][ T4859] ntfs: volume version 3.1. [ 108.524924][ T4572] usb 1-1: device descriptor read/64, error -71 [ 108.595128][ T4189] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 108.659957][ T4861] loop3: detected capacity change from 0 to 256 [ 108.778647][ T26] audit: type=1800 audit(1787343440.571:9): pid=4836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.114" name="bus" dev="loop2" ino=7 res=0 errno=0 [ 108.814192][ T4572] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 108.849310][ T4836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'. [ 108.891109][ T4861] FAT-fs (loop3): Directory bread(block 64) failed [ 108.899199][ T26] audit: type=1800 audit(1787343440.601:10): pid=4836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.114" name="bus" dev="loop2" ino=7 res=0 errno=0 [ 108.930169][ T4861] FAT-fs (loop3): Directory bread(block 65) failed [ 108.939737][ T4856] loop1: detected capacity change from 0 to 40427 [ 108.946458][ T4861] FAT-fs (loop3): Directory bread(block 66) failed [ 108.969683][ T4856] F2FS-fs (loop1): invalid crc value [ 108.977745][ T4861] FAT-fs (loop3): Directory bread(block 67) failed [ 108.986901][ T4861] FAT-fs (loop3): Directory bread(block 68) failed [ 108.994682][ T4861] FAT-fs (loop3): Directory bread(block 69) failed [ 109.014168][ T4572] usb 1-1: device descriptor read/64, error -71 [ 109.033533][ T4856] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.067357][ T4861] FAT-fs (loop3): Directory bread(block 70) failed [ 109.083434][ T4836] overlayfs: conflicting lowerdir path [ 109.103606][ T4861] FAT-fs (loop3): Directory bread(block 71) failed [ 109.117772][ T4861] FAT-fs (loop3): Directory bread(block 72) failed [ 109.134313][ T4572] usb usb1-port1: attempt power cycle [ 109.144622][ T4861] FAT-fs (loop3): Directory bread(block 73) failed [ 109.225925][ T4856] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 109.316627][ T4856] attempt to access beyond end of device [ 109.316627][ T4856] loop1: rw=524288, want=45072, limit=40427 [ 109.428505][ T4187] attempt to access beyond end of device [ 109.428505][ T4187] loop1: rw=2049, want=45104, limit=40427 [ 109.831672][ T4357] read_mapping_page failed! [ 109.849224][ T4357] ERROR: (device loop2): txCommit: [ 109.849224][ T4357] [ 109.863976][ T4357] jfs_write_inode: jfs_commit_inode failed! [ 110.039963][ T4572] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 110.048402][ T4574] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.144348][ T4572] usb 1-1: device descriptor read/8, error -71 [ 110.372740][ T4881] device syzkaller1 entered promiscuous mode [ 110.414305][ T4574] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.425471][ T4572] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 110.454590][ T4574] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.470444][ T4574] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 110.479881][ T4574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.497279][ T4574] usb 5-1: config 0 descriptor?? [ 110.524528][ T4572] usb 1-1: device descriptor read/8, error -71 [ 110.556468][ T4887] loop1: detected capacity change from 0 to 4096 [ 110.585163][ T4887] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 110.644653][ T4572] usb usb1-port1: unable to enumerate USB device [ 110.680482][ T4887] ntfs: volume version 3.1. [ 110.768173][ T4887] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maciceland. You might want to try to use the mount option nls=utf8. [ 110.783087][ T4889] loop0: detected capacity change from 0 to 2048 [ 110.830964][ T4887] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 110.864942][ T4889] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 110.912444][ T4889] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.015769][ T4885] loop3: detected capacity change from 0 to 32768 [ 111.054106][ T4885] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.131 (4885) [ 111.096850][ T4891] loop1: detected capacity change from 0 to 512 [ 111.134966][ T4885] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 111.176067][ T4885] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 111.192481][ T4891] FAT-fs (loop1): Directory bread(block 199916) failed [ 111.205035][ T4895] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.136'. [ 111.217447][ T4873] netlink: 'syz.4.127': attribute type 1 has an invalid length. [ 111.225457][ T4891] FAT-fs (loop1): Directory bread(block 199917) failed [ 111.246659][ T4891] FAT-fs (loop1): Directory bread(block 199918) failed [ 111.254236][ T4873] netlink: 224 bytes leftover after parsing attributes in process `syz.4.127'. [ 111.274167][ T4891] FAT-fs (loop1): Directory bread(block 199919) failed [ 111.279987][ T4885] BTRFS info (device loop3): use zstd compression, level 3 [ 111.297632][ T4891] FAT-fs (loop1): Directory bread(block 199920) failed [ 111.322898][ T4885] BTRFS info (device loop3): using free space tree [ 111.329614][ T4885] BTRFS info (device loop3): has skinny extents [ 111.342120][ T4891] FAT-fs (loop1): Directory bread(block 199921) failed [ 111.351601][ T4891] FAT-fs (loop1): Directory bread(block 199922) failed [ 111.365843][ T4891] FAT-fs (loop1): Directory bread(block 199923) failed [ 111.434167][ T4574] usbhid 5-1:0.0: can't add hid device: -71 [ 111.440409][ T4574] usbhid: probe of 5-1:0.0 failed with error -71 [ 111.456912][ T4891] FAT-fs (loop1): Directory bread(block 199916) failed [ 111.462303][ T4574] usb 5-1: USB disconnect, device number 3 [ 111.496813][ T4891] FAT-fs (loop1): Directory bread(block 199917) failed syzkaller syzkaller login: [ 111.512340][ T4904] loop0: detected capacity change from 0 to 4096 [ 111.751727][ T4885] BTRFS info (device loop3): enabling ssd optimizations [ 111.885380][ T4925] loop1: detected capacity change from 0 to 256 [ 112.244708][ T4925] FAT-fs (loop1): Directory bread(block 64) failed [ 112.338127][ T4925] FAT-fs (loop1): Directory bread(block 65) failed [ 112.524319][ T4925] FAT-fs (loop1): Directory bread(block 66) failed [ 112.530958][ T4925] FAT-fs (loop1): Directory bread(block 67) failed [ 112.664184][ T4925] FAT-fs (loop1): Directory bread(block 68) failed [ 112.670830][ T4925] FAT-fs (loop1): Directory bread(block 69) failed [ 112.715739][ T4925] FAT-fs (loop1): Directory bread(block 70) failed [ 112.722732][ T4925] FAT-fs (loop1): Directory bread(block 71) failed [ 112.740135][ T4925] FAT-fs (loop1): Directory bread(block 72) failed [ 112.775186][ T4925] FAT-fs (loop1): Directory bread(block 73) failed [ 112.919373][ T4941] device syzkaller1 entered promiscuous mode [ 112.928408][ T4939] loop4: detected capacity change from 0 to 2048 [ 113.093744][ T4939] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 113.207231][ T4939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) syzkaller syzkaller login: [ 113.772518][ T4934] loop2: detected capacity change from 0 to 40427 [ 113.830757][ T4934] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 113.865106][ T4934] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 113.915891][ T4934] F2FS-fs (loop2): invalid crc value [ 113.947730][ T4934] F2FS-fs (loop2): Mismatch valid blocks 0 vs. 2 [ 113.974443][ T4934] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 113.985670][ T4961] loop3: detected capacity change from 0 to 512 [ 114.039846][ T4961] FAT-fs (loop3): Directory bread(block 199916) failed [ 114.050416][ T4961] FAT-fs (loop3): Directory bread(block 199917) failed [ 114.077637][ T4961] FAT-fs (loop3): Directory bread(block 199918) failed [ 114.113717][ T4961] FAT-fs (loop3): Directory bread(block 199919) failed [ 114.129555][ T4934] jffs2: notice: (4934) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 114.146235][ T4961] FAT-fs (loop3): Directory bread(block 199920) failed [ 114.146387][ T4961] FAT-fs (loop3): Directory bread(block 199921) failed [ 114.146421][ T4961] FAT-fs (loop3): Directory bread(block 199922) failed [ 114.146453][ T4961] FAT-fs (loop3): Directory bread(block 199923) failed [ 114.154112][ T4572] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 114.209333][ T4961] FAT-fs (loop3): Directory bread(block 199916) failed [ 114.247001][ T4961] FAT-fs (loop3): Directory bread(block 199917) failed [ 114.487103][ T4970] loop0: detected capacity change from 0 to 64 [ 114.494340][ T4934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.143'. [ 114.514318][ T4572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 114.535675][ T4572] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 114.579473][ T4572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 114.624085][ T4572] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 114.669753][ T4572] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 114.705393][ T4572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.737332][ T4572] usb 5-1: config 0 descriptor?? [ 114.876078][ T4965] syz.2.143 (4965): drop_caches: 2 [ 114.994335][ T4572] hdpvr 5-1:0.0: firmware version 0xd dated ­";W|۱adTUK> }1vN`Y# [ 115.195197][ T4949] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 115.213901][ T4949] overlayfs: missing 'lowerdir' [ 115.221699][ T4964] loop1: detected capacity change from 0 to 32768 [ 115.247097][ T4982] udc-core: couldn't find an available UDC or it's busy [ 115.291704][ T4982] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 115.354153][ T4572] hdpvr 5-1:0.0: device init failed [ 115.359512][ T4572] hdpvr: probe of 5-1:0.0 failed with error -12 [ 115.432769][ T4572] usb 5-1: USB disconnect, device number 4 [ 115.470207][ T4964] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 115.642621][ T4975] loop2: detected capacity change from 0 to 32768 [ 115.651307][ T4988] loop0: detected capacity change from 0 to 2048 [ 115.689234][ T4975] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.155 (4975) [ 115.698193][ T4986] loop3: detected capacity change from 0 to 4096 [ 115.742481][ T4975] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 115.758089][ T4975] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 115.769431][ T4975] BTRFS info (device loop2): use zstd compression, level 3 [ 115.790389][ T4975] BTRFS info (device loop2): using free space tree [ 115.800008][ T4975] BTRFS info (device loop2): has skinny extents [ 115.812969][ T4988] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 115.865996][ T4986] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 115.901695][ T4988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.922612][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 115.985647][ T4988] MPTCP: kernel_bind error, err=-98 [ 116.045436][ T4193] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 116.120001][ T5006] FAULT_INJECTION: forcing a failure. [ 116.120001][ T5006] name failslab, interval 1, probability 0, space 0, times 0 [ 116.153349][ T5000] loop4: detected capacity change from 0 to 4096 [ 116.166943][ T5006] CPU: 0 PID: 5006 Comm: syz.3.162 Not tainted syzkaller #0 [ 116.174304][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.184392][ T5006] Call Trace: [ 116.187702][ T5006] [ 116.190666][ T5006] dump_stack_lvl+0x188/0x250 [ 116.195405][ T5006] ? show_regs_print_info+0x20/0x20 [ 116.200649][ T5006] ? load_image+0x410/0x410 [ 116.205209][ T5006] should_fail+0x383/0x4b0 [ 116.209673][ T5006] should_failslab+0x5/0x20 [ 116.214207][ T5006] slab_pre_alloc_hook+0x51/0xc0 [ 116.219185][ T5006] ? skb_clone+0x1bd/0x350 [ 116.223642][ T5006] kmem_cache_alloc+0x3d/0x280 [ 116.228443][ T5006] skb_clone+0x1bd/0x350 [ 116.232727][ T5006] __netlink_deliver_tap+0x3cb/0x7c0 [ 116.238069][ T5006] netlink_deliver_tap+0x16c/0x180 [ 116.243245][ T5006] netlink_unicast+0x759/0x940 [ 116.248058][ T5006] netlink_sendmsg+0x8ba/0xbe0 [ 116.252878][ T5006] ? netlink_getsockopt+0x570/0x570 [ 116.258161][ T5006] ? aa_sock_msg_perm+0x94/0x150 [ 116.263144][ T5006] ? apparmor_socket_sendmsg+0x88/0x230 [ 116.268752][ T5006] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 116.274081][ T5006] ? security_socket_sendmsg+0x7c/0xa0 [ 116.279594][ T5006] ? netlink_getsockopt+0x570/0x570 [ 116.284836][ T5006] ____sys_sendmsg+0x5be/0x8f0 [ 116.289666][ T5006] ? __sys_sendmsg_sock+0x30/0x30 [ 116.294748][ T5006] ? import_iovec+0x6f/0xa0 [ 116.299304][ T5006] ___sys_sendmsg+0x236/0x2e0 [ 116.304026][ T5006] ? __sys_sendmsg+0x290/0x290 [ 116.308872][ T5006] __se_sys_sendmsg+0x1b7/0x2a0 [ 116.313818][ T5006] ? __x64_sys_sendmsg+0x80/0x80 [ 116.318797][ T5006] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 116.324830][ T5006] ? lockdep_hardirqs_on+0x94/0x140 [ 116.330076][ T5006] do_syscall_64+0x4c/0xa0 [ 116.334521][ T5006] ? clear_bhb_loop+0x30/0x80 [ 116.339227][ T5006] ? clear_bhb_loop+0x30/0x80 [ 116.343939][ T5006] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.349878][ T5006] RIP: 0033:0x7f03f0bde0d9 [ 116.354335][ T5006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.373971][ T5006] RSP: 002b:00007f03eee36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.382469][ T5006] RAX: ffffffffffffffda RBX: 00007f03f0e65fa0 RCX: 00007f03f0bde0d9 [ 116.390476][ T5006] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 116.398481][ T5006] RBP: 00007f03eee36090 R08: 0000000000000000 R09: 0000000000000000 [ 116.406483][ T5006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.414484][ T5006] R13: 00007f03f0e66038 R14: 00007f03f0e65fa0 R15: 00007ffe7fcf2d68 [ 116.422511][ T5006] [ 116.510443][ T4975] BTRFS info (device loop2): enabling ssd optimizations [ 116.586143][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 116.586159][ T26] audit: type=1800 audit(1787343448.381:13): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.155" name="bus" dev="loop2" ino=263 res=0 errno=0 syzkaller syzkaller login: [ 116.641771][ T5018] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.766825][ T5000] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 116.807580][ T26] audit: type=1800 audit(1787343448.401:14): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.155" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 116.938267][ T5000] NILFS (loop4): mounting fs with errors [ 117.198753][ T5024] loop0: detected capacity change from 0 to 512 [ 117.287627][ T5000] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 117.304859][ T5027] netlink: 44 bytes leftover after parsing attributes in process `syz.1.166'. [ 117.427861][ T5000] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 117.447311][ T5027] syz.1.166 (5027): /proc/5025/oom_adj is deprecated, please use /proc/5025/oom_score_adj instead. [ 117.481849][ T5024] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 117.542241][ T5026] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 117.570846][ T5024] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.583258][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 117.596345][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 117.608997][ T26] audit: type=1800 audit(1787343449.401:15): pid=5026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.161" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 117.610986][ T5026] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 159744 [ 117.721330][ T5033] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 117.721330][ T5033] The task syz.1.166 (5033) triggered the difference, watch for misbehavior. [ 117.743190][ T5016] loop3: detected capacity change from 0 to 32768 [ 117.752908][ T5026] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 117.806929][ T5016] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.164 (5016) [ 117.837019][ T5026] NILFS (loop4): error -5 truncating bmap (ino=15) [ 117.901265][ T5016] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 117.937578][ T5016] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 117.959244][ T5016] BTRFS info (device loop3): use zstd compression, level 3 [ 117.986253][ T5016] BTRFS info (device loop3): using free space tree [ 117.992830][ T5016] BTRFS info (device loop3): has skinny extents [ 118.098966][ T5041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.167'. [ 118.206257][ T5039] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 118.224097][ T5047] capability: warning: `syz.0.168' uses 32-bit capabilities (legacy support in use) [ 118.304107][ T5039] EXT4-fs (loop1): group descriptors corrupted! [ 118.410778][ T5016] BTRFS info (device loop3): enabling ssd optimizations [ 118.455529][ T5041] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.167 (5041) [ 118.636793][ T5071] 9pnet: Insufficient options for proto=fd [ 118.751279][ T5072] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 118.785839][ T5075] set_capacity_and_notify: 3 callbacks suppressed [ 118.789948][ T5075] loop1: detected capacity change from 0 to 256 [ 118.893439][ T5072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.933483][ T5072] MPTCP: kernel_bind error, err=-98 [ 118.952588][ T5075] exfat: Deprecated parameter 'namecase' [ 119.026241][ T5075] exfat: Deprecated parameter 'namecase' [ 119.044885][ T5078] device syzkaller1 entered promiscuous mode [ 119.082818][ T5075] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 119.148872][ T4286] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (4286) [ 119.223711][ T5071] exFAT-fs (loop1): invalid start cluster (4278190088) [ 119.409810][ T4280] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 119.431220][ T5087] program syz.3.176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.562856][ T5089] device syzkaller1 entered promiscuous mode [ 119.587107][ T5091] loop4: detected capacity change from 0 to 256 [ 119.668164][ T4228] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 119.691672][ T5091] FAT-fs (loop4): Directory bread(block 64) failed [ 119.704107][ T5091] FAT-fs (loop4): Directory bread(block 65) failed [ 119.721213][ T5091] FAT-fs (loop4): Directory bread(block 66) failed [ 119.739131][ T5091] FAT-fs (loop4): Directory bread(block 67) failed [ 119.754132][ T5091] FAT-fs (loop4): Directory bread(block 68) failed [ 119.764301][ T5091] FAT-fs (loop4): Directory bread(block 69) failed [ 119.777000][ T5083] loop2: detected capacity change from 0 to 32768 [ 119.783785][ T5091] FAT-fs (loop4): Directory bread(block 70) failed [ 119.820215][ T5091] FAT-fs (loop4): Directory bread(block 71) failed [ 119.832744][ T5091] FAT-fs (loop4): Directory bread(block 72) failed [ 119.879732][ T4228] usb 2-1: device descriptor read/64, error -71 [ 119.886594][ T5091] FAT-fs (loop4): Directory bread(block 73) failed [ 120.044074][ T4280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.070173][ T4280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.496070][ T5097] sctp: [Deprecated]: syz.3.180 (pid 5097) Use of int in maxseg socket option. [ 120.496070][ T5097] Use struct sctp_assoc_value instead [ 120.621302][ T4280] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 120.703369][ T4280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.747569][ T4228] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 120.924296][ T4280] usb 1-1: config 0 descriptor?? [ 120.997937][ T5099] loop2: detected capacity change from 0 to 4096 [ 121.091996][ T4228] usb 2-1: device descriptor read/64, error -71 [ 121.153395][ T5099] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 121.252052][ T4228] usb usb2-port1: attempt power cycle [ 121.324358][ T5099] ntfs: volume version 3.1. [ 121.510572][ T5099] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maciceland. You might want to try to use the mount option nls=utf8. [ 121.571115][ T5099] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 121.741353][ T4350] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 121.858848][ T5081] udc-core: couldn't find an available UDC or it's busy [ 121.883631][ T263] block nbd1: Attempted send on invalid socket [ 121.892554][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.938064][ T5081] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 122.256405][ T5081] netlink: 'syz.0.177': attribute type 1 has an invalid length. [ 122.431430][ T5081] netlink: 224 bytes leftover after parsing attributes in process `syz.0.177'. [ 122.630854][ T5112] loop2: detected capacity change from 0 to 512 [ 122.914160][ T4350] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 122.943127][ T5112] FAT-fs (loop2): Directory bread(block 199916) failed [ 123.052595][ T5112] FAT-fs (loop2): Directory bread(block 199917) failed [ 123.104179][ T4280] usbhid 1-1:0.0: can't add hid device: -71 [ 123.110534][ T4280] usbhid: probe of 1-1:0.0 failed with error -71 [ 123.138453][ T5112] FAT-fs (loop2): Directory bread(block 199918) failed [ 123.198193][ T5112] FAT-fs (loop2): Directory bread(block 199919) failed [ 123.256887][ T5112] FAT-fs (loop2): Directory bread(block 199920) failed [ 123.309083][ T5112] FAT-fs (loop2): Directory bread(block 199921) failed [ 123.370732][ T5112] FAT-fs (loop2): Directory bread(block 199922) failed [ 123.401045][ T5112] FAT-fs (loop2): Directory bread(block 199923) failed [ 123.731773][ T5112] FAT-fs (loop2): Directory bread(block 199916) failed [ 123.806797][ T5112] FAT-fs (loop2): Directory bread(block 199917) failed [ 124.698386][ T4350] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.709533][ T4280] usb 1-1: USB disconnect, device number 8 [ 124.718787][ T4350] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.730223][ T4350] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 124.743336][ T4350] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.750096][ T4350] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 124.759265][ T4350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.769185][ T4350] usb 4-1: config 0 descriptor?? [ 124.804161][ T4350] usb 4-1: can't set config #0, error -71 [ 124.811210][ T4350] usb 4-1: USB disconnect, device number 5 [ 124.964942][ T5123] loop0: detected capacity change from 0 to 2048 [ 125.031904][ T5123] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 125.081072][ T5123] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.132063][ T5123] MPTCP: kernel_bind error, err=-98 [ 125.183682][ T5134] 9pnet: Insufficient options for proto=fd [ 125.296553][ T5141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.197'. [ 125.350632][ T5144] jffs2: notice: (5144) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 125.395862][ T5139] loop2: detected capacity change from 0 to 256 [ 125.464920][ T5139] exfat: Deprecated parameter 'namecase' [ 125.484820][ T5139] exfat: Deprecated parameter 'namecase' [ 126.469004][ T5139] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 126.724298][ T4350] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 126.774055][ T4341] usb 4-1: new high-speed USB device number 6 using dummy_hcd syzkaller syzkaller login: [ 127.004838][ T4350] usb 1-1: device descriptor read/64, error -71 [ 127.084267][ T4341] usb 4-1: Using ep0 maxpacket: 32 [ 127.205587][ T4341] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 127.381877][ T4350] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 127.389995][ T5134] exFAT-fs (loop2): invalid start cluster (4278190088) [ 127.400175][ T4341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.411079][ T4341] usb 4-1: config 0 descriptor?? [ 127.606358][ T5138] loop4: detected capacity change from 0 to 32768 [ 127.624193][ T4350] usb 1-1: device descriptor read/64, error -71 [ 127.681780][ T4341] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 127.794222][ T1346] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 127.853402][ T4350] usb usb1-port1: attempt power cycle [ 127.868539][ T4341] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.895658][ T4341] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 127.903296][ T4341] usb 4-1: media controller created [ 127.953790][ T4341] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.021920][ T1346] usb 3-1: device descriptor read/64, error -71 [ 128.094319][ T4572] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.324141][ T1346] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 128.474224][ T4341] az6027: usb out operation failed. (-71) [ 128.494113][ T4341] az6027: usb out operation failed. (-71) [ 128.499943][ T4341] stb0899_attach: Driver disabled by Kconfig [ 128.516796][ T4341] az6027: no front-end attached [ 128.516796][ T4341] [ 128.527671][ T5173] loop3: detected capacity change from 0 to 2048 [ 128.534826][ T1346] usb 3-1: device descriptor read/64, error -71 [ 128.541211][ T4572] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 128.544828][ T4341] az6027: usb out operation failed. (-71) [ 128.557492][ T4572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.573303][ T4341] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 128.611565][ T4572] usb 2-1: config 0 descriptor?? [ 128.620343][ T4341] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 128.652404][ T5173] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 128.662875][ T1346] usb usb3-port1: attempt power cycle [ 128.691463][ T4341] dvb-usb: schedule remote query interval to 400 msecs. [ 128.710536][ T5173] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.734276][ T4350] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 128.752310][ T4341] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. syzkaller syzkaller login: [ 128.813504][ T4341] usb 4-1: USB disconnect, device number 6 [ 128.824096][ T4350] usb 1-1: device descriptor read/8, error -71 [ 129.016871][ T4341] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 129.094193][ T4350] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 129.236186][ T4350] usb 1-1: device descriptor read/8, error -71 [ 129.384959][ T4350] usb usb1-port1: unable to enumerate USB device [ 129.937705][ T4572] usbhid 2-1:0.0: can't add hid device: -71 [ 129.943873][ T4572] usbhid: probe of 2-1:0.0 failed with error -71 [ 129.954804][ T4572] usb 2-1: USB disconnect, device number 7 [ 130.008807][ T5205] batman_adv: batadv0: Adding interface: veth0 [ 130.015442][ T5205] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.042192][ T5205] batman_adv: batadv0: Interface activated: veth0 [ 131.255324][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 131.299189][ T5255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.240'. [ 131.329947][ T5255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 131.584092][ T4350] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 132.198879][ T4350] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 132.213458][ T4350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.229698][ T4350] usb 5-1: Product: syz [ 132.250486][ T4350] usb 5-1: Manufacturer: syz [ 132.255843][ T4350] usb 5-1: SerialNumber: syz [ 132.294764][ T5282] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.542509][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 132.556251][ T5288] program syz.0.250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.584940][ T5289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.251'. [ 132.592697][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 132.700161][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 132.761245][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 132.772506][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.772556][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.812569][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 132.835731][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 132.861173][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 132.877298][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 133.089730][ T5294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 134.731369][ T5298] syz.1.254 (5298) used greatest stack depth: 20368 bytes left [ 134.846741][ T5302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 135.046263][ T5302] syz.2.257 (5302) used greatest stack depth: 19264 bytes left [ 136.920476][ T4350] rtl8150 5-1:1.0: couldn't reset the device [ 139.236100][ T4350] rtl8150: probe of 5-1:1.0 failed with error -5 [ 139.262384][ T4350] usb 5-1: USB disconnect, device number 5 [ 139.492956][ T5330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.929663][ T5343] device dummy0 entered promiscuous mode [ 139.953328][ T5343] device dummy0 left promiscuous mode [ 140.317552][ T5348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.330813][ T5348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.357390][ T5348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.419020][ T5348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.946910][ T5357] overlayfs: unrecognized mount option "verity=on" or missing value [ 141.913272][ T5376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.280'. [ 142.061059][ T5378] jffs2: notice: (5378) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 142.322346][ T5383] Device name cannot be null; rc = [-22] [ 142.454640][ T5385] Need at least one configuration in g1. [ 142.501037][ T5385] udc dummy_udc.0: failed to start g1: -22 [ 144.770832][ T5392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.285'. [ 144.860010][ T5405] process 'syz.0.289' launched '/dev/fd/-1' with NULL argv: empty string added [ 145.026604][ T5418] misc userio: Invalid payload size [ 145.352314][ T5438] binder: 5437:5438 ioctl c00c6211 0 returned -22 [ 145.449455][ T5439] gadgetfs: bound to dummy_udc driver [ 145.594081][ T4429] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.724145][ T4339] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 145.824053][ C1] gadgetfs: connected [ 145.830868][ T4339] gadgetfs: disconnected [ 146.083979][ C1] gadgetfs: connected [ 146.124666][ T4339] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 146.162056][ T5437] gadgetfs: suspended from state 3 [ 146.167937][ T5437] gadgetfs: disconnected [ 146.215271][ T4339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.314725][ T4339] usb 1-1: can't set config #1, error -71 [ 146.361382][ T4339] usb 1-1: USB disconnect, device number 13 [ 146.384020][ T4429] usb 3-1: Using ep0 maxpacket: 8 [ 146.524266][ T4429] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.541731][ T4429] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 146.550930][ T4429] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 146.566931][ T4429] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 146.579555][ T4429] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 146.592377][ T4429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.661751][ T4429] hub 3-1:1.0: bad descriptor, ignoring hub [ 146.670432][ T4429] hub: probe of 3-1:1.0 failed with error -5 [ 146.682071][ T4429] cdc_wdm 3-1:1.0: skipping garbage [ 146.687717][ T4429] cdc_wdm 3-1:1.0: skipping garbage [ 146.707593][ T4429] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 146.713747][ T4429] cdc_wdm 3-1:1.0: Unknown control protocol [ 146.764101][ T4350] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 146.794206][ T4232] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 147.018641][ T4350] usb 4-1: Using ep0 maxpacket: 32 [ 147.084111][ T4232] usb 5-1: Using ep0 maxpacket: 8 [ 147.098253][ T5446] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.107334][ T5446] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.144798][ T4350] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 147.161501][ T4350] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 147.180207][ T4350] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 147.192453][ T4350] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 147.211589][ T4350] usb 4-1: config 0 interface 0 has no altsetting 0 [ 147.254062][ T4232] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.281489][ T4232] usb 5-1: config 0 has no interfaces? [ 147.289672][ T4232] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 147.301654][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.323547][ T4232] usb 5-1: config 0 descriptor?? [ 147.398609][ T4350] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 147.419216][ T4350] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 147.444876][ T4350] usb 4-1: Product: syz [ 147.458577][ T4350] usb 4-1: Manufacturer: syz [ 147.473563][ T4350] usb 4-1: SerialNumber: syz [ 147.485928][ T4350] usb 4-1: config 0 descriptor?? [ 147.525672][ T4350] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 147.552976][ T4350] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 147.580896][ T5435] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 147.982177][ T4280] usb 4-1: USB disconnect, device number 7 [ 147.993929][ T4280] ldusb 4-1:0.0: LD USB Device #1 now disconnected [ 148.090340][ T5446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.152883][ T5446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.357345][ T4339] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 148.644846][ T4339] usb 1-1: Dual-Role OTG device on HNP port [ 148.664212][ T4339] usb 1-1: New USB device found, idVendor=0000, idProduct=a4a7, bcdDevice= 5.15 [ 148.673722][ T4339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.789031][ T4339] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 149.157317][ T5465] ptrace attach of ""[5466] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5465] [ 149.226104][ T4339] usb 3-1: USB disconnect, device number 5 [ 149.343752][ T4232] usb 5-1: USB disconnect, device number 6 [ 149.576371][ T5446] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.587294][ T5446] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.596593][ T5446] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.605687][ T5446] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.759746][ T5496] autofs4:pid:5496:autofs_fill_super: called with bogus options [ 151.822543][ T5504] device syzkaller0 entered promiscuous mode [ 152.841839][ T26] audit: type=1326 audit(1787343483.629:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.2.331" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb54f7450d9 code=0x0 [ 153.360939][ T5538] jffs2: notice: (5538) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 154.256941][ T5543] loop0: detected capacity change from 0 to 3904 [ 154.393555][ T5546] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 154.453581][ T5546] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 154.506071][ T5546] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 154.535601][ T5546] loop0: [ 154.609276][ T4429] hid-generic 0005:10CF:3737.0001: item fetching failed at offset 0/1 [ 154.701492][ T4429] hid-generic: probe of 0005:10CF:3737.0001 failed with error -22 [ 154.830016][ T3560] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 154.872236][ T3560] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 154.916062][ T3560] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 154.936722][ T3560] loop0: [ 155.079375][ T5561] binder: 5555:5561 unknown command 1074553619 [ 155.239672][ T5561] binder: 5555:5561 ioctl c0306201 200000000040 returned -22 [ 158.457386][ T5616] netlink: 60 bytes leftover after parsing attributes in process `syz.0.363'. [ 158.809714][ T4196] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 158.943193][ T26] audit: type=1400 audit(1787343489.729:17): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=5630 comm="syz.0.369" name="p" offset=48 [ 159.763773][ T5672] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 160.710532][ T5694] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 162.737000][ T5718] overlayfs: missing 'workdir' [ 163.633869][ T5750] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 164.597275][ T5778] device macvlan0 entered promiscuous mode [ 165.415601][ T5790] netlink: 80 bytes leftover after parsing attributes in process `syz.3.431'. [ 165.450341][ T4429] Bluetooth: hci2: command 0x0406 tx timeout [ 166.667439][ T5810] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 166.674534][ T5810] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 166.731802][ T5810] vhci_hcd vhci_hcd.0: Device attached [ 166.914182][ T4429] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 166.984082][ T4574] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 167.284107][ T4429] usb 5-1: config 0 has no interfaces? [ 168.420087][ T4429] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 168.538724][ T4429] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.549168][ T4429] usb 5-1: config 0 descriptor?? [ 168.788206][ T5845] overlayfs: unrecognized mount option "verity=on" or missing value [ 168.807116][ T4572] usb 5-1: USB disconnect, device number 7 [ 168.813443][ T5811] vhci_hcd: connection closed [ 168.824200][ T4298] vhci_hcd: stop threads [ 168.855202][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 168.868894][ T4298] vhci_hcd: release socket [ 168.889027][ T4298] vhci_hcd: disconnect device [ 169.274038][ T5085] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 169.541064][ T5867] device vlan2 entered promiscuous mode [ 169.582815][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 169.628642][ T5867] device hsr_slave_0 left promiscuous mode [ 169.647780][ T5085] usb 3-1: config 0 has no interfaces? [ 169.653360][ T5085] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 169.688146][ T5085] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.719616][ T5085] usb 3-1: config 0 descriptor?? [ 169.983544][ T4429] usb 3-1: USB disconnect, device number 6 [ 170.709500][ T5886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.463'. [ 171.257956][ T5903] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 171.435454][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.509888][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.606792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.996738][ T5914] syz.3.474[5914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.996851][ T5914] syz.3.474[5914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.270892][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 172.680862][ T5936] autofs4:pid:5936:autofs_fill_super: called with bogus options [ 173.245240][ T144] bond0: (slave bond_slave_0): interface is now down [ 173.281934][ T144] bond0: (slave bond_slave_1): interface is now down [ 173.329472][ T144] bond0: now running without any active interface! [ 173.438196][ T5955] block device autoloading is deprecated and will be removed. [ 173.826889][ T26] audit: type=1326 audit(1787343504.619:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.4.493" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177c4cc0d9 code=0x7ffc0000 [ 173.945114][ T26] audit: type=1326 audit(1787343504.679:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.4.493" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f177c4cc0d9 code=0x7ffc0000 [ 174.036567][ T26] audit: type=1326 audit(1787343504.679:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.4.493" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177c4cc0d9 code=0x7ffc0000 [ 174.162492][ T26] audit: type=1326 audit(1787343504.679:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.4.493" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177c4cc0d9 code=0x7ffc0000 [ 174.278431][ T26] audit: type=1326 audit(1787343504.689:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.4.493" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f177c4cc0d9 code=0x7ffc0000 [ 174.411020][ T26] audit: type=1326 audit(1787343504.689:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.4.493" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177c4cc0d9 code=0x7ffc0000 [ 174.508786][ T26] audit: type=1326 audit(1787343504.689:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.4.493" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177c4cc0d9 code=0x7ffc0000 [ 174.616101][ T26] audit: type=1326 audit(1787343504.689:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.4.493" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f177c4cc0d9 code=0x7ffc0000 [ 174.704376][ T26] audit: type=1326 audit(1787343504.689:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.4.493" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f177c4c5e57 code=0x7ffc0000 [ 174.782493][ T26] audit: type=1326 audit(1787343504.689:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5958 comm="syz.4.493" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f177c46d459 code=0x7ffc0000 [ 174.811331][ T5978] mmap: syz.1.500 (5978) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 175.117651][ T5987] device syzkaller0 entered promiscuous mode [ 175.503698][ T5999] autofs4:pid:5999:autofs_fill_super: called with bogus options [ 176.348436][ T6016] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 178.309713][ T6057] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 178.524098][ T4350] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 179.334163][ T4350] usb 2-1: Using ep0 maxpacket: 32 [ 179.454264][ T4350] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 179.474267][ T4350] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 179.510237][ T4350] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 179.564097][ T4339] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 179.834147][ T4350] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 179.854146][ T4350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.874527][ T4350] usb 2-1: Product: syz [ 179.878749][ T4350] usb 2-1: Manufacturer: syz [ 179.891071][ T6074] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 179.897744][ T6074] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 179.911117][ T6074] vhci_hcd vhci_hcd.0: Device attached [ 179.918448][ T4350] usb 2-1: SerialNumber: syz [ 179.994170][ T4339] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 180.014264][ T4339] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.021278][ T4339] usb 5-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 180.031306][ T4339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.046447][ T4350] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 180.065008][ T4339] usb 5-1: config 0 descriptor?? [ 180.074182][ T4350] imon 2-1:155.0: unable to initialize intf0, err -19 [ 180.091571][ T4350] imon:imon_probe: failed to initialize context! [ 180.099536][ T6065] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 180.108261][ T4350] imon 2-1:155.0: unable to register, err -19 [ 180.264056][ T4350] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 180.441394][ T6075] vhci_hcd: connection reset by peer [ 180.448545][ T770] vhci_hcd: stop threads [ 180.453090][ T770] vhci_hcd: release socket [ 180.468694][ T770] vhci_hcd: disconnect device [ 180.577334][ T4339] hid-generic 0003:28DE:1205.0002: unknown main item tag 0x3 [ 180.617545][ T4339] hid-generic 0003:28DE:1205.0002: unknown main item tag 0x0 [ 180.644378][ T4339] hid-generic 0003:28DE:1205.0002: unknown main item tag 0x0 [ 180.664331][ T4339] hid-generic 0003:28DE:1205.0002: unknown main item tag 0x0 [ 180.673157][ T4339] hid-generic 0003:28DE:1205.0002: unknown main item tag 0x0 [ 180.681250][ T4339] hid-generic 0003:28DE:1205.0002: unknown main item tag 0x0 [ 180.688989][ T4339] hid-generic 0003:28DE:1205.0002: unknown main item tag 0x0 [ 180.697183][ T4339] hid-generic 0003:28DE:1205.0002: unknown main item tag 0x0 [ 180.722726][ T4339] hid-generic 0003:28DE:1205.0002: hidraw0: USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0 [ 180.779821][ T4574] usb 5-1: USB disconnect, device number 8 [ 180.993661][ T6089] fido_id[6089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 181.836440][ T263] blk_update_request: I/O error, dev sda, sector 819510 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 181.848114][ T263] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2039 starting block 102439) [ 181.859960][ T263] Buffer I/O error on device sda1, logical block 102400 [ 181.868353][ T263] blk_update_request: I/O error, dev sda, sector 827694 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 181.879762][ T263] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2039 starting block 103462) [ 181.891438][ T263] Buffer I/O error on device sda1, logical block 103423 [ 181.901442][ T263] blk_update_request: I/O error, dev sda, sector 790838 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 0 [ 181.912818][ T263] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2038 starting block 98856) [ 181.924590][ T263] Buffer I/O error on device sda1, logical block 98816 [ 181.931458][ T263] Buffer I/O error on device sda1, logical block 98817 [ 181.939007][ T263] blk_update_request: I/O error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 181.950513][ T263] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 100391) [ 181.962113][ T263] Buffer I/O error on device sda1, logical block 100352 [ 181.969543][ T263] blk_update_request: I/O error, dev sda, sector 811310 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 181.980936][ T263] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2035 starting block 101414) [ 181.992550][ T263] Buffer I/O error on device sda1, logical block 101375 [ 182.000429][ T263] blk_update_request: I/O error, dev sda, sector 753974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 182.011759][ T263] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 94247) [ 182.023303][ T263] Buffer I/O error on device sda1, logical block 94208 [ 182.032494][ T263] blk_update_request: I/O error, dev sda, sector 762158 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 182.043776][ T263] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2030 starting block 95270) [ 182.055761][ T263] Buffer I/O error on device sda1, logical block 95231 [ 182.062748][ T263] blk_update_request: I/O error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 182.074251][ T263] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 96295) [ 182.086425][ T263] Buffer I/O error on device sda1, logical block 96256 [ 182.093569][ T263] blk_update_request: I/O error, dev sda, sector 778542 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 182.105100][ T263] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2032 starting block 97318) [ 182.116787][ T263] Buffer I/O error on device sda1, logical block 97279 [ 182.123814][ T263] blk_update_request: I/O error, dev sda, sector 737590 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 182.136498][ T263] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2029 starting block 92199) [ 182.166258][ T3522] Aborting journal on device sda1-8. [ 182.177652][ T5085] usb 2-1: USB disconnect, device number 8 [ 182.197513][ T263] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 182.212564][ T6111] Buffer I/O error on dev sda1, logical block 221, lost async page write [ 182.235350][ T3522] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 182.248511][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 182.304814][ T263] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 182.318773][ T4175] EXT4-fs (sda1): I/O error while writing superblock [ 182.342461][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 182.377714][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 182.422479][ T263] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 182.436824][ T4175] EXT4-fs (sda1): I/O error while writing superblock [ 182.488113][ T6105] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.539: Detected aborted journal [ 182.505550][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 182.512268][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 182.541830][ T263] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 182.553256][ T6105] EXT4-fs (sda1): I/O error while writing superblock [ 182.572036][ T6105] EXT4-fs (sda1): Remounting filesystem read-only [ 182.583398][ T6110] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.540: Detected aborted journal [ 182.598067][ T263] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 182.606604][ T4175] EXT4-fs (sda1): I/O error while writing superblock [ 182.613303][ T4175] EXT4-fs (sda1): Remounting filesystem read-only [ 182.623003][ T6105] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.539: Detected aborted journal [ 182.649675][ T6105] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 182.667621][ T6112] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.541: Detected aborted journal [ 182.681635][ T4175] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 182.703492][ T6105] EXT4-fs (sda1): I/O error while writing superblock [ 182.710649][ T6110] EXT4-fs (sda1): previous I/O error to superblock detected [ 182.721063][ T6112] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 182.730316][ T4175] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 182.742680][ T6110] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.540: Detected aborted journal [ 182.761122][ T6112] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.541: Detected aborted journal [ 182.772322][ T4175] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 182.797183][ T6113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.541'. [ 182.867567][ T6094] smpboot: CPU 1 is now offline [ 182.891310][ T6111] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 182.919822][ T6090] ceph: No mds server is up or the cluster is laggy [ 183.506793][ T6129] batman_adv: batadv0: Adding interface: veth0 [ 183.555596][ T6129] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.732725][ T6129] batman_adv: batadv0: Interface activated: veth0 [ 183.756235][ T6133] batman_adv: batadv0: Interface deactivated: veth0 [ 183.798053][ T6133] batman_adv: batadv0: Removing interface: veth0 [ 183.852357][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.886445][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.405887][ T4350] vhci_hcd: vhci_device speed not set [ 186.026921][ T6157] udc-core: couldn't find an available UDC or it's busy [ 186.090860][ T6157] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 186.494194][ T5085] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 186.651855][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 186.651867][ T26] audit: type=1400 audit(2000000003.330:85): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=6188 comm="syz.3.572" name="p" offset=48 [ 186.878683][ T5085] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 186.908791][ T5085] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 186.934575][ T5085] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 186.960064][ T5085] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 186.991461][ T5085] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.000090][ T4232] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 187.054394][ T6170] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.086788][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 187.097069][ T5085] cyberjack 5-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 187.135547][ T5085] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 187.223262][ T4574] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 187.308344][ T5085] usb 5-1: USB disconnect, device number 9 [ 187.329382][ T5085] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 187.347156][ T5085] cyberjack 5-1:1.0: device disconnected [ 187.411082][ T4572] Bluetooth: hci0: command 0x0406 tx timeout [ 187.422311][ T6207] EXT4-fs error: 96 callbacks suppressed [ 187.422323][ T6207] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.581: Detected aborted journal [ 187.447551][ T6207] EXT4-fs: 95 callbacks suppressed [ 187.447562][ T6207] EXT4-fs (sda1): Remounting filesystem read-only [ 187.465119][ T6207] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.581: Detected aborted journal [ 187.480548][ T6207] EXT4-fs (sda1): Remounting filesystem read-only [ 187.487784][ T4572] Bluetooth: hci3: command 0x0406 tx timeout [ 187.493807][ T4574] usb 4-1: Using ep0 maxpacket: 32 [ 187.503475][ T6208] udc-core: couldn't find an available UDC or it's busy [ 187.511283][ T4572] Bluetooth: hci1: command 0x0406 tx timeout [ 187.520117][ T6208] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 187.556745][ T4232] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 187.568050][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.578782][ T4232] usb 2-1: Product: syz [ 187.582951][ T4232] usb 2-1: Manufacturer: syz [ 187.588279][ T4232] usb 2-1: SerialNumber: syz [ 187.624181][ T4574] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 187.632895][ T4574] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 187.650891][ T4574] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 187.663363][ T4574] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 187.679236][ T4574] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.844139][ T4574] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 187.867040][ T6209] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.582: Detected aborted journal [ 187.880694][ T4574] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 187.890178][ T4574] usb 4-1: Product: syz [ 187.896794][ T6209] EXT4-fs (sda1): Remounting filesystem read-only [ 187.903400][ T4574] usb 4-1: Manufacturer: syz [ 187.908289][ T4574] usb 4-1: SerialNumber: syz [ 187.918414][ T6209] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.582: Detected aborted journal [ 187.936689][ T4574] usb 4-1: config 0 descriptor?? [ 187.948102][ T6209] EXT4-fs (sda1): Remounting filesystem read-only [ 187.985416][ T4574] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 188.010161][ T6211] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.583: Detected aborted journal [ 188.026549][ T4574] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 188.049990][ T4269] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 188.068845][ T6211] EXT4-fs (sda1): Remounting filesystem read-only [ 188.095534][ T6211] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.583: Detected aborted journal [ 188.109421][ T4269] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 188.136863][ T6212] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.584: Detected aborted journal [ 188.151474][ T4269] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0 [ 188.163434][ T6211] EXT4-fs (sda1): Remounting filesystem read-only [ 188.173610][ T6212] EXT4-fs (sda1): Remounting filesystem read-only [ 188.188276][ T6196] EXT4-fs (sda1): Remounting filesystem read-only [ 189.085855][ T4194] ------------[ cut here ]------------ [ 189.091957][ T4194] WARNING: CPU: 0 PID: 4194 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x24f/0x450 [ 189.103173][ T4194] Modules linked in: [ 189.107176][ T4194] CPU: 0 PID: 4194 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 189.115129][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.125493][ T4194] Workqueue: hci2 hci_conn_timeout [ 189.130801][ T4194] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 189.136837][ T4194] Code: 8b 8d e8 44 06 de f8 48 8b 35 85 fd aa 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 b9 6d f8 e8 e1 e1 98 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 189.157597][ T4194] RSP: 0018:ffffc90002f2fc08 EFLAGS: 00010293 [ 189.164084][ T4194] RAX: ffffffff88e01baf RBX: ffff888019984138 RCX: ffff888079028000 [ 189.172199][ T4194] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.180963][ T4194] RBP: 00000000ffffffff R08: ffff888019984013 R09: 1ffff11003330802 [ 189.189297][ T4194] R10: dffffc0000000000 R11: ffffed1003330803 R12: ffff88801b9d0808 [ 189.198280][ T4194] R13: dffffc0000000000 R14: ffff888019984000 R15: ffff888019984010 [ 189.206834][ T4194] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 189.216577][ T4194] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.223454][ T4194] CR2: 0000200000008000 CR3: 000000002aca8000 CR4: 00000000003506f0 [ 189.232603][ T4194] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.240975][ T4194] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.249428][ T4194] Call Trace: [ 189.252831][ T4194] [ 189.255917][ T4194] process_one_work+0x867/0xff0 [ 189.261113][ T4194] ? worker_detach_from_pool+0x240/0x240 [ 189.266933][ T4194] ? lockdep_hardirqs_off+0x70/0x100 [ 189.272341][ T4194] ? _raw_spin_lock_irq+0xb7/0xf0 [ 189.277819][ T4194] ? _raw_spin_lock_irqsave+0x100/0x100 [ 189.283503][ T4194] ? wq_worker_running+0x97/0x170 [ 189.288938][ T4194] worker_thread+0xad7/0x12a0 [ 189.293762][ T4194] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 189.300575][ T4194] kthread+0x42e/0x520 [ 189.304929][ T4194] ? rcu_lock_release+0x20/0x20 [ 189.309889][ T4194] ? kthread_blkcg+0xd0/0xd0 [ 189.314825][ T4194] ret_from_fork+0x1f/0x30 [ 189.319376][ T4194] [ 189.322489][ T4194] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 189.329770][ T4194] CPU: 0 PID: 4194 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 189.337323][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.347397][ T4194] Workqueue: hci2 hci_conn_timeout [ 189.352518][ T4194] Call Trace: [ 189.355796][ T4194] [ 189.358749][ T4194] dump_stack_lvl+0x188/0x250 [ 189.363436][ T4194] ? show_regs_print_info+0x20/0x20 [ 189.368649][ T4194] ? load_image+0x410/0x410 [ 189.373263][ T4194] panic+0x2f8/0x850 [ 189.377163][ T4194] ? bpf_jit_dump+0xd0/0xd0 [ 189.381778][ T4194] ? ret_from_fork+0x1f/0x30 [ 189.386372][ T4194] ? hci_conn_timeout+0x24f/0x450 [ 189.391401][ T4194] __warn+0x248/0x2b0 [ 189.395386][ T4194] ? hci_conn_timeout+0x24f/0x450 [ 189.400414][ T4194] report_bug+0x1b9/0x2e0 [ 189.404747][ T4194] handle_bug+0x3a/0x70 [ 189.408916][ T4194] exc_invalid_op+0x16/0x40 [ 189.413859][ T4194] asm_exc_invalid_op+0x16/0x20 [ 189.418714][ T4194] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 189.424373][ T4194] Code: 8b 8d e8 44 06 de f8 48 8b 35 85 fd aa 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 76 b9 6d f8 e8 e1 e1 98 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 189.444063][ T4194] RSP: 0018:ffffc90002f2fc08 EFLAGS: 00010293 [ 189.450141][ T4194] RAX: ffffffff88e01baf RBX: ffff888019984138 RCX: ffff888079028000 [ 189.458112][ T4194] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.466081][ T4194] RBP: 00000000ffffffff R08: ffff888019984013 R09: 1ffff11003330802 [ 189.474050][ T4194] R10: dffffc0000000000 R11: ffffed1003330803 R12: ffff88801b9d0808 [ 189.482015][ T4194] R13: dffffc0000000000 R14: ffff888019984000 R15: ffff888019984010 [ 189.489986][ T4194] ? hci_conn_timeout+0x24f/0x450 [ 189.495014][ T4194] ? hci_conn_timeout+0x24f/0x450 [ 189.500036][ T4194] process_one_work+0x867/0xff0 [ 189.504916][ T4194] ? worker_detach_from_pool+0x240/0x240 [ 189.510547][ T4194] ? lockdep_hardirqs_off+0x70/0x100 [ 189.515832][ T4194] ? _raw_spin_lock_irq+0xb7/0xf0 [ 189.520851][ T4194] ? _raw_spin_lock_irqsave+0x100/0x100 [ 189.526395][ T4194] ? wq_worker_running+0x97/0x170 [ 189.531418][ T4194] worker_thread+0xad7/0x12a0 [ 189.536106][ T4194] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 189.542011][ T4194] kthread+0x42e/0x520 [ 189.546081][ T4194] ? rcu_lock_release+0x20/0x20 [ 189.551450][ T4194] ? kthread_blkcg+0xd0/0xd0 [ 189.556043][ T4194] ret_from_fork+0x1f/0x30 [ 189.560476][ T4194] [ 189.563558][ T4194] Kernel Offset: disabled [ 189.568167][ T4194] Rebooting in 86400 seconds..